Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/OIuM1_G7KPy-qUEavPkN9XcSmcQ.roa
File: OIuM1_G7KPy-qUEavPkN9XcSmcQ.roa (raw, json)
Hash identifier: gNpJlwxt3LuQgafMFlMJMHIpb27zJ8TUCUNXWW1/Wxg=
Subject key identifier: 38:8B:8C:D7:F1:BB:28:FC:BE:A9:41:1A:BC:F9:0D:F5:77:12:99:C4
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018572BA845279402BBDF7631781DEA3300C
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/OIuM1_G7KPy-qUEavPkN9XcSmcQ.roa
Signing time: Mon 02 Jan 2023 13:45:04 +0000
ROA not before: Mon 02 Jan 2023 13:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198262
IP address blocks: 85.232.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:84:52:79:40:2b:bd:f7:63:17:81:de:a3:30:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 13:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=388b8cd7f1bb28fcbea9411abcf90df5771299c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2d:8b:9b:d6:8e:70:dd:51:1c:62:61:ef:a0:
63:af:c4:c6:21:61:cf:aa:32:e4:3e:f7:14:01:95:
af:57:f7:01:91:14:50:55:6f:ca:10:56:86:3c:18:
b0:7e:67:98:9e:fd:03:4d:6f:e0:fd:a0:6d:ab:26:
07:e7:92:17:69:ec:f2:00:23:84:7c:ca:4f:72:e4:
15:86:48:c0:b7:65:e5:2f:bf:ac:30:bf:4f:2a:81:
c6:9a:cb:db:c8:a0:b3:88:9a:80:f2:6d:a9:fd:8c:
4a:ec:59:7b:aa:46:de:cc:3f:b8:68:5c:f1:79:a6:
bb:00:2a:02:9b:bf:af:6d:76:44:d1:2e:b9:27:e3:
10:c1:25:b0:6f:92:6f:1d:35:a4:e3:e6:93:c9:09:
96:1e:f7:4b:3a:97:56:a0:fb:93:92:38:1a:6d:f0:
00:fc:17:37:0d:9c:f5:e7:02:ec:cd:fc:25:94:7d:
74:84:94:35:f3:d2:f2:66:a0:1f:8f:37:ec:1b:41:
af:62:78:4e:e5:d7:fc:bf:ea:3e:40:38:4c:ae:85:
b8:73:e6:bd:4b:e5:89:8d:b8:a0:7a:16:53:f4:d3:
ad:9a:2d:e0:85:95:54:bf:29:fe:4a:5f:79:81:cb:
39:fe:f2:6d:4d:b9:bf:3e:02:87:ce:1e:3a:bc:41:
a5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8B:8C:D7:F1:BB:28:FC:BE:A9:41:1A:BC:F9:0D:F5:77:12:99:C4
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/OIuM1_G7KPy-qUEavPkN9XcSmcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.227.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:98:4a:0d:47:3f:24:fb:f5:44:33:b6:1b:ce:14:52:10:e4:
4c:f6:e8:b0:fd:82:f2:ed:8c:a3:e4:e3:98:63:2b:b4:f1:81:
4f:b6:53:5f:9e:b9:e9:08:c3:e5:3d:ab:00:96:c6:4f:61:ed:
f3:3a:3e:eb:36:8c:b7:ea:8d:98:07:71:c9:00:2b:f3:d7:fd:
e1:e9:b5:c7:8d:86:59:f4:bb:29:db:6c:bb:ba:9a:19:74:60:
10:2e:4a:fc:5f:10:e0:50:d3:ac:f0:70:a9:c2:d2:1f:8f:19:
5c:d5:22:fb:54:5d:1d:02:eb:68:b9:d2:45:d0:8b:b0:c9:d8:
e1:50:69:e0:21:05:e1:a3:bf:9b:e1:51:69:20:ec:4c:f2:b5:
5a:3b:92:b8:8d:84:df:68:94:a6:67:09:93:c5:33:db:69:2e:
43:e0:e1:7d:df:56:20:63:cb:e7:11:48:6d:34:69:1a:74:4b:
14:79:3f:bb:3a:4e:d3:9e:d6:ee:f5:ee:63:3c:b5:e2:22:06:
ef:44:71:2a:4d:5e:fd:9a:75:21:fc:33:89:d7:aa:6d:a3:0d:
22:0c:2f:48:b3:ec:c7:80:28:95:9c:f0:36:da:f3:6d:c7:b5:
a9:e4:58:62:52:55:34:00:1f:9f:b0:cd:8d:6a:14:fd:ec:cd:
ee:b2:6d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:05 2025 by rpki-client