Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/OaFqm4X2UHX4V8D0HMa4mtIfy7o.roa
File: OaFqm4X2UHX4V8D0HMa4mtIfy7o.roa (raw, json)
Hash identifier: YiqBvTOGKsyXzCMo40naOTk10L9/pHfzppYaAvcmpTk=
Subject key identifier: 39:A1:6A:9B:85:F6:50:75:F8:57:C0:F4:1C:C6:B8:9A:D2:1F:CB:BA
Certificate issuer: /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial: 0183B7DB8A53502005F85362E7903D77C584
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/OaFqm4X2UHX4V8D0HMa4mtIfy7o.roa
Signing time: Sat 08 Oct 2022 13:49:21 +0000
ROA not before: Sat 08 Oct 2022 13:49:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57152
IP address blocks: 185.73.128.0/22 maxlen: 24
104.247.172.0/24 maxlen: 24
104.247.171.0/24 maxlen: 24
104.247.170.0/24 maxlen: 24
104.247.175.0/24 maxlen: 24
104.247.174.0/24 maxlen: 24
104.247.173.0/24 maxlen: 24
104.247.176.0/24 maxlen: 24
185.137.215.0/24 maxlen: 24
2a03:a5a0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b7:db:8a:53:50:20:05:f8:53:62:e7:90:3d:77:c5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Validity
Not Before: Oct 8 13:49:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39a16a9b85f65075f857c0f41cc6b89ad21fcbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:01:a1:de:3f:ad:aa:c1:16:eb:2e:35:8c:ac:
74:db:1d:b6:15:81:26:93:f3:f4:5d:04:bd:60:29:
6c:ec:1f:c0:39:53:fd:09:e5:68:a4:54:8e:b3:d7:
ed:9e:54:c5:e1:8f:cf:49:9b:8f:11:c4:54:bd:b9:
df:cf:a7:03:92:9f:6b:05:56:24:0d:bf:f2:f7:29:
6b:e2:83:d5:48:90:a0:b7:e1:3b:1a:ea:5b:d4:78:
33:28:a3:26:8e:a6:f4:5c:26:94:17:60:15:e7:c6:
df:45:0e:db:57:ea:56:a9:7c:8b:b7:e5:bf:c5:85:
ad:fc:6d:69:50:61:0a:46:0d:96:7b:27:3d:96:4a:
44:f5:6b:0b:ad:1e:b5:3a:5c:9f:83:22:56:f3:6b:
a0:36:a8:b6:bd:bd:a4:6d:df:e8:fc:09:fd:e1:fb:
d8:31:07:f3:c0:89:ca:2c:77:1f:90:6c:6a:65:aa:
c7:37:00:5c:df:8f:8b:60:fe:30:3b:78:4b:17:d8:
c9:8d:62:e9:cb:00:cb:d2:cf:10:df:51:58:93:eb:
b4:59:bf:99:39:6c:3e:35:45:11:45:df:33:30:70:
ef:80:d8:8e:26:a4:d4:6f:9b:95:c5:c4:0f:f3:d5:
18:d3:0a:03:ac:77:0d:a8:e5:ee:93:84:bc:6d:f1:
7f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A1:6A:9B:85:F6:50:75:F8:57:C0:F4:1C:C6:B8:9A:D2:1F:CB:BA
X509v3 Authority Key Identifier:
keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/OaFqm4X2UHX4V8D0HMa4mtIfy7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.247.170.0-104.247.176.255
185.73.128.0/22
185.137.215.0/24
IPv6:
2a03:a5a0:1::/48
Signature Algorithm: sha256WithRSAEncryption
07:c5:45:8a:5e:62:5c:62:10:47:b9:13:3f:de:0c:ab:9f:54:
e0:a9:8d:4d:fc:ee:8e:8a:0d:9e:c9:51:7f:90:6d:ff:75:80:
b0:2d:ce:66:ff:e1:b8:18:a9:0e:31:3c:b7:14:75:bd:50:73:
c3:1a:01:ca:c1:24:68:fe:e8:18:84:86:cb:00:bf:59:75:ae:
4c:9c:f0:2e:5f:a8:29:0c:26:7a:99:3b:5f:24:62:2c:e6:53:
bf:05:65:48:53:3b:a9:a4:18:24:9a:79:f0:98:a0:2a:20:55:
5c:15:5b:44:d4:5d:45:5b:cd:ea:8d:3a:36:9e:ef:fd:11:0e:
67:c9:74:5e:7a:61:98:2f:01:2d:f1:ee:49:42:8f:52:2a:2a:
77:ad:d7:d8:49:7a:37:e1:ed:67:84:28:8c:ed:8a:dd:37:d4:
34:1b:bf:ef:9c:e7:b0:0a:7c:27:a3:78:85:a1:92:d5:6c:42:
82:bb:eb:02:84:d9:a3:e9:ef:d2:bf:51:88:d8:47:ee:02:4e:
52:9a:46:a5:c1:13:51:0e:0a:85:dd:78:d1:6f:84:7a:56:2d:
75:0d:ee:c3:2d:48:b7:35:45:2e:bb:50:86:8a:e1:b9:98:5c:
d1:d7:c4:46:21:d1:40:ce:c4:f7:f4:da:44:bb:60:c6:d4:9a:
75:fa:bc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:55 2024 by rpki-client on console-ams.rpki-client.org