Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/v27baSD6Wqlqqdhgx1iOZJxQ2qo.roa
File: v27baSD6Wqlqqdhgx1iOZJxQ2qo.roa (raw, json)
Hash identifier: f+HE8HYeJ8vbHnARCtNkc2/AJyIpq53/zuWBV4YoIpw=
Subject key identifier: BF:6E:DB:69:20:FA:5A:A9:6A:A9:D8:60:C7:58:8E:64:9C:50:DA:AA
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 0185715E6A65FD94F9541EC84C52539BA3D5
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/v27baSD6Wqlqqdhgx1iOZJxQ2qo.roa
Signing time: Mon 02 Jan 2023 07:24:51 +0000
ROA not before: Mon 02 Jan 2023 07:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39396
IP address blocks: 109.121.139.0/24 maxlen: 24
109.121.136.0/24 maxlen: 24
109.121.142.0/24 maxlen: 24
109.121.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:6a:65:fd:94:f9:54:1e:c8:4c:52:53:9b:a3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Jan 2 07:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf6edb6920fa5aa96aa9d860c7588e649c50daaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:58:03:d7:94:71:69:3e:fa:7f:b2:82:67:03:
fb:d2:08:59:45:c6:be:5a:81:12:41:70:25:e0:18:
b1:6e:2b:10:9d:96:db:d2:80:b5:ee:95:08:7b:26:
e9:7f:d8:ec:cd:b5:48:4f:e7:e5:25:ea:39:08:e1:
e6:b8:fa:06:87:be:86:88:6e:d1:fa:29:8e:3a:82:
53:c3:fa:c0:07:eb:78:06:a8:e9:a0:db:31:70:7a:
3f:c1:3d:06:10:39:20:bf:db:bd:e5:c1:6a:b9:4b:
0c:92:70:e3:0a:31:8a:58:9b:3e:c4:52:d2:04:11:
70:15:6f:9d:02:f6:07:9c:03:7b:0f:64:55:f0:27:
7e:d8:eb:7c:cd:66:cc:c4:25:f6:12:63:18:77:22:
57:c8:5e:1e:27:98:52:db:28:31:f4:a5:bd:e5:1b:
3d:a6:3b:41:77:bf:6a:3f:0f:f0:b6:3b:4e:7b:b0:
fe:83:af:72:ac:7b:8f:62:9c:ab:ce:71:cc:a4:83:
aa:c6:3a:40:4f:7f:09:43:d5:d3:d2:0f:07:ab:46:
a6:92:1d:d5:9a:d8:11:f7:8f:90:46:66:dc:42:5a:
f2:62:5a:61:de:03:2f:f7:ee:71:b4:12:19:2d:79:
b2:6c:a6:1b:00:cd:bd:cc:93:8f:17:72:9a:03:f6:
c2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6E:DB:69:20:FA:5A:A9:6A:A9:D8:60:C7:58:8E:64:9C:50:DA:AA
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/v27baSD6Wqlqqdhgx1iOZJxQ2qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.136.0/24
109.121.139.0/24
109.121.142.0/23
Signature Algorithm: sha256WithRSAEncryption
42:06:d9:2b:78:e4:57:aa:f3:a0:49:fc:67:77:1f:ab:b3:4d:
40:fc:cf:83:5d:89:31:d6:67:ac:74:d6:8e:e7:ba:d5:27:ae:
20:e8:50:27:b3:27:f7:60:54:e2:1b:f9:65:05:f1:0e:5d:71:
3e:44:c4:e8:19:2e:11:95:62:c1:1c:11:53:c2:9d:82:25:a7:
9c:c1:e3:b2:99:72:03:ac:df:71:25:ea:e5:ed:13:3a:a2:43:
16:92:8a:fc:96:c2:e1:d8:85:15:df:40:da:48:3c:73:e0:96:
ed:97:49:44:20:b5:98:0c:95:ce:54:4f:9c:f0:85:54:45:1e:
07:0d:3c:ae:de:53:3e:0d:96:60:c1:86:02:df:02:87:7e:95:
73:59:4c:da:a8:35:15:0d:ce:0f:ff:9f:e4:01:f1:f6:1f:41:
1a:cc:d6:d5:d9:3a:3b:09:68:77:18:64:da:5e:dd:61:b7:39:
46:ae:3d:f2:41:fd:04:cd:f0:e3:1f:1d:81:f7:a0:bf:c6:e2:
d0:20:33:b6:3a:53:71:5e:eb:3c:6c:0b:01:fb:8e:56:a2:67:
b1:28:02:1c:d9:07:56:d5:06:af:d0:08:6f:cf:8a:cc:b6:0c:
e9:c7:42:44:61:30:c6:ae:2c:c4:07:9d:ee:93:f8:4d:89:5d:
51:e3:2e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:08:08 2025 by rpki-client