Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/o0g0E52KOGT8z-BWdsVE54ZVpsc.roa
File: o0g0E52KOGT8z-BWdsVE54ZVpsc.roa (raw, json)
Hash identifier: bZxU6/SZYDERsUjlkkL6ti/pEPNLVDsBXlBhj1NJyZM=
Subject key identifier: A3:48:34:13:9D:8A:38:64:FC:CF:E0:56:76:C5:44:E7:86:55:A6:C7
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 3F6EC960
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/o0g0E52KOGT8z-BWdsVE54ZVpsc.roa
Signing time: Sat 01 Jan 2022 15:05:12 +0000
ROA not before: Sat 01 Jan 2022 15:05:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 378
IP address blocks: 192.117.80.0/20 maxlen: 20
192.115.164.0/22 maxlen: 22
192.115.168.0/21 maxlen: 21
192.114.0.0/21 maxlen: 21
192.114.16.0/21 maxlen: 21
192.115.192.0/21 maxlen: 21
128.139.0.0/16 maxlen: 16
192.114.92.0/22 maxlen: 22
192.114.96.0/20 maxlen: 20
192.114.102.0/24 maxlen: 24
192.114.100.0/24 maxlen: 24
192.114.101.0/24 maxlen: 24
192.114.124.0/22 maxlen: 22
128.139.199.0/24 maxlen: 24
192.114.128.0/20 maxlen: 20
185.115.212.0/22 maxlen: 22
192.114.48.0/21 maxlen: 21
192.114.56.0/22 maxlen: 22
192.114.60.0/23 maxlen: 23
192.114.192.0/18 maxlen: 18
128.139.200.0/24 maxlen: 24
192.115.46.0/24 maxlen: 24
192.115.64.0/22 maxlen: 22
132.78.0.0/16 maxlen: 16
192.115.32.0/20 maxlen: 20
2001:bf8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1064225120 (0x3f6ec960)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: Jan 1 15:05:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a34834139d8a3864fccfe05676c544e78655a6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:78:39:8e:f7:7c:e2:82:76:b4:af:1f:e7:04:
68:25:d8:ad:9a:7b:34:e0:19:b3:db:36:2a:8f:d9:
de:c1:3e:69:97:c8:b3:30:20:65:96:b2:dc:6b:ed:
a7:16:ee:25:f0:7e:75:ad:4e:2c:2b:3d:b1:0c:ea:
74:f2:42:5d:f3:08:e9:e0:aa:44:c6:ca:b1:f2:fe:
3d:0f:51:a2:cd:78:7a:59:73:f9:e1:0b:12:8e:48:
09:23:a7:fd:d2:f9:08:74:35:40:3a:55:25:60:0b:
75:02:b7:88:09:19:a9:c1:fd:04:94:24:d7:bf:9e:
39:b4:11:7f:da:9b:42:51:97:2d:c7:de:f6:af:25:
be:67:07:69:39:d4:c0:f7:83:ad:17:1c:0e:c0:7c:
8a:b6:36:bd:6a:b8:c4:7a:bc:53:0a:54:55:88:20:
c7:a6:ca:c2:8c:af:a2:c4:5d:7f:ea:c5:45:7a:82:
0a:6a:88:e5:00:cd:7f:d8:35:27:f6:92:bd:e3:06:
02:75:fe:26:ec:e5:cb:a1:b4:aa:94:2c:33:e2:2d:
d3:3b:58:fd:e0:ec:96:20:d3:ba:32:f7:e5:91:9b:
18:d9:10:99:ef:14:b1:15:05:98:ef:95:23:b7:71:
85:24:7c:89:77:c5:f0:79:c4:9d:77:99:7b:1d:40:
87:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:48:34:13:9D:8A:38:64:FC:CF:E0:56:76:C5:44:E7:86:55:A6:C7
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/o0g0E52KOGT8z-BWdsVE54ZVpsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.139.0.0/16
132.78.0.0/16
185.115.212.0/22
192.114.0.0/21
192.114.16.0/21
192.114.48.0-192.114.61.255
192.114.92.0-192.114.111.255
192.114.124.0-192.114.143.255
192.114.192.0/18
192.115.32.0/20
192.115.64.0/22
192.115.164.0-192.115.175.255
192.115.192.0/21
192.117.80.0/20
IPv6:
2001:bf8::/32
Signature Algorithm: sha256WithRSAEncryption
01:f1:ff:61:05:44:a9:00:1b:c9:57:98:4d:ab:5e:ec:93:c5:
3b:47:de:db:a1:02:1f:a7:20:ec:77:06:43:31:31:35:c4:bb:
93:b6:f0:79:a5:21:bc:91:b0:0f:46:a5:6c:0f:df:42:4d:d6:
a1:fc:e3:00:93:7a:d7:09:06:78:da:04:e5:60:70:09:14:c9:
10:c0:6f:cc:8f:33:e8:4e:70:f8:de:ce:50:8b:ef:38:de:79:
25:47:93:c6:ad:76:3c:f6:df:f2:15:6d:44:29:06:e0:c4:1f:
bb:1e:de:80:44:fb:c8:f1:23:14:a7:81:a6:bc:1e:f2:07:eb:
24:34:26:c5:d5:49:5a:b0:73:3a:23:4a:16:5b:ee:b5:78:e5:
eb:d1:68:38:5c:e2:7c:a8:45:53:ed:0a:9e:de:08:7c:14:e3:
00:39:10:50:21:fb:68:f3:5c:1b:fc:d4:19:83:ff:de:8f:34:
d3:d7:6e:19:01:0d:8a:70:73:32:83:a8:d8:ba:99:17:75:d6:
20:24:30:35:1e:42:64:e5:76:bd:32:66:46:83:18:79:5f:bf:
81:78:26:a6:37:ea:35:e4:82:2a:e7:eb:00:1e:2c:fc:9f:3b:
7d:18:f0:a0:3b:e1:83:8a:ba:19:95:8e:36:06:f0:d7:24:4a:
2e:6a:84:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:31 2024 by rpki-client on console-fra.rpki-client.org