Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/Okh42-Fo1ErkbTol_2e66FzT260.roa
File: Okh42-Fo1ErkbTol_2e66FzT260.roa (raw, json)
Hash identifier: wv1dLcZ2yZ1tu3UwMM206fCIczQDOtH0jaC5/Ye6PxA=
Subject key identifier: 3A:48:78:DB:E1:68:D4:4A:E4:6D:3A:25:FF:67:BA:E8:5C:D3:DB:AD
Certificate issuer: /CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e
Certificate serial: 37639877
Authority key identifier: D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/Okh42-Fo1ErkbTol_2e66FzT260.roa
Signing time: Wed 09 Mar 2022 15:06:28 +0000
ROA not before: Wed 09 Mar 2022 15:06:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50295
IP address blocks: 185.66.80.0/22 maxlen: 24
185.47.112.0/22 maxlen: 24
37.203.216.0/21 maxlen: 24
93.187.8.0/21 maxlen: 24
185.101.60.0/22 maxlen: 24
2a01:8ee0::/32 maxlen: 32
2a00:1f00::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 929273975 (0x37639877)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d832da8d458849d5f40ba6f0b9208f8585d9e23e
Validity
Not Before: Mar 9 15:06:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a4878dbe168d44ae46d3a25ff67bae85cd3dbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1b:7b:5c:f3:c3:ed:c4:82:8d:20:bf:7a:52:
ed:ca:dd:12:46:51:03:87:b5:7f:84:82:33:2f:37:
14:ec:2d:a5:e3:f1:5b:f4:0f:21:98:e6:ae:1d:8b:
7f:51:c8:06:f4:51:00:bb:06:e1:01:d5:6c:d2:1f:
fe:1b:6a:09:98:3d:a2:32:4f:c1:5c:10:fb:0f:62:
cf:b1:e2:7b:81:01:ee:2e:74:62:bf:8a:cc:e8:ea:
3e:4f:49:b7:ce:c8:1c:6f:08:8c:75:dd:08:1d:be:
0e:b9:57:e3:7f:70:96:a5:99:72:8c:08:8d:4e:ee:
03:90:8d:9e:fe:8c:95:f3:67:9a:d2:9f:2f:d5:c3:
ba:c4:fb:3e:aa:6e:e2:10:e8:dc:87:b1:34:e0:a8:
82:77:af:95:e6:01:7a:f4:cb:ef:e8:0e:9c:40:82:
15:5a:63:fe:b0:7c:1f:2f:5f:a2:0e:69:08:df:a3:
35:7d:a1:47:ce:5e:57:db:9d:46:41:3a:2b:3d:8c:
7a:72:9a:26:6f:27:34:b4:1e:8f:27:dd:dd:31:1c:
f6:8d:7a:c6:24:39:a2:0a:4a:dd:b7:b4:dc:41:2b:
c2:a7:1a:1b:c1:92:ca:46:92:ca:65:a3:f3:c6:a0:
c4:97:c5:d8:e1:56:e1:f4:97:bf:40:ad:c7:d5:7c:
36:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:48:78:DB:E1:68:D4:4A:E4:6D:3A:25:FF:67:BA:E8:5C:D3:DB:AD
X509v3 Authority Key Identifier:
keyid:D8:32:DA:8D:45:88:49:D5:F4:0B:A6:F0:B9:20:8F:85:85:D9:E2:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DLajUWISdX0C6bwuSCPhYXZ4j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/Okh42-Fo1ErkbTol_2e66FzT260.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d21ee-a460-4c39-9e6f-c99795f3885f/1/2DLajUWISdX0C6bwuSCPhYXZ4j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.216.0/21
93.187.8.0/21
185.47.112.0/22
185.66.80.0/22
185.101.60.0/22
IPv6:
2a00:1f00::/32
2a01:8ee0::/32
