Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/mJdlNVDQF7CLhYH_5P9vnvw0-rc.roa
File: mJdlNVDQF7CLhYH_5P9vnvw0-rc.roa (raw, json)
Hash identifier: wlvUoKZWjtPHTR5m/dYmBpCzejXOKxsVodatN5n/kus=
Subject key identifier: 98:97:65:35:50:D0:17:B0:8B:85:81:FF:E4:FF:6F:9E:FC:34:FA:B7
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 0185715E6AB534AE878C8D3262B7EA3D2859
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/mJdlNVDQF7CLhYH_5P9vnvw0-rc.roa
Signing time: Mon 02 Jan 2023 07:24:51 +0000
ROA not before: Mon 02 Jan 2023 07:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41292
IP address blocks: 109.121.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:6a:b5:34:ae:87:8c:8d:32:62:b7:ea:3d:28:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Jan 2 07:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9897653550d017b08b8581ffe4ff6f9efc34fab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b8:d0:4b:32:f1:e7:e8:b0:40:61:38:28:fc:
9b:eb:34:5b:c5:5b:99:79:fc:dd:64:7e:24:2f:c7:
5d:92:ec:8b:fa:4a:30:d6:84:58:95:04:55:f2:59:
cb:1f:52:c7:cc:f9:7b:ca:76:2e:2f:5c:ea:54:2b:
8d:e5:3e:d0:2c:c1:05:c7:f9:e5:b1:7d:e0:3c:5b:
0d:b8:16:3c:1e:9c:7d:8d:fc:51:08:1b:44:d1:0c:
2a:36:0d:1c:c0:63:b9:45:bf:0e:f0:70:6a:35:74:
54:4c:0e:49:41:02:48:7a:bb:b9:e3:ed:15:6f:20:
e1:46:ed:fb:90:d6:0e:0b:1a:73:09:1d:6f:d7:ac:
4e:a7:19:cd:78:6d:c9:ca:a2:e0:e7:43:d1:4f:76:
e9:c9:3a:7b:0a:b7:00:64:7f:99:1c:ad:f4:9f:96:
f5:2b:d2:b1:f0:1d:96:52:5c:52:38:2f:15:ac:a0:
d2:26:1c:14:af:a0:95:e9:33:60:79:68:3f:c3:9b:
9f:a9:e5:9c:0e:41:9d:b1:8e:30:06:57:70:2d:3d:
69:95:0b:8b:16:33:05:2e:3a:ef:eb:86:70:35:a4:
34:6d:ba:be:c5:6e:e0:8a:e4:94:75:ba:20:b4:34:
01:8a:68:a1:28:d5:de:25:90:cd:51:ab:fe:8f:23:
60:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:97:65:35:50:D0:17:B0:8B:85:81:FF:E4:FF:6F:9E:FC:34:FA:B7
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/mJdlNVDQF7CLhYH_5P9vnvw0-rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.159.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b8:9c:91:c0:28:6a:09:65:41:fb:c1:a9:12:b7:f0:9f:69:
3a:4d:b9:90:30:38:73:f7:a7:6a:05:f5:a2:da:bc:ca:69:a2:
be:f9:1c:5c:1b:7f:0e:93:dd:ab:07:21:23:11:5d:64:da:22:
a3:cf:37:e0:6d:71:6b:b3:95:28:6c:c5:25:39:a3:2a:34:b9:
61:10:fa:fe:af:b5:04:32:25:7a:26:3c:3d:4e:43:d4:d8:83:
7f:a0:f1:91:fb:a5:94:4f:d1:a0:4b:cd:74:02:ca:8e:f0:4e:
f0:19:f9:d1:0d:77:40:af:42:f7:78:90:7b:17:24:58:1a:b8:
49:7e:c7:8e:59:7f:e6:a1:91:24:a6:5e:ef:a3:7a:93:24:8b:
a1:8c:f2:bb:dc:45:45:85:33:f9:35:08:c6:16:60:50:0b:5b:
fb:37:90:2f:e7:ce:5a:54:b5:be:2a:e5:e9:54:0b:6e:75:60:
5b:9c:7f:45:eb:37:61:40:3f:4b:39:ba:5f:65:24:4b:dd:f6:
8a:ff:c7:fd:7f:a9:3b:ed:a7:b2:53:dc:05:4d:69:47:70:7c:
a7:af:fa:df:2f:03:55:2b:f2:fa:a2:fe:6e:d1:c0:14:53:08:
ed:e4:e1:7d:e1:5e:7e:d1:a9:23:34:10:c4:14:e9:34:04:e6:
1b:28:3d:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxXmq1NK6HjI0yYrfqPShZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZWY5ZTQ5ZmVjZjI1MDllYjY3NjllZWUyY2RkNGE1MjUz
YjcxYzUwHhcNMjMwMTAyMDcyNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODk3NjUzNTUwZDAxN2IwOGI4NTgxZmZlNGZmNmY5ZWZjMzRmYWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrjQSzLx5+iwQGE4KPyb6zRbxVuZ
efzdZH4kL8ddkuyL+kow1oRYlQRV8lnLH1LHzPl7ynYuL1zqVCuN5T7QLMEFx/nl
sX3gPFsNuBY8Hpx9jfxRCBtE0QwqNg0cwGO5Rb8O8HBqNXRUTA5JQQJIeru54+0V
byDhRu37kNYOCxpzCR1v16xOpxnNeG3JyqLg50PRT3bpyTp7CrcAZH+ZHK30n5b1
K9Kx8B2WUlxSOC8VrKDSJhwUr6CV6TNgeWg/w5ufqeWcDkGdsY4wBldwLT1plQuL
FjMFLjrv64ZwNaQ0bbq+xW7giuSUdbogtDQBimihKNXeJZDNUav+jyNg4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJiXZTVQ0Bewi4WB/+T/b578NPq3MB8GA1UdIwQY
MBaAFBLvnkn+zyUJ62dp7uLN1KUlO3HFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTIt
MWQ1ZDk0NWEwNWEzLzEvbUpkbE5WRFFGN0NMaFlIXzVQOXZudncwLXJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTItMWQ1ZDk0NWEwNWEz
LzEvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXmfMA0G
CSqGSIb3DQEBCwUAA4IBAQASuJyRwChqCWVB+8GpErfwn2k6TbmQMDhz96dqBfWi
2rzKaaK++RxcG38Ok92rByEjEV1k2iKjzzfgbXFrs5UobMUlOaMqNLlhEPr+r7UE
MiV6Jjw9TkPU2IN/oPGR+6WUT9GgS810AsqO8E7wGfnRDXdAr0L3eJB7FyRYGrhJ
fseOWX/moZEkpl7vo3qTJIuhjPK73EVFhTP5NQjGFmBQC1v7N5Av585aVLW+KuXp
VAtudWBbnH9F6zdhQD9LObpfZSRL3faK/8f9f6k77aeyU9wFTWlHcHynr/rfLwNV
K/L6ov5u0cAUUwjt5OF94V5+0akjNBDEFOk0BOYbKD0a
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:12 2025 by rpki-client