Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/oXNBl30Mc7iySO6M8t8j6hW5RB8.roa
File: oXNBl30Mc7iySO6M8t8j6hW5RB8.roa (raw, json)
Hash identifier: n5w3XqW3BQU2G/Vyl3Q9oCsaXvumFJXpofy9Y8F8gnI=
Subject key identifier: A1:73:41:97:7D:0C:73:B8:B2:48:EE:8C:F2:DF:23:EA:15:B9:44:1F
Certificate issuer: /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Certificate serial: 018572CCD15038EF12A92AC0C8BFCD6CAB86
Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/oXNBl30Mc7iySO6M8t8j6hW5RB8.roa
Signing time: Mon 02 Jan 2023 14:05:03 +0000
ROA not before: Mon 02 Jan 2023 14:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47975
IP address blocks: 94.228.16.0/20 maxlen: 24
178.213.128.0/21 maxlen: 24
185.182.120.0/22 maxlen: 24
185.18.72.0/22 maxlen: 24
2a03:2300::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:d1:50:38:ef:12:a9:2a:c0:c8:bf:cd:6c:ab:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Validity
Not Before: Jan 2 14:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a17341977d0c73b8b248ee8cf2df23ea15b9441f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b1:c5:42:60:78:59:91:75:29:cf:ce:74:53:
52:af:ed:98:ff:62:28:fb:b3:11:f9:11:64:55:38:
a6:bb:3c:cc:2f:94:04:90:b5:c1:fc:fa:d8:db:7d:
2c:0e:a0:19:1a:6f:f3:c9:52:fa:d5:a7:4b:aa:11:
0a:97:09:c9:f8:6e:cd:1a:de:29:9a:e5:b3:25:ae:
85:c9:5d:8c:b1:40:be:c4:1f:6b:10:e2:26:7d:4e:
36:7a:6f:68:9f:19:9c:eb:6a:fc:a9:a9:c6:96:b1:
88:28:ef:71:bd:fa:c1:d8:05:67:9d:72:71:c6:3c:
74:94:e9:c1:b4:60:94:a1:fc:86:31:bb:db:db:ad:
c3:10:1c:7b:73:46:af:a5:33:21:f7:24:5c:77:22:
5c:2a:2c:2b:34:92:c8:29:fd:e1:62:58:13:5f:6d:
c3:23:61:0f:9b:14:5e:5b:69:70:f5:45:bf:71:1a:
a6:c8:8e:e3:ef:12:54:41:bc:8f:2b:50:96:3c:35:
5d:11:ce:4f:2c:6e:ca:7f:db:20:70:3d:08:2c:ef:
23:7c:aa:ad:28:cb:09:f5:65:7c:44:7f:fb:80:2c:
6c:9a:6a:a4:fb:22:31:07:23:26:d4:17:c0:8b:5b:
c1:9f:d1:db:9a:99:be:f8:4e:22:ca:76:15:f5:95:
86:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:73:41:97:7D:0C:73:B8:B2:48:EE:8C:F2:DF:23:EA:15:B9:44:1F
X509v3 Authority Key Identifier:
keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/oXNBl30Mc7iySO6M8t8j6hW5RB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.16.0/20
178.213.128.0/21
185.18.72.0/22
185.182.120.0/22
IPv6:
2a03:2300::/29
Signature Algorithm: sha256WithRSAEncryption
d9:96:69:52:54:51:55:35:09:ac:e5:67:4d:40:98:83:ab:54:
9a:e8:c3:96:74:14:d6:35:fe:5d:44:f8:9a:8d:3a:9c:dc:23:
74:1c:67:88:cd:b6:c9:6f:3e:40:4d:58:03:18:75:44:59:33:
83:32:c5:65:b2:27:b8:5a:2b:5c:0a:34:e6:2d:43:64:ff:02:
c2:b7:0b:5e:39:bd:44:c8:c6:13:c0:c3:42:1b:88:51:9a:b8:
fd:23:3a:b0:41:2e:c7:86:13:c7:1f:3d:e2:7d:92:ae:da:fd:
52:77:72:ef:95:af:ba:95:29:d9:d2:02:5b:9b:83:b0:ff:5b:
1f:30:01:bb:e9:c3:aa:da:55:bc:6b:bb:49:59:7c:62:a6:33:
4b:78:45:2f:18:5d:dd:2b:43:b5:19:79:51:79:d0:11:62:57:
c7:4a:1e:78:cb:df:5d:0e:a9:1b:7a:87:15:44:0b:58:10:f1:
1f:a8:7f:a0:06:5b:cd:3c:9c:c9:ef:b1:ff:88:21:92:08:60:
20:ae:72:37:7d:5f:1b:c4:50:d8:9e:be:9d:10:49:26:e3:75:
09:5b:27:1c:26:ea:62:3e:2f:2d:52:1b:25:a3:06:72:71:1f:
08:6d:12:7e:50:ec:84:66:00:e5:1a:13:93:b7:c8:39:88:41:
73:49:0b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:16:26 2025 by rpki-client