Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/OhsEYMs911sSmzsfxMYxXhIoAAA.roa
File: OhsEYMs911sSmzsfxMYxXhIoAAA.roa (raw, json)
Hash identifier: j5n7pAAjt/a4jC6RIU4AHolN3wvxzCikcOa6NI5yv3I=
Subject key identifier: 3A:1B:04:60:CB:3D:D7:5B:12:9B:3B:1F:C4:C6:31:5E:12:28:00:00
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 06BD5D64
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/OhsEYMs911sSmzsfxMYxXhIoAAA.roa
Signing time: Sat 01 Jan 2022 11:03:13 +0000
ROA not before: Sat 01 Jan 2022 11:03:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134196
IP address blocks: 2a0d:2480::/29 maxlen: 29
2a0c:f480::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113073508 (0x6bd5d64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Jan 1 11:03:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a1b0460cb3dd75b129b3b1fc4c6315e12280000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4a:08:e7:8f:0c:73:e3:9b:29:45:8c:cc:91:
66:b4:54:0b:6e:47:db:8c:85:37:65:15:28:d7:3c:
70:c0:f3:a3:bf:e3:35:67:b1:81:67:00:5f:ec:01:
46:8d:a6:7c:c4:f7:ed:88:65:1f:55:94:f3:39:3c:
2e:00:d2:7b:35:7b:17:57:e0:84:dc:d6:93:96:1a:
ee:e0:29:a2:d7:20:6f:81:21:4f:39:4e:9b:dd:19:
bb:db:cc:3c:28:4c:76:1c:ef:e9:60:45:b6:ad:3d:
4e:91:b7:80:c3:e4:47:43:b2:96:78:23:f6:2d:54:
c8:09:21:2b:9f:a2:93:88:b4:8e:1f:7c:c9:10:b3:
ad:c3:9a:38:0e:9e:94:6e:f5:62:9c:57:a6:ca:a3:
b9:c7:6f:ca:87:7e:29:9f:b6:b6:3d:8f:79:1b:3c:
92:66:5c:5a:0d:3e:19:29:1b:17:36:09:af:5a:78:
11:b0:e4:38:91:d4:a2:a6:21:b3:75:c6:17:26:8b:
70:1a:c9:fa:68:e9:b0:e5:1c:6c:75:63:f1:73:76:
65:c7:51:ba:71:df:2f:27:99:fc:49:7a:fe:ce:1f:
9a:a8:ba:7c:8e:af:77:78:56:f4:32:7e:92:09:64:
58:ef:56:49:67:d2:d2:63:68:4d:5f:12:c7:da:cd:
60:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1B:04:60:CB:3D:D7:5B:12:9B:3B:1F:C4:C6:31:5E:12:28:00:00
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/OhsEYMs911sSmzsfxMYxXhIoAAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:f480::/29
2a0d:2480::/29
Signature Algorithm: sha256WithRSAEncryption
51:be:be:97:ca:8f:9d:53:fd:73:4a:4e:4b:f9:7d:4b:5f:0a:
88:46:f3:7c:1d:a8:ee:4b:5c:33:be:ec:68:38:28:3b:8b:9a:
22:af:bd:77:62:c7:aa:04:7c:53:68:17:b3:29:79:fe:69:b4:
cb:80:2d:ce:96:d1:f6:8d:66:c1:f9:a6:65:de:b8:64:3e:fe:
2d:0a:f0:ab:b7:ad:67:37:17:26:13:1b:04:0d:b4:37:c2:41:
76:7f:87:b7:30:82:a5:00:05:e4:81:df:f3:ce:23:d2:44:e7:
11:bc:85:a4:9a:c6:25:04:2e:ef:39:f6:35:c2:fd:0c:42:eb:
13:92:f3:62:9a:be:11:e4:a8:c5:2a:cd:15:e6:7b:a2:d1:6d:
a7:2c:ae:92:6f:42:39:d3:77:33:d9:18:4d:70:e2:36:bf:40:
a5:a0:31:e5:8f:36:12:d0:6a:8b:01:89:a4:7b:29:5d:1e:da:
55:3d:80:e3:5d:fb:41:f6:22:0b:45:dd:c8:8c:2d:82:37:17:
04:2a:bf:db:04:45:c4:6e:be:7a:ba:04:37:5a:d8:f8:90:da:
f0:37:5b:73:a8:89:d1:d9:cb:8a:b1:30:50:3b:d6:83:d5:ec:
dd:0f:5b:51:14:9c:ed:85:9f:ac:b5:ef:11:36:63:51:b3:09:
eb:93:45:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:02 2025 by rpki-client