Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/e7yRzPuSLWwQIrlifgLgMrdTLj0.roa
File: e7yRzPuSLWwQIrlifgLgMrdTLj0.roa (raw, json)
Hash identifier: Jkl7F9UGg+Nf4ton3gW2hiQVkwvPETGkyESWSLpvTLw=
Subject key identifier: 7B:BC:91:CC:FB:92:2D:6C:10:22:B9:62:7E:02:E0:32:B7:53:2E:3D
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 0185715E6B42BBFF50064FC97AE79ECA459E
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/e7yRzPuSLWwQIrlifgLgMrdTLj0.roa
Signing time: Mon 02 Jan 2023 07:24:51 +0000
ROA not before: Mon 02 Jan 2023 07:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41313
IP address blocks: 109.121.166.0/24 maxlen: 24
109.121.162.0/24 maxlen: 24
109.121.160.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:6b:42:bb:ff:50:06:4f:c9:7a:e7:9e:ca:45:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Jan 2 07:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bbc91ccfb922d6c1022b9627e02e032b7532e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:24:07:33:0f:2b:d1:f8:8a:01:dd:e5:c4:5d:
01:5a:10:ca:8b:fe:8a:f8:24:50:52:07:57:18:d7:
63:1b:f1:8d:d5:e9:08:4f:70:8f:01:bd:30:91:d6:
90:f7:6b:b1:97:f6:bf:70:91:22:83:72:eb:93:0e:
63:c1:48:bf:da:91:8d:54:13:e0:f3:74:94:9f:f2:
54:11:07:39:1b:49:94:6e:5a:e4:9a:31:c5:43:3d:
fc:82:19:1b:14:f3:6c:9d:3d:e9:e6:32:b6:6d:ed:
48:8d:79:b5:f9:2a:b8:b6:01:b2:c9:a7:d4:63:55:
dc:91:b0:cc:e0:0f:e7:45:f1:08:22:73:f1:ab:cb:
38:d0:b7:f3:7b:94:cf:6b:61:3f:a9:ce:e4:8c:61:
6e:c0:a5:1c:df:82:78:15:0b:14:b4:63:d6:f9:83:
88:9c:4d:17:2b:06:72:fa:df:81:20:0e:66:17:3d:
f3:a7:62:90:60:9d:51:b2:e1:2e:60:32:54:8c:41:
84:e3:a4:aa:cf:73:bf:ed:ea:af:ad:00:0a:cb:6b:
1f:8e:1f:3a:d3:c3:35:e1:9b:9a:ec:d2:96:e5:03:
47:01:d4:05:4e:72:b5:f2:32:5e:35:8e:dc:62:ac:
d1:87:70:35:38:75:c1:a7:e3:0d:80:d8:a9:11:f9:
24:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BC:91:CC:FB:92:2D:6C:10:22:B9:62:7E:02:E0:32:B7:53:2E:3D
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/e7yRzPuSLWwQIrlifgLgMrdTLj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.160.0-109.121.162.255
109.121.166.0/24
Signature Algorithm: sha256WithRSAEncryption
57:9d:ca:63:bd:c4:ae:79:08:b9:f9:cc:5e:07:77:55:67:c6:
24:04:6c:ce:bc:70:44:ae:63:86:bc:57:7b:4f:87:ea:fd:8d:
8e:c6:fc:f0:33:ea:f2:a7:da:5f:a8:94:16:90:17:8d:28:ca:
d4:76:ca:ef:b6:a9:45:46:e9:97:9a:b1:62:d9:e4:de:da:b2:
d8:a7:45:da:b1:78:76:c9:57:9b:fa:8a:45:d8:10:07:11:20:
13:34:a9:82:29:98:3b:68:e5:49:2e:2e:24:1e:20:37:d7:94:
4e:4b:e9:d6:b6:c0:13:5c:26:96:3f:a6:68:15:63:f1:74:48:
bd:98:ae:5f:28:cf:47:a7:31:ab:07:57:98:b7:6a:00:aa:8a:
b8:a2:fa:62:78:f6:ca:56:73:d9:73:d1:1e:46:6d:65:57:09:
d1:a4:32:4c:24:8e:2f:d2:c0:9c:34:98:ba:b0:16:6c:c9:c4:
6c:51:31:16:d3:52:29:24:86:12:2b:47:51:dd:8d:26:72:ea:
44:3f:af:ce:f0:86:08:13:b6:3c:30:37:85:5b:67:11:32:a5:
4c:5c:06:ac:49:68:1c:7b:04:7a:ec:77:b5:40:4e:2e:9f:d5:
f3:7b:c0:28:13:ee:c3:b3:b1:4e:59:95:03:c5:3b:a8:2f:28:
b7:c2:ec:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:24:04 2025 by rpki-client