Signature Algorithm: sha256WithRSAEncryption
9c:d2:53:95:38:61:a9:f5:ec:8f:e7:02:09:bb:00:c0:e6:ce:
c1:da:8b:68:f7:36:e8:51:72:59:f2:a8:7f:02:91:12:50:cf:
69:a4:08:5b:d1:05:f2:ed:96:83:82:34:e6:a7:48:4d:ff:96:
ed:5a:32:e2:ee:87:f2:70:7f:15:8f:99:13:c7:0d:79:2e:a6:
28:62:53:e0:df:e2:d6:a0:32:71:87:8b:79:39:bd:78:28:ec:
2e:d2:71:ca:a3:fe:bf:71:4a:34:72:15:7b:5f:a5:db:c4:ad:
7a:1a:bc:ad:9a:d1:44:76:11:ac:61:69:01:5b:c4:9c:11:61:
11:db:77:dc:7e:7b:9c:14:d0:f1:af:55:93:30:78:a7:4c:5d:
c5:83:31:e9:69:71:d2:36:e1:ef:5f:7d:ed:09:82:e4:1c:cb:
a4:4f:6b:b8:4b:2b:0e:bb:af:fb:ec:59:eb:df:7b:76:d7:7c:
d6:39:05:13:45:60:50:4c:0a:53:84:95:b2:ad:8d:68:7b:b9:
76:35:95:ee:99:29:ed:60:5b:30:ff:7b:e3:56:a2:cc:6f:13:
d3:6b:23:95:76:ed:15:ad:0e:71:a8:44:e0:38:97:12:02:c3:
e7:5f:e6:75:84:d0:f4:6b:90:b9:4d:d3:e2:e0:6c:42:0a:d8:
27:d3:db:a8
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIEN2OYdzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
ODMyZGE4ZDQ1ODg0OWQ1ZjQwYmE2ZjBiOTIwOGY4NTg1ZDllMjNlMB4XDTIyMDMw
OTE1MDYyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2E0ODc4ZGJlMTY4
ZDQ0YWU0NmQzYTI1ZmY2N2JhZTg1Y2QzZGJhZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ8be1zzw+3Ego0gv3pS7crdEkZRA4e1f4SCMy83FOwtpePx
W/QPIZjmrh2Lf1HIBvRRALsG4QHVbNIf/htqCZg9ojJPwVwQ+w9iz7Hie4EB7i50
Yr+KzOjqPk9Jt87IHG8IjHXdCB2+DrlX439wlqWZcowIjU7uA5CNnv6MlfNnmtKf
L9XDusT7Pqpu4hDo3IexNOCognevleYBevTL7+gOnECCFVpj/rB8Hy9fog5pCN+j
NX2hR85eV9udRkE6Kz2MenKaJm8nNLQejyfd3TEc9o16xiQ5ogpK3be03EErwqca
G8GSykaSymWj88agxJfF2OFW4fSXv0Ctx9V8NqUCAwEAAaOCAjcwggIzMB0GA1Ud
DgQWBBQ6SHjb4WjUSuRtOiX/Z7roXNPbrTAfBgNVHSMEGDAWgBTYMtqNRYhJ1fQL
pvC5II+FhdniPjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJETGFqVVdJU2RYMEM2Ynd1U0NQaFlYWjRqNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWIvN2QyMWVlLWE0NjAtNGMzOS05ZTZmLWM5OTc5NWYzODg1Zi8x
L09raDQyLUZvMUVya2JUb2xfMmU2NkZ6VDI2MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWIv
N2QyMWVlLWE0NjAtNGMzOS05ZTZmLWM5OTc5NWYzODg1Zi8xLzJETGFqVVdJU2RY
MEM2Ynd1U0NQaFlYWjRqNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBN
BggrBgEFBQcBBwEB/wQ+MDwwJAQCAAEwHgMEAyXL2AMEA127CAMEArkvcAMEArlC
UAMEArllPDAUBAIAAjAOAwUAKgAfAAMFACoBjuAwDQYJKoZIhvcNAQELBQADggEB
AJzSU5U4Yan17I/nAgm7AMDmzsHai2j3NuhRclnyqH8CkRJQz2mkCFvRBfLtloOC
NOanSE3/lu1aMuLuh/JwfxWPmRPHDXkupihiU+Df4tagMnGHi3k5vXgo7C7Sccqj
/r9xSjRyFXtfpdvErXoavK2a0UR2EaxhaQFbxJwRYRHbd9x+e5wU0PGvVZMweKdM
XcWDMelpcdI24e9ffe0JguQcy6RPa7hLKw67r/vsWevfe3bXfNY5BRNFYFBMClOE
lbKtjWh7uXY1le6ZKe1gWzD/e+NWosxvE9NrI5V27RWtDnGoROA4lxICw+df5nWE
0PRrkLlN0+LgbEIK2CfT26g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:52 2024 by rpki-client on console-ams.rpki-client.org