Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/IDESl1E8VqaXLEWLVZE38vYAzU8.roa
File: IDESl1E8VqaXLEWLVZE38vYAzU8.roa (raw, json)
Hash identifier: ONaPj9a5RwHaSliNg8fzv1HAPv5bv3eQdOlxJCeH0sY=
Subject key identifier: 20:31:12:97:51:3C:56:A6:97:2C:45:8B:55:91:37:F2:F6:00:CD:4F
Certificate issuer: /CN=26425863c309f2655b884c1600394c4338e7fb41
Certificate serial: AACDD2
Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/IDESl1E8VqaXLEWLVZE38vYAzU8.roa
Signing time: Mon 11 Apr 2022 18:38:28 +0000
ROA not before: Mon 11 Apr 2022 18:38:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5089
IP address blocks: 109.107.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11193810 (0xaacdd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41
Validity
Not Before: Apr 11 18:38:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20311297513c56a6972c458b559137f2f600cd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:d8:c2:2d:35:de:3d:6c:4d:04:42:6f:9f:
3c:23:2c:cb:13:3e:43:de:9b:c0:ca:63:06:a6:f4:
8c:37:84:ae:05:68:b9:aa:ab:b5:94:aa:a0:e8:0b:
69:b2:d7:ed:7d:34:54:a1:42:03:a6:54:be:08:65:
d8:8f:aa:66:a6:88:10:d1:42:cb:98:59:c6:5d:3f:
d5:ed:76:d9:98:a4:c2:b0:9f:c2:e0:82:0f:ee:a7:
97:f3:f0:89:2d:19:54:5b:6b:df:24:ab:c1:49:c4:
7c:76:8b:d3:d8:66:40:93:8f:10:cb:a6:b7:9a:46:
fb:7f:59:78:82:29:86:a3:41:1c:46:95:2f:1f:77:
03:44:c7:0b:b5:51:4d:49:d8:fd:bd:62:a3:80:9c:
30:48:b7:ab:7e:f3:ea:a6:e7:c9:3d:5e:d0:16:01:
11:b5:f5:d8:d2:88:8e:96:25:f3:ec:29:f6:c2:fc:
7c:ac:80:ce:ce:da:b4:30:95:85:31:92:af:41:51:
e7:2e:e1:e3:00:42:e1:69:57:f8:ae:31:6e:34:4e:
de:79:a7:b2:33:10:f6:56:bc:1f:be:95:df:b3:91:
d0:05:97:8e:82:3a:4d:95:9b:cb:46:f3:7d:ce:9e:
be:59:ef:9b:9f:d6:59:55:2c:b9:81:d3:d0:34:19:
ee:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:31:12:97:51:3C:56:A6:97:2C:45:8B:55:91:37:F2:F6:00:CD:4F
X509v3 Authority Key Identifier:
keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/IDESl1E8VqaXLEWLVZE38vYAzU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.154.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:98:68:d9:a5:e1:e8:ac:e7:63:57:79:21:6c:3b:df:94:fd:
16:c9:d3:45:80:8d:c8:8d:c8:3d:73:0e:13:94:23:7d:24:ac:
8d:7a:78:1b:29:9b:29:52:d1:7c:7e:19:8f:8e:c3:d5:40:53:
00:76:f0:41:db:02:f1:fa:ad:e7:5c:0f:04:33:78:08:fc:6a:
27:4c:6e:1e:11:65:92:2b:9a:12:b0:31:63:a4:09:53:02:8f:
48:9b:94:41:d7:f5:7d:03:37:db:0d:a0:fb:9a:a1:3e:3a:2b:
81:ab:b5:2c:d7:33:a8:be:31:f1:a4:75:1a:c1:83:4a:b2:98:
ed:1a:4f:3b:f9:62:17:75:e2:52:8a:7c:f4:5c:f5:dd:77:47:
0b:0b:8d:75:5f:4d:6c:65:a5:79:40:fe:cd:ea:09:27:df:83:
7d:f8:83:20:19:22:62:59:54:d1:9d:46:e0:2a:91:ca:fe:4d:
17:bc:c3:df:50:f4:14:2b:14:2a:63:77:c6:b8:8e:c5:df:2e:
64:16:fa:58:4e:72:25:6d:aa:d5:91:c8:04:d5:8d:ac:58:97:
8c:b4:e4:29:0d:80:d1:13:f9:1a:1c:4d:44:9d:15:03:21:22:
90:4e:d5:bd:16:b3:95:ee:0d:7f:38:eb:a2:3f:51:4b:e0:ca:
46:63:f1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:48 2023 by rpki-client on console.sobornost.net