Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/OkMk6Ly5Y1H2FC832y9ZBy_wdTU.roa
File: OkMk6Ly5Y1H2FC832y9ZBy_wdTU.roa (raw, json)
Hash identifier: zdLbAUjrRMPLF/X2gM70kVOK7xd5tSWdLvAvl/Tmurg=
Subject key identifier: 3A:43:24:E8:BC:B9:63:51:F6:14:2F:37:DB:2F:59:07:2F:F0:75:35
Certificate issuer: /CN=a4947a653dec53d179d5724f2514c7256db69df8
Certificate serial: BCB58B
Authority key identifier: A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/OkMk6Ly5Y1H2FC832y9ZBy_wdTU.roa
Signing time: Sat 01 Jan 2022 12:06:07 +0000
ROA not before: Sat 01 Jan 2022 12:06:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52160
IP address blocks: 194.247.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12367243 (0xbcb58b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4947a653dec53d179d5724f2514c7256db69df8
Validity
Not Before: Jan 1 12:06:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a4324e8bcb96351f6142f37db2f59072ff07535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:54:9d:d9:7d:75:10:06:c1:75:e1:18:f3:
cd:db:ad:bf:43:8b:4b:d6:de:11:13:14:04:ba:bf:
da:dc:fc:c9:85:84:93:10:b3:9d:3c:3d:dc:1a:16:
17:d8:e5:72:1e:87:b6:0a:ec:32:48:77:4a:52:58:
f5:59:cb:70:3d:0b:b0:66:50:5c:bb:62:44:9a:ad:
4a:05:9f:32:fe:aa:dc:46:6c:8e:1e:3d:f0:c4:0b:
b5:aa:c5:89:84:b4:90:9d:61:e0:34:20:c8:a6:23:
c5:ef:fc:c8:30:27:de:c4:04:9d:15:4d:bc:6f:a9:
39:34:4b:04:19:46:d0:b4:be:9a:46:67:bb:af:d9:
96:ed:5c:84:1d:f5:d5:69:b5:df:d1:ea:27:f5:0c:
97:58:08:93:44:d1:99:3d:a4:f3:2d:ad:65:d7:86:
19:23:08:32:b4:4e:01:92:34:0b:ad:c0:70:fc:6c:
6d:5a:ca:22:fb:27:fc:ba:72:22:de:be:52:61:39:
00:df:22:c0:0a:b1:a8:f9:b1:44:b0:c9:70:e8:37:
b9:c8:b6:8d:1e:fc:76:3a:38:4a:88:40:79:52:da:
e5:53:d1:13:8f:e0:ca:33:9b:fc:53:93:04:ad:d3:
8e:74:7a:42:3d:2b:39:e5:00:d9:df:a9:cf:0b:90:
8d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:43:24:E8:BC:B9:63:51:F6:14:2F:37:DB:2F:59:07:2F:F0:75:35
X509v3 Authority Key Identifier:
keyid:A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/OkMk6Ly5Y1H2FC832y9ZBy_wdTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.50.0/24
Signature Algorithm: sha256WithRSAEncryption
29:82:93:10:07:ad:f7:af:30:0b:f9:7a:e5:55:48:93:c1:2f:
7b:5d:fd:f7:6d:23:df:4c:c1:9d:6c:bc:3f:fd:34:a8:a1:f7:
00:63:9c:0f:5b:1f:e5:a4:4b:c7:2f:07:db:47:39:a6:50:c9:
7b:f5:48:9a:3e:91:b7:25:71:ad:dc:75:13:4a:ad:8e:52:a9:
05:8b:d8:60:b5:81:1e:e2:e5:e7:6d:be:db:80:67:c3:f9:1c:
32:4c:c4:ec:c2:d3:3e:a1:1b:74:c1:f5:44:fb:9e:47:f3:67:
39:c1:cc:2e:a6:f3:54:9a:eb:4e:fa:d6:61:5f:85:35:be:36:
87:79:d2:8c:ad:f6:82:99:4d:09:d1:ff:ec:e8:60:d6:66:45:
51:df:2b:b2:80:fb:1f:a7:74:aa:a8:d6:9b:f4:25:bd:80:1c:
c5:97:3c:7d:7a:55:98:e0:47:49:4b:4f:05:60:c3:f0:fd:6c:
c5:a2:8e:aa:24:a1:26:30:8d:16:09:c2:fa:fc:bf:a5:6d:b2:
90:f0:53:34:b1:41:9e:01:aa:0a:e3:8f:b2:97:c3:14:cf:dc:
a5:ed:10:56:19:09:b3:45:1a:b9:dc:6d:a8:8e:28:fd:d9:ec:
15:04:fe:cf:9d:de:48:bc:7a:cc:0a:5b:cf:f0:34:63:9b:19:
8c:da:d8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:08 2025 by rpki-client