Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/67703c-0ef9-465e-8a5a-314f729fa595/1/OGP_3HrkPyfnUtD5vD8_3TIDV1E.roa
File: OGP_3HrkPyfnUtD5vD8_3TIDV1E.roa (raw, json)
Hash identifier: bHftiQc78Tdb6EjaZSQ3CUzm0lfHTWPtrn3c4PjNNMg=
Subject key identifier: 38:63:FF:DC:7A:E4:3F:27:E7:52:D0:F9:BC:3F:3F:DD:32:03:57:51
Certificate issuer: /CN=a28815e43926af7eb961de7b703aed6328953e30
Certificate serial: 1670C1E0
Authority key identifier: A2:88:15:E4:39:26:AF:7E:B9:61:DE:7B:70:3A:ED:63:28:95:3E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oogV5Dkmr365Yd57cDrtYyiVPjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/67703c-0ef9-465e-8a5a-314f729fa595/1/OGP_3HrkPyfnUtD5vD8_3TIDV1E.roa
Signing time: Wed 05 Jan 2022 07:56:42 +0000
ROA not before: Wed 05 Jan 2022 07:56:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35625
IP address blocks: 195.90.116.0/22 maxlen: 22
109.197.240.0/21 maxlen: 21
185.39.168.0/22 maxlen: 22
195.190.27.0/24 maxlen: 24
45.15.204.0/22 maxlen: 22
91.212.236.0/24 maxlen: 24
185.218.212.0/22 maxlen: 22
185.181.4.0/22 maxlen: 22
185.31.148.0/22 maxlen: 22
91.229.136.0/24 maxlen: 24
2a00:ba60::/32 maxlen: 32
2a00:ba60::/31 maxlen: 31
2a00:ba62::/32 maxlen: 32
2a00:ba61::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376488416 (0x1670c1e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a28815e43926af7eb961de7b703aed6328953e30
Validity
Not Before: Jan 5 07:56:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3863ffdc7ae43f27e752d0f9bc3f3fdd32035751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:1c:bf:d1:4d:8d:03:85:3d:09:e8:dc:63:
c8:fb:79:c2:a7:cc:a5:e4:23:24:ca:8d:a8:dc:e7:
e7:35:57:53:f1:b0:3a:8f:5c:3a:9f:d3:7b:d0:08:
96:86:19:eb:c1:c5:ea:42:b8:7a:be:81:6a:53:b4:
df:e6:06:40:00:c1:7d:08:56:71:32:e9:cf:8b:c3:
9e:51:93:e8:f8:a7:2b:1c:a8:dd:9b:80:14:3c:90:
23:f1:6a:46:b4:1c:3c:e0:42:34:95:de:e8:d3:83:
85:d4:82:51:42:60:c9:13:15:6d:a4:bd:71:aa:90:
d8:e9:39:f9:a5:f7:86:a6:3e:97:a7:5d:99:a9:00:
bc:c1:24:85:d1:18:f1:ec:ff:1b:82:dc:d5:84:61:
87:2c:67:32:71:c8:b8:a1:38:fd:a2:ea:d4:40:17:
44:7b:44:9b:09:cb:e2:b8:c9:fc:af:78:59:67:f6:
99:98:9b:f6:82:9b:74:dd:81:50:30:31:2d:a1:c1:
96:54:e8:6a:59:27:92:26:ff:f4:c6:29:5b:dc:6a:
87:b9:bf:ad:2c:2b:32:0b:eb:76:f0:4c:c4:85:d1:
c5:e2:48:c9:ae:18:00:4a:41:7b:bc:23:be:3d:be:
cc:39:8a:b2:2f:ec:9a:00:9e:89:32:55:94:e1:54:
73:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:63:FF:DC:7A:E4:3F:27:E7:52:D0:F9:BC:3F:3F:DD:32:03:57:51
X509v3 Authority Key Identifier:
keyid:A2:88:15:E4:39:26:AF:7E:B9:61:DE:7B:70:3A:ED:63:28:95:3E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oogV5Dkmr365Yd57cDrtYyiVPjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/67703c-0ef9-465e-8a5a-314f729fa595/1/OGP_3HrkPyfnUtD5vD8_3TIDV1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/67703c-0ef9-465e-8a5a-314f729fa595/1/oogV5Dkmr365Yd57cDrtYyiVPjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.204.0/22
91.212.236.0/24
91.229.136.0/24
109.197.240.0/21
185.31.148.0/22
185.39.168.0/22
185.181.4.0/22
185.218.212.0/22
195.90.116.0/22
195.190.27.0/24
IPv6:
2a00:ba60::-2a00:ba62:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
33:96:85:fc:f1:8c:7c:00:d7:f1:55:77:49:d1:08:ca:88:71:
2a:ad:18:81:83:a5:12:a6:bd:ef:68:1c:02:24:b9:d3:f3:07:
bb:76:33:22:17:54:7d:7f:b9:87:c4:80:1e:a2:d8:5b:87:88:
77:ca:8b:82:95:49:dc:8c:87:18:0a:cb:af:7e:4d:ff:0e:69:
d9:78:4a:5e:bd:dd:f1:07:3c:01:50:54:69:68:ed:cc:8c:18:
47:cf:de:aa:80:f0:3c:d7:77:54:9b:84:2f:97:c3:ef:ae:a3:
4e:17:7f:eb:39:45:f4:d8:68:e5:62:0a:50:e2:04:af:1b:05:
3a:7e:ff:25:8e:2b:84:48:70:5c:21:2a:3d:5f:ba:e9:3e:4e:
f1:fb:78:c2:3b:bc:a1:49:ee:19:24:23:28:30:15:e3:32:1f:
2e:a1:62:ad:38:0f:c8:c1:1f:61:30:27:10:60:1a:09:de:66:
e7:72:88:6b:c3:ad:91:79:da:8c:48:64:e6:af:80:7e:e4:db:
08:80:6c:bf:75:37:09:33:a8:e6:97:4f:3e:47:cc:aa:e2:53:
ff:01:82:aa:94:c8:9a:00:cb:ec:b5:15:d8:13:8c:47:02:aa:
03:a7:45:14:92:56:69:cc:2b:36:db:0e:40:00:d9:42:25:81:
16:15:13:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:03 2023 by rpki-client on console-fra.rpki-client.org