Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/vqOlKeiReimUCIdyyHSB_efTyd4.roa
File: vqOlKeiReimUCIdyyHSB_efTyd4.roa (raw, json)
Hash identifier: 6pN3JF1fJcFOMAhmJsjaZh7kBxLhUd8hcSb9bJ59aC8=
Subject key identifier: BE:A3:A5:29:E8:91:7A:29:94:08:87:72:C8:74:81:FD:E7:D3:C9:DE
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 0185715E6E6499B65CB0D2E2F9C0C714869B
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/vqOlKeiReimUCIdyyHSB_efTyd4.roa
Signing time: Mon 02 Jan 2023 07:24:52 +0000
ROA not before: Mon 02 Jan 2023 07:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209362
IP address blocks: 109.121.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:6e:64:99:b6:5c:b0:d2:e2:f9:c0:c7:14:86:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Jan 2 07:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bea3a529e8917a2994088772c87481fde7d3c9de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:fd:62:31:78:30:e9:b2:5a:6b:2d:ff:ab:
99:1b:8c:52:1d:d5:86:90:8a:26:ef:29:bb:db:d4:
f6:77:08:84:91:2d:9f:9f:84:3c:51:ce:66:f4:d2:
eb:c2:f6:d7:94:da:b0:4a:18:2b:47:fa:27:34:58:
35:1a:e8:1f:43:09:a8:c2:bd:95:0c:a3:5f:b8:05:
87:04:eb:e9:9b:b7:11:e2:6d:f6:7d:df:5d:fd:03:
10:da:5a:93:76:e1:6d:9c:4f:5e:fb:89:3b:ef:02:
69:3c:e0:52:f5:55:f7:7e:54:dc:70:35:e7:d9:e5:
43:ad:87:19:26:2b:82:a1:02:87:8a:e0:90:f3:24:
f1:8b:d1:35:1e:47:e7:f2:b1:73:f5:e0:69:fa:24:
ca:28:76:ed:50:36:be:11:cf:96:59:e8:b2:8a:d8:
f2:3d:89:28:20:c7:f1:2c:e0:6b:4f:5f:e5:7f:ec:
16:71:3c:2d:8c:7e:a1:03:db:f6:ce:cf:74:14:95:
6a:37:73:c3:c9:72:15:4f:0d:ea:b5:e3:72:f1:57:
8a:bb:b0:5c:84:46:30:d4:0c:87:20:33:b5:9a:0c:
0a:6e:5a:4a:40:c2:96:a3:e1:34:4e:97:a1:33:ec:
ef:49:60:46:4f:fe:38:ef:64:33:7e:08:4d:ec:11:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A3:A5:29:E8:91:7A:29:94:08:87:72:C8:74:81:FD:E7:D3:C9:DE
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/vqOlKeiReimUCIdyyHSB_efTyd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.128.0/24
Signature Algorithm: sha256WithRSAEncryption
84:fa:f3:12:31:4d:4e:fa:db:c2:dc:0d:f2:4c:3e:02:80:ee:
74:a9:7d:ca:4a:cc:6c:37:64:46:b4:e0:4f:19:88:13:0b:15:
36:67:07:5a:aa:da:a1:f7:4c:75:26:12:4f:b5:1b:6e:aa:8a:
25:19:71:d5:75:5d:db:fd:9a:23:a2:81:25:ce:37:99:d0:55:
a9:38:32:71:ef:27:40:4a:3f:c4:f8:49:08:e7:f8:ff:aa:bb:
a4:68:61:a7:f8:c3:b8:a9:31:cf:6f:92:79:59:6f:47:8b:30:
07:22:66:5b:eb:86:ea:90:a1:d6:ec:a7:64:6a:85:ca:b6:e0:
0c:11:51:a2:85:d1:f0:f2:1f:e7:84:5e:b2:74:df:5f:39:71:
da:3c:64:80:91:a4:e8:b0:84:7b:75:ae:f0:04:bc:4a:b8:ab:
a3:13:18:7a:73:30:8b:1d:69:03:cb:8c:6a:30:4b:f6:ee:12:
1d:00:5a:ec:3d:6c:c4:ee:21:0e:cf:78:9c:c7:34:b4:b2:37:
f8:97:71:06:a1:15:94:27:96:7d:10:89:f2:29:38:12:df:1d:
e2:75:1f:ff:e9:fd:a4:ca:10:b0:79:94:62:83:67:0e:dc:a3:
04:6e:f0:a8:2c:e3:23:cc:37:86:a3:ce:f0:6a:b1:94:20:76:
bd:b3:4e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:01:08 2025 by rpki-client