Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/at-OODLbr2ozrj6XA5c3HNHoMDs.roa
File: at-OODLbr2ozrj6XA5c3HNHoMDs.roa (raw, json)
Hash identifier: 88krXPtjsV2k6Fnj+XG8zW78UX3bQtpT8c0F3dYs3vU=
Subject key identifier: 6A:DF:8E:38:32:DB:AF:6A:33:AE:3E:97:03:97:37:1C:D1:E8:30:3B
Certificate issuer: /CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Certificate serial: 06BC63DF
Authority key identifier: 38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/at-OODLbr2ozrj6XA5c3HNHoMDs.roa
Signing time: Sat 01 Jan 2022 11:57:45 +0000
ROA not before: Sat 01 Jan 2022 11:57:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56911
IP address blocks: 185.225.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113009631 (0x6bc63df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3815ed0fa620c801aaa9a6f14f6596d7ec9750a1
Validity
Not Before: Jan 1 11:57:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6adf8e3832dbaf6a33ae3e970397371cd1e8303b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:35:d0:e1:31:05:86:82:a5:75:06:6d:b3:
c2:1a:4c:b9:7b:0e:96:cb:ee:e5:49:45:48:88:9d:
79:02:b6:4a:4f:63:5e:2b:b5:66:f2:d1:80:2e:c5:
70:ed:4c:7a:4a:ab:b9:11:4d:2b:56:53:8b:f5:d7:
05:11:b1:56:48:4b:70:eb:d8:56:3c:aa:6d:d4:c4:
b9:3c:48:f1:85:70:0c:63:6d:1e:79:f9:63:c6:5c:
16:3f:12:84:6c:63:37:ca:e1:f7:67:a5:f1:9e:48:
6a:c4:37:f4:bc:5d:17:97:29:4b:39:f2:8a:51:73:
4b:93:14:79:88:19:ea:7b:6e:ee:c9:e1:f6:21:20:
ac:a4:79:80:0d:2d:68:b5:33:97:6f:a1:48:17:53:
33:32:d4:20:f8:81:c9:e9:66:eb:6d:5f:e9:5c:99:
95:db:2e:91:d2:e2:8e:63:b2:ec:17:46:55:59:87:
cd:27:d4:06:44:d4:e1:1d:9a:27:81:d3:66:91:b8:
70:3c:e1:3e:b5:9a:1d:60:62:ef:e1:f8:f0:d9:da:
49:d1:25:5a:4f:15:f7:57:34:e3:5e:0d:ca:ae:d0:
a9:98:58:45:9b:0f:79:86:94:16:be:f7:02:57:83:
cb:b3:03:07:f1:f5:fa:72:ed:1b:a5:d2:26:b9:4a:
f5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DF:8E:38:32:DB:AF:6A:33:AE:3E:97:03:97:37:1C:D1:E8:30:3B
X509v3 Authority Key Identifier:
keyid:38:15:ED:0F:A6:20:C8:01:AA:A9:A6:F1:4F:65:96:D7:EC:97:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBXtD6YgyAGqqabxT2WW1-yXUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/at-OODLbr2ozrj6XA5c3HNHoMDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/32da40-0cbf-4244-b1a4-f35a445635ca/1/OBXtD6YgyAGqqabxT2WW1-yXUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.60.0/22
Signature Algorithm: sha256WithRSAEncryption
87:6d:5b:ee:b2:c0:85:cb:3c:f3:ed:c2:80:49:cf:e1:11:74:
50:83:f5:65:99:f0:47:e5:a0:90:40:a5:6a:a3:f6:b6:12:93:
1e:52:b1:ec:fb:ec:58:99:31:bd:1f:15:a9:a3:07:cd:11:97:
b9:50:8e:bf:f0:d6:86:87:83:60:ba:92:3e:4f:b3:20:0c:b6:
de:30:da:41:ae:e3:12:db:21:cc:20:96:d5:12:af:b7:88:4f:
32:c8:a8:90:07:f0:47:2f:24:81:42:3b:e4:9b:d1:d3:d5:ca:
db:04:e4:3f:70:a6:d6:1a:44:6c:5b:87:cd:37:33:00:37:be:
24:1f:35:d0:47:8e:b0:b6:5e:35:e6:41:d8:84:d6:38:25:77:
fe:95:de:77:a0:6a:16:e3:2b:3f:25:91:1c:1c:00:dc:36:c2:
21:b6:b0:a2:6e:f1:a9:7f:6f:ec:1c:30:21:7c:0e:38:6f:1a:
77:b6:7d:02:a4:db:27:f1:f2:ef:f6:c6:66:61:ae:b2:e9:b0:
20:f7:68:6c:91:b7:cb:17:2d:53:d4:48:d4:ef:d8:ba:12:d3:
14:08:63:d8:15:89:dc:99:85:38:1a:2a:e6:77:03:dc:4e:3c:
26:e9:66:9d:f7:1f:47:9d:5d:c0:00:9f:29:a1:57:ce:b3:14:
ca:e9:73:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:11:55 2025 by rpki-client