Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/OZmui-f9IXoyiqvGIl7MB7OnZ4o.roa
File: OZmui-f9IXoyiqvGIl7MB7OnZ4o.roa (raw, json)
Hash identifier: gseBChoMs16bIdyHsy35xgqSDPadhsXDF5vbkrydo7M=
Subject key identifier: 39:99:AE:8B:E7:FD:21:7A:32:8A:AB:C6:22:5E:CC:07:B3:A7:67:8A
Certificate issuer: /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Certificate serial: 018AACE93B5CC44615BA17A633462AD69AE2
Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/OZmui-f9IXoyiqvGIl7MB7OnZ4o.roa
Signing time: Tue 19 Sep 2023 10:08:00 +0000
ROA not before: Tue 19 Sep 2023 10:08:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43571
IP address blocks: 178.19.48.0/20 maxlen: 24
149.126.80.0/21 maxlen: 24
185.152.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:e9:3b:5c:c4:46:15:ba:17:a6:33:46:2a:d6:9a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Validity
Not Before: Sep 19 10:08:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3999ae8be7fd217a328aabc6225ecc07b3a7678a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e4:8c:95:7f:c8:57:17:3d:07:59:b8:a9:cd:
3a:8b:96:85:69:0b:04:14:e3:f9:92:48:bc:78:38:
cc:94:df:04:c3:f5:4b:7a:99:0b:e3:2e:84:85:d6:
3c:ab:a3:d8:b5:00:e6:71:c9:99:7d:58:1d:9b:87:
66:1b:12:7c:16:ff:cc:76:f1:d8:da:4e:2d:a9:f6:
e5:00:af:e3:8c:9d:59:5c:b1:66:7a:85:7d:77:c1:
0d:5f:76:c0:3d:5a:97:9e:d9:1a:9f:a6:01:03:15:
4d:ba:8c:87:3b:ef:13:4e:60:4b:ff:7b:aa:2d:50:
64:f6:70:34:c6:b7:9f:94:1f:89:16:34:fb:94:d4:
8f:d4:20:ba:88:f3:30:d9:07:09:10:3c:45:54:1f:
78:e8:5c:c9:75:22:36:ba:93:da:a5:0f:46:7e:1b:
18:83:58:54:a3:27:5f:51:e8:97:39:19:03:19:52:
23:df:4e:25:2a:6f:ae:23:60:26:56:55:37:68:bd:
51:bd:af:3c:c8:6c:87:ec:08:af:77:08:2d:60:8e:
01:83:a9:f8:4e:2e:9a:8f:7a:f5:89:51:12:cf:e4:
a9:f2:b6:31:98:ab:f3:93:e6:99:df:09:6e:c5:b0:
2a:f9:a8:0c:54:f9:9d:a5:bb:22:fd:84:81:26:c2:
88:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:99:AE:8B:E7:FD:21:7A:32:8A:AB:C6:22:5E:CC:07:B3:A7:67:8A
X509v3 Authority Key Identifier:
keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/OZmui-f9IXoyiqvGIl7MB7OnZ4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.80.0/21
178.19.48.0/20
185.152.116.0/22
Signature Algorithm: sha256WithRSAEncryption
18:fb:06:bd:e6:e3:a8:e9:bb:05:67:46:65:51:66:99:ac:fc:
70:41:d0:e6:0e:de:41:44:c7:b2:f3:34:ca:46:0e:3c:e8:c8:
c4:00:da:7b:07:d3:d1:82:32:8d:20:ae:f4:8b:c2:41:bd:f8:
13:c6:43:12:6b:d7:ae:44:e8:63:ed:d1:71:38:e4:a8:72:85:
91:ef:88:3d:63:8d:0d:29:5e:bd:ff:09:71:aa:9b:57:d0:2c:
8a:c6:1b:62:cd:2b:52:4e:f0:48:59:f6:8d:11:5f:18:28:d6:
b9:7d:4f:93:38:e4:4b:a5:14:56:89:0c:e0:b5:9c:69:20:5a:
33:3c:1f:80:57:7d:c2:65:50:10:5c:52:aa:1c:87:ab:ca:e2:
46:1e:c3:a5:f0:b1:18:9d:75:70:46:ca:ef:a0:9e:25:73:1b:
ee:76:b5:0e:e8:a5:95:df:3c:77:f3:04:60:52:27:a0:68:dc:
fa:4f:54:e9:5c:ea:15:b9:4d:0d:cf:38:4d:59:b5:ba:16:67:
e9:fe:c4:f1:82:e6:83:1b:82:61:7c:e3:5b:3c:4a:ee:7a:bd:
71:57:cb:30:2e:15:b7:88:c4:f4:d4:a8:e7:4c:8c:52:89:2e:
cc:a4:89:22:32:2a:69:73:ef:aa:56:17:c2:37:f0:65:99:76:
57:ef:1b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:35:05 2025 by rpki-client