Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/oHMn-z5lp4gDKU4CtSyaxS9iNS4.roa
File: oHMn-z5lp4gDKU4CtSyaxS9iNS4.roa (raw, json)
Hash identifier: 3HeeKb9ywzHHgktl1m+4lV2bO5q2e+1eTltpPrtzZUQ=
Subject key identifier: A0:73:27:FB:3E:65:A7:88:03:29:4E:02:B5:2C:9A:C5:2F:62:35:2E
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0720FEDE
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/oHMn-z5lp4gDKU4CtSyaxS9iNS4.roa
Signing time: Wed 16 Feb 2022 11:04:51 +0000
ROA not before: Wed 16 Feb 2022 11:04:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 94.74.137.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119602910 (0x720fede)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Feb 16 11:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a07327fb3e65a78803294e02b52c9ac52f62352e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d3:72:92:84:6c:03:6f:73:c4:03:3f:df:23:
99:66:6a:ea:8d:7d:b1:66:51:99:98:44:c9:c5:98:
8b:06:76:41:38:8c:e7:3f:3e:23:41:cd:29:96:1d:
fe:d4:df:61:38:25:8b:d9:21:27:0e:49:1d:2c:c3:
8e:2d:00:2b:c7:46:b6:d9:60:33:d4:6a:c9:da:fd:
39:fe:99:36:79:a0:a0:34:20:69:bd:f6:64:0a:2c:
b0:1e:a2:e0:5b:6c:c0:39:64:f5:70:a3:7a:b5:75:
bc:5e:47:cc:94:5d:cf:94:9e:a9:36:22:60:9b:19:
07:9c:cc:98:99:9f:6e:6b:57:51:3c:8b:e8:b6:de:
49:f0:e2:55:80:e2:d3:20:b5:e0:38:d8:2c:a9:fb:
42:c0:4c:97:22:e6:30:c5:77:0b:54:ab:04:1c:96:
d3:ee:af:75:6c:41:63:f5:1a:fd:75:f3:47:15:f5:
0a:80:8c:bc:1b:1e:c0:d0:54:4b:ca:20:3f:0a:14:
3c:af:c2:19:95:02:b6:4d:d7:c8:1d:34:c9:77:63:
60:ff:43:ec:ce:a9:e1:8d:1e:d7:dc:83:31:e3:10:
ce:02:49:5c:8c:25:87:22:fc:c4:31:70:94:37:f0:
99:ec:23:e4:1e:ca:86:9d:f8:4e:9e:a9:ca:0b:7f:
10:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:73:27:FB:3E:65:A7:88:03:29:4E:02:B5:2C:9A:C5:2F:62:35:2E
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/oHMn-z5lp4gDKU4CtSyaxS9iNS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.137.0/24
94.74.169.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:dd:a6:84:60:2a:80:02:04:29:d9:25:ed:2c:7b:cc:d2:b2:
5b:5a:62:e1:20:89:fb:3b:47:0f:12:8a:81:c6:1f:cb:bd:ee:
5a:b6:fc:80:fa:b8:41:0c:ee:e6:33:e4:19:e7:79:8b:f3:d6:
87:04:40:a2:5f:70:c0:11:69:87:cd:e8:1d:c0:f8:d8:69:83:
2c:05:5a:44:85:64:0f:06:47:a1:5b:43:93:90:05:5c:5f:77:
32:57:d7:47:26:cf:16:90:c0:c8:b3:b9:c6:19:10:07:40:5b:
57:a5:4c:24:37:99:6b:73:2a:9a:75:0d:bc:78:47:81:76:a2:
85:00:d2:fd:0a:da:67:23:35:03:ef:7b:6a:c7:99:85:e8:f2:
94:98:0e:12:53:0f:c7:b5:4e:c0:3b:d3:04:5b:df:45:9e:b9:
5f:88:24:07:fd:e9:de:0c:8a:6c:d8:1d:20:da:c5:07:ea:57:
56:79:b4:99:c9:9b:c3:77:1f:74:c3:a3:ab:41:57:0e:84:28:
ba:96:a6:0d:c9:59:1c:f0:06:e1:bc:f2:b2:a7:35:4a:32:ac:
47:0a:47:ef:97:d7:2b:6b:2a:9b:c1:c2:e8:00:43:5c:6e:b7:
f8:d0:2e:79:96:ba:4a:ba:bf:9d:bd:4b:fd:50:a8:f7:35:6c:
07:19:84:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:16 2025 by rpki-client