Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/OgeWdAyPX3NfPtDLnOQdNYlgol8.roa
File: OgeWdAyPX3NfPtDLnOQdNYlgol8.roa (raw, json)
Hash identifier: LD9pTq7Xd0HpxKhbZMtzN+sZEXkT7XREjw8giEF/Vbs=
Subject key identifier: 3A:07:96:74:0C:8F:5F:73:5F:3E:D0:CB:9C:E4:1D:35:89:60:A2:5F
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 0189D4B6D18C0D73B024127CC5E42ADD844E
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/OgeWdAyPX3NfPtDLnOQdNYlgol8.roa
Signing time: Tue 08 Aug 2023 10:34:58 +0000
ROA not before: Tue 08 Aug 2023 10:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134512
IP address blocks: 46.175.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:b6:d1:8c:0d:73:b0:24:12:7c:c5:e4:2a:dd:84:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Aug 8 10:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a0796740c8f5f735f3ed0cb9ce41d358960a25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ee:78:4d:ca:1d:06:08:11:68:eb:ee:b8:4b:
f1:f9:6f:0b:29:59:c3:c5:5f:19:06:b8:ef:91:89:
6e:e9:d8:01:2a:a9:02:e5:56:71:c0:f5:b7:ec:54:
02:82:d5:0b:7c:07:21:63:b3:7d:af:d4:ac:71:e6:
87:a8:e0:2f:2b:d1:6c:d1:cd:86:81:85:38:98:be:
24:ac:5e:90:57:c2:76:5c:d2:92:4e:2c:07:99:f3:
53:d7:b6:09:c2:a3:c6:c9:6c:a8:27:97:8d:07:cd:
39:de:6d:4b:fd:34:20:0a:ef:41:ab:ed:04:a8:1e:
e1:60:8d:a3:3e:3f:01:0a:c4:14:4e:b5:b1:17:ac:
f6:61:c5:86:eb:93:a8:81:1f:e3:2d:ed:e2:60:a7:
05:39:0d:2b:53:a4:2b:a6:4c:69:9c:75:93:c2:f6:
1f:ea:c9:ed:83:c9:f6:44:f1:aa:0b:a7:54:50:be:
23:dc:27:5d:74:7e:79:13:11:71:02:03:a9:36:f2:
8e:ca:9c:ac:25:d7:85:02:07:93:15:8b:4f:66:77:
5d:6c:f0:34:a5:2a:fc:f0:fd:58:9b:e1:ae:08:89:
cf:a7:22:2f:53:a8:9b:5f:29:57:66:91:91:e1:cb:
32:03:4d:38:5a:91:94:ee:f6:01:56:dd:ca:51:1f:
89:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:07:96:74:0C:8F:5F:73:5F:3E:D0:CB:9C:E4:1D:35:89:60:A2:5F
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/OgeWdAyPX3NfPtDLnOQdNYlgol8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:79:58:06:7d:2a:72:ee:ad:c9:c7:b6:cc:dc:b7:53:7c:38:
e6:28:84:5c:fd:96:87:aa:18:2b:1c:4d:3c:6c:30:df:d3:c1:
12:81:e6:91:f8:5b:e5:3d:bf:ef:83:1b:88:71:53:89:b6:f5:
08:ed:bd:c1:83:59:3e:6a:08:9e:e3:ca:e8:cd:5d:3b:34:28:
c6:a1:fb:83:50:97:48:e2:b5:fb:a3:83:8e:fb:44:84:e8:c1:
af:fa:07:0e:50:0f:53:bc:8d:3a:63:43:4f:e3:74:0a:25:0d:
86:d5:9f:76:f5:49:25:8e:f6:37:bc:a6:b8:44:45:22:49:65:
03:03:89:54:73:7b:7c:05:36:56:61:01:53:58:f8:20:b1:4c:
de:8e:0e:60:76:96:7f:ae:80:8c:ab:d1:7a:c8:07:dd:3a:43:
31:0e:af:2b:5e:b5:b3:b9:ca:e1:0b:eb:17:81:ed:51:fd:c2:
21:15:c2:69:ac:2d:91:c6:38:69:c0:e5:e7:a6:4d:b7:ab:d6:
53:0e:ed:04:fd:bb:13:d7:c3:0d:87:6c:c6:c7:42:e1:45:8b:
ab:c8:1d:a5:7a:cc:cf:05:04:2c:95:dd:7a:44:11:6a:1d:15:
d4:de:05:79:fa:27:44:f4:ac:ae:69:59:ec:8c:c3:04:3c:96:
5c:c3:7b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:25 2025 by rpki-client