Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/oP5pKOy07MGOuR7X7Kv31McSLYY.roa
File: oP5pKOy07MGOuR7X7Kv31McSLYY.roa (raw, json)
Hash identifier: Ybr9hX90kvjSk1aq7DUlVpK+7IkALMh7hfDekKvXonM=
Subject key identifier: A0:FE:69:28:EC:B4:EC:C1:8E:B9:1E:D7:EC:AB:F7:D4:C7:12:2D:86
Certificate issuer: /CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519
Certificate serial: 0621C80D
Authority key identifier: 79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/oP5pKOy07MGOuR7X7Kv31McSLYY.roa
Signing time: Sat 01 Jan 2022 10:54:17 +0000
ROA not before: Sat 01 Jan 2022 10:54:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209646
IP address blocks: 185.63.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102877197 (0x621c80d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519
Validity
Not Before: Jan 1 10:54:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0fe6928ecb4ecc18eb91ed7ecabf7d4c7122d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c6:5c:90:3b:12:77:97:c8:57:2f:f3:15:b6:
4e:ba:29:27:8c:42:8d:50:ab:34:e7:98:90:16:ec:
4f:f8:38:f5:d8:2d:85:51:8d:27:5c:f1:b2:4c:0b:
ed:96:e0:13:12:a9:1f:e5:7b:65:fc:19:f0:49:3a:
66:81:c0:b1:4b:53:06:cd:59:50:48:31:ee:24:7f:
ae:a5:9c:28:16:e3:50:e7:13:0b:67:89:a3:c6:07:
9d:f6:23:76:7a:8a:82:c4:ae:09:8c:34:e4:30:8e:
b6:d7:3a:f2:7f:85:a2:4e:c6:b9:8b:55:37:35:bd:
20:54:39:42:52:c3:2b:e4:bc:52:7e:71:96:ce:41:
69:ab:54:91:14:a7:80:7f:4a:b0:77:d7:7b:b2:ac:
9d:60:e3:c7:7d:52:31:bb:ed:5c:c7:27:d2:da:bf:
b7:c4:57:1a:ef:0e:90:f6:17:e8:90:83:6b:e1:fe:
28:5d:a0:c1:15:39:4c:20:b6:f2:9f:69:55:be:0f:
a0:86:23:0b:ac:7a:d6:7f:47:70:09:2c:c7:01:13:
a0:b5:81:2a:0e:a5:e9:23:c2:06:02:c1:ed:7d:86:
a3:f5:97:30:5d:e3:d4:7a:ab:80:4b:c9:c2:c2:f9:
24:0a:3c:ef:d2:c0:be:64:af:c4:1a:4c:42:a6:10:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FE:69:28:EC:B4:EC:C1:8E:B9:1E:D7:EC:AB:F7:D4:C7:12:2D:86
X509v3 Authority Key Identifier:
keyid:79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/oP5pKOy07MGOuR7X7Kv31McSLYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.160.0/24
Signature Algorithm: sha256WithRSAEncryption
87:87:03:60:78:14:79:5f:4c:2b:0d:e3:69:22:d9:da:73:89:
b6:20:4c:95:7b:7a:d8:49:f0:3e:6a:90:f1:12:a1:dc:1c:ea:
6d:8e:ea:a1:5b:36:2e:32:31:d2:19:ee:2d:33:4e:fd:a0:8c:
4d:90:ee:30:c3:7b:30:6d:cd:07:33:80:8c:af:94:af:95:97:
d7:58:ca:52:0e:db:b1:10:ae:c5:8c:b0:24:a5:56:84:13:b5:
d8:9e:ab:98:32:94:43:57:d3:16:11:79:57:ed:57:2c:3e:4d:
6f:2f:70:c4:03:9c:7d:c1:6b:80:51:87:0c:b8:3d:7b:62:82:
95:85:4c:83:b4:8d:ec:b3:79:a8:ba:64:b5:9c:f3:d1:03:84:
54:b3:9b:60:e4:0f:4e:6c:4a:4d:51:58:af:f3:c7:9a:ca:38:
9d:b2:8e:28:60:81:ce:94:d6:9c:e2:ed:cc:f5:9b:2c:bd:de:
11:9e:0c:60:66:dd:81:5c:1c:23:3d:a7:73:e6:1f:1e:20:ee:
5e:fe:e3:f6:aa:ef:fd:e4:b5:e6:d2:4e:43:18:04:51:ca:9a:
c1:d8:b1:a5:66:1a:a1:ed:9a:02:ad:80:d7:2f:a9:b2:81:0f:
ce:b9:25:23:09:e4:7b:84:50:36:8e:61:0e:fa:72:41:a7:34:
89:ce:4d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:42:27 2025 by rpki-client