Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/oaErnoN82rakEJ7AJ9GzbTl4Uow.roa
File: oaErnoN82rakEJ7AJ9GzbTl4Uow.roa (raw, json)
Hash identifier: 0wWSVO4YX51pOSVec1SGY0NWAJkh73XueVGpYGuCrHw=
Subject key identifier: A1:A1:2B:9E:83:7C:DA:B6:A4:10:9E:C0:27:D1:B3:6D:39:78:52:8C
Certificate issuer: /CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Certificate serial: 01856F42C69DC30FB5353B43B8D3F2D120B7
Authority key identifier: 69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/oaErnoN82rakEJ7AJ9GzbTl4Uow.roa
Signing time: Sun 01 Jan 2023 21:35:25 +0000
ROA not before: Sun 01 Jan 2023 21:35:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208689
IP address blocks: 185.198.232.0/24 maxlen: 24
2a13:6600::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:c6:9d:c3:0f:b5:35:3b:43:b8:d3:f2:d1:20:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Validity
Not Before: Jan 1 21:35:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1a12b9e837cdab6a4109ec027d1b36d3978528c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:4b:ee:a5:ea:a2:85:37:32:d5:57:c4:54:
09:50:fa:62:02:aa:82:3b:d3:27:72:e0:bc:41:e5:
28:63:10:7d:c2:35:6e:11:5b:bc:91:5c:25:f1:d7:
01:9e:eb:51:ad:31:93:7c:a3:8f:33:a0:b1:0e:22:
6d:51:cf:2e:1d:a3:fb:c7:9d:be:8c:a0:e4:a6:5c:
4d:26:60:33:f4:c6:ee:70:5e:18:ed:36:89:c5:e8:
88:30:1d:5a:f5:98:82:8b:80:92:80:af:38:95:05:
fd:67:23:4e:25:c1:37:66:6c:ab:dd:ea:e4:9f:b5:
05:6d:70:a6:a4:c2:e0:6c:0a:4c:af:13:a4:51:aa:
7c:61:96:bb:b3:15:a2:dd:28:c2:d3:3a:4d:b5:aa:
78:6b:37:90:05:b6:14:7b:b8:1d:57:eb:40:6c:af:
7f:4a:70:9d:58:ea:09:d7:03:d3:f8:47:40:0a:16:
d5:ec:e5:2e:ae:cd:58:1e:52:61:b4:c1:eb:c4:8c:
ec:0c:2f:46:71:d6:a5:a3:3d:8f:9e:22:c7:90:08:
6e:ad:be:9b:0a:80:d3:e3:82:ca:cf:98:bd:23:aa:
0b:3f:26:9d:99:28:db:eb:cf:bd:5d:15:d3:03:bf:
45:e2:e9:9d:43:c9:c7:e7:c3:c1:f0:61:86:0d:61:
bb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A1:2B:9E:83:7C:DA:B6:A4:10:9E:C0:27:D1:B3:6D:39:78:52:8C
X509v3 Authority Key Identifier:
keyid:69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/oaErnoN82rakEJ7AJ9GzbTl4Uow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.232.0/24
IPv6:
2a13:6600::/29
Signature Algorithm: sha256WithRSAEncryption
63:d8:52:50:93:be:73:db:46:9f:69:10:c6:b5:75:58:51:e7:
08:74:f5:e9:34:34:bf:89:68:71:12:c8:e7:ea:6f:91:d5:41:
03:50:b6:52:ec:66:7b:b7:ce:dd:d9:89:3a:0c:0d:4c:93:2e:
07:68:78:57:44:3d:ef:15:34:24:a3:69:e4:05:dd:e6:b7:56:
02:79:b0:9a:5b:08:30:45:7f:8e:2f:da:4f:5c:6c:31:83:e9:
dd:63:fe:9b:27:7f:51:5e:ab:44:86:00:4f:e8:1e:4e:d4:8a:
00:ad:6f:0c:f8:91:6b:8c:90:c8:c2:38:e4:f7:d7:e9:1a:ed:
82:1d:da:bd:15:8d:f6:9f:7c:de:f5:35:84:9c:eb:e4:a4:4b:
fc:b4:18:a5:7f:cf:9c:3b:1a:98:50:86:a2:12:28:e7:84:43:
3f:b0:dd:78:82:e4:7d:79:3e:8a:03:69:3a:62:dd:f3:1a:6c:
55:00:1f:4f:0f:90:b3:02:7b:a7:5d:7f:25:85:f7:1c:83:23:
1e:a7:0a:8a:a9:55:94:33:56:00:78:78:02:9e:dc:75:d2:28:
da:7c:1c:da:44:43:7d:f7:d5:18:91:d2:16:76:15:bd:37:36:
be:3f:ac:80:1e:2d:5b:d1:04:dd:41:ef:66:16:9f:63:2e:41:
b8:b2:42:a5
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVvQsadww+1NTtDuNPy0SC3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ODJmMDUxMzJhOTk4OTUwN2ViZjZlZTk4OTUxODc1M2Jh
MmNkYjUwHhcNMjMwMTAxMjEzNTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWExMmI5ZTgzN2NkYWI2YTQxMDllYzAyN2QxYjM2ZDM5Nzg1MjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn9L7qXqooU3MtVXxFQJUPpiAqqC
O9MncuC8QeUoYxB9wjVuEVu8kVwl8dcBnutRrTGTfKOPM6CxDiJtUc8uHaP7x52+
jKDkplxNJmAz9MbucF4Y7TaJxeiIMB1a9ZiCi4CSgK84lQX9ZyNOJcE3Zmyr3erk
n7UFbXCmpMLgbApMrxOkUap8YZa7sxWi3SjC0zpNtap4azeQBbYUe7gdV+tAbK9/
SnCdWOoJ1wPT+EdAChbV7OUurs1YHlJhtMHrxIzsDC9Gcdaloz2PniLHkAhurb6b
CoDT44LKz5i9I6oLPyadmSjb68+9XRXTA79F4umdQ8nH58PB8GGGDWG7hwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKGhK56DfNq2pBCewCfRs205eFKMMB8GA1UdIwQY
MBaAFGmC8FEyqZiVB+v27piVGHU7os21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVlMd1VUS3BtSlVINl9idW1KVVlkVHVpemJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi82OTA0MDktMDE5ZC00ODEyLTkzMGMt
ZjkyNmZhYmY3YWZhLzEvb2FFcm5vTjgycmFrRUo3QUo5R3piVGw0VW93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi82OTA0MDktMDE5ZC00ODEyLTkzMGMtZjkyNmZhYmY3YWZh
LzEvYVlMd1VUS3BtSlVINl9idW1KVVlkVHVpemJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAucboMA0E
AgACMAcDBQMqE2YAMA0GCSqGSIb3DQEBCwUAA4IBAQBj2FJQk75z20afaRDGtXVY
UecIdPXpNDS/iWhxEsjn6m+R1UEDULZS7GZ7t87d2Yk6DA1Mky4HaHhXRD3vFTQk
o2nkBd3mt1YCebCaWwgwRX+OL9pPXGwxg+ndY/6bJ39RXqtEhgBP6B5O1IoArW8M
+JFrjJDIwjjk99fpGu2CHdq9FY32n3ze9TWEnOvkpEv8tBilf8+cOxqYUIaiEijn
hEM/sN14guR9eT6KA2k6Yt3zGmxVAB9PD5CzAnunXX8lhfccgyMepwqKqVWUM1YA
eHgCntx10ijafBzaREN999UYkdIWdhW9Nza+P6yAHi1b0QTdQe9mFp9jLkG4skKl
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:51 2025 by rpki-client