Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/OawqFaHLA-9RnXg0iRqtaDD2cnk.roa
File: OawqFaHLA-9RnXg0iRqtaDD2cnk.roa (raw, json)
Hash identifier: 5fFNYUZCc+H3HEvpwLCCNLW8hjc1XYBrkoXYD2wU0DA=
Subject key identifier: 39:AC:2A:15:A1:CB:03:EF:51:9D:78:34:89:1A:AD:68:30:F6:72:79
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B1D77C2705BDB602530A6C51EDCFE
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/OawqFaHLA-9RnXg0iRqtaDD2cnk.roa
Signing time: Sun 01 Jan 2023 13:35:11 +0000
ROA not before: Sun 01 Jan 2023 13:35:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212823
IP address blocks: 194.209.192.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:1d:77:c2:70:5b:db:60:25:30:a6:c5:1e:dc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39ac2a15a1cb03ef519d7834891aad6830f67279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:14:be:b0:df:d4:56:91:3f:6f:7d:9a:b2:bc:
70:24:30:a6:54:14:18:22:37:97:6b:bc:19:dd:66:
7b:b7:5e:1b:cf:52:b2:cc:fc:3d:58:8d:ae:d3:1a:
1d:93:81:5c:6f:2a:2f:96:d1:be:9d:78:45:b3:b3:
69:0d:b2:d1:c7:0b:ba:9c:56:e3:df:e3:2c:1f:a9:
9c:03:57:70:2f:b6:26:e9:e2:52:ca:bb:f3:fb:1a:
c1:6b:0c:c7:33:9b:55:28:63:43:a6:ac:46:21:8c:
cc:ff:c7:45:52:4e:1a:1e:4f:4f:9b:9e:29:f9:0e:
77:ec:28:af:72:60:6c:0b:d2:c4:d1:dc:e4:44:1d:
1b:d6:90:3a:7b:5b:4b:a0:9f:fa:99:4f:e7:6f:4a:
43:5c:97:2a:d8:30:a8:9a:59:c3:d0:92:30:aa:3f:
09:09:b5:4e:ea:5f:0a:f7:b9:5d:ba:37:9f:3c:cc:
f9:ed:47:df:ff:56:bc:e7:1c:93:dc:8f:73:a9:d7:
45:74:49:b6:41:f2:9c:4f:40:15:37:65:57:82:a3:
ab:4f:16:ff:c5:97:9e:d0:88:dc:74:6d:d8:3f:dd:
99:96:57:08:58:ce:80:bc:83:a7:66:0a:b5:22:09:
23:6a:75:20:73:b4:37:49:19:d2:dd:62:b3:d6:c3:
7d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AC:2A:15:A1:CB:03:EF:51:9D:78:34:89:1A:AD:68:30:F6:72:79
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/OawqFaHLA-9RnXg0iRqtaDD2cnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.192.0/23
Signature Algorithm: sha256WithRSAEncryption
30:5a:04:95:e1:6a:ed:28:d2:50:71:7f:d4:02:40:70:fe:91:
0b:6e:30:85:2d:e4:3b:33:ed:f6:b0:2d:33:cf:7f:c3:60:b5:
97:f1:db:73:d7:09:93:dc:2f:9b:8b:82:10:9f:71:3d:a6:bf:
79:dc:c1:74:02:1c:15:81:9b:03:d7:56:21:33:3f:5e:1f:c3:
2e:6e:5a:10:ce:a7:aa:ad:db:1f:00:c7:0c:e8:f4:53:4e:ea:
72:33:53:40:45:53:df:37:31:28:87:54:ef:ab:c3:f0:71:10:
84:3e:60:05:b6:8d:85:cb:25:f7:9d:bc:5f:43:3c:df:28:30:
6c:a3:4a:9f:6d:3f:66:b2:9d:93:57:0c:4c:78:d0:7c:ec:00:
ee:30:eb:0a:7a:2a:92:ff:d4:f4:b7:c0:6f:d1:1d:cc:00:34:
bd:62:a6:65:a9:17:92:c6:8b:75:72:c4:e5:72:fa:e3:ba:07:
1c:42:51:c9:12:62:11:9b:d9:65:b4:21:95:ba:6b:7e:37:56:
b7:00:60:ea:3b:e0:ec:ac:0b:23:cd:e8:90:70:38:64:e6:f8:
6c:67:cf:c8:49:75:9b:d5:c0:7c:cb:b9:50:57:f9:ab:14:63:
47:1c:94:93:33:b0:cf:46:eb:6a:52:5e:fe:03:4a:0c:9a:f7:
e4:e2:31:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:36:58 2025 by rpki-client