Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/oxhxCqbHl2OK6XelNKuFHAaRi4U.roa
File: oxhxCqbHl2OK6XelNKuFHAaRi4U.roa (raw, json)
Hash identifier: Qdwnyx8L97V2E/rh+AubbFatDVYz77DJBkiUgwA0l0w=
Subject key identifier: A3:18:71:0A:A6:C7:97:63:8A:E9:77:A5:34:AB:85:1C:06:91:8B:85
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 018506B7DDD5B9DB9CA1C7DC9DEC9039B980
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/oxhxCqbHl2OK6XelNKuFHAaRi4U.roa
Signing time: Mon 12 Dec 2022 14:23:11 +0000
ROA not before: Mon 12 Dec 2022 14:23:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199479
IP address blocks: 185.14.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:b7:dd:d5:b9:db:9c:a1:c7:dc:9d:ec:90:39:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Dec 12 14:23:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a318710aa6c797638ae977a534ab851c06918b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:35:a6:42:60:d7:ca:eb:df:54:b9:f1:f5:
d2:ed:2e:f7:20:af:99:e2:c3:b7:9a:05:c2:1a:47:
57:bc:e9:71:81:48:71:a4:ea:4a:11:ae:64:fd:d5:
67:6b:84:4e:d2:66:d2:fe:c0:0a:ef:56:6c:0a:51:
23:97:bd:f6:45:35:b3:e0:0f:a4:d8:b9:8f:20:9d:
2a:b4:06:17:c5:8d:a1:43:28:ec:d4:ec:fe:41:e8:
f1:99:28:2d:f7:4f:5e:b6:a0:ed:a2:cc:7b:86:42:
f3:c4:46:3e:24:84:83:15:f1:01:e5:59:b5:09:7f:
40:e8:ec:2a:41:90:d9:e7:b2:37:24:ef:0f:ef:5b:
d9:47:54:95:83:1a:c3:67:a9:90:0b:b9:0e:b2:54:
78:d9:a9:99:c0:59:2e:e7:f7:97:86:6c:ef:10:8f:
b2:e1:5a:f1:de:05:be:ac:b2:6b:6a:29:a0:c3:33:
67:3a:96:2d:ea:66:15:c7:66:ec:55:40:83:bc:79:
15:6f:6f:e7:0c:c9:4f:ef:ac:53:45:80:22:0f:51:
09:06:44:47:d6:41:36:3b:53:30:1b:2c:75:df:64:
5f:52:06:1f:dc:05:9f:b8:88:1e:9b:dc:36:fc:f2:
2e:96:2c:61:1f:ad:6f:30:28:e8:ae:95:10:48:65:
4c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:18:71:0A:A6:C7:97:63:8A:E9:77:A5:34:AB:85:1C:06:91:8B:85
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/oxhxCqbHl2OK6XelNKuFHAaRi4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.84.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:95:1a:2f:1e:a2:dd:be:ed:7f:ef:cc:ec:98:e0:70:f0:e0:
01:8b:ff:66:e3:14:bb:0f:c7:81:25:aa:57:45:f8:7e:6a:5f:
61:79:9f:5e:16:e0:f9:f3:d0:9f:99:56:48:92:a8:63:07:96:
90:34:02:03:e5:1d:5e:0e:b7:42:22:79:2b:f8:26:e0:7e:c8:
4a:ba:6f:b6:5a:45:47:b0:59:f8:39:06:03:74:62:95:05:9c:
29:96:93:ef:25:fc:98:ad:92:58:93:4f:4b:10:65:f8:a5:74:
fa:e6:c6:ac:1d:57:b6:ac:07:70:86:4f:9d:e7:38:06:61:81:
90:8d:f3:06:2b:e6:2d:c4:d6:4e:f8:86:d3:b8:96:30:44:3f:
0d:4a:4d:d8:36:a0:b8:0b:1d:a6:32:2f:c7:52:64:3c:0a:39:
26:26:3f:25:55:53:4c:dd:f4:4c:14:d1:4d:db:fe:d2:1a:92:
df:f5:b3:91:a1:b1:82:60:cc:15:c6:30:c2:66:2f:2b:20:55:
fa:56:8a:12:3b:c5:8f:3a:93:a3:ce:fa:aa:ab:b2:90:e5:3b:
ee:4d:2d:87:d4:4a:d0:83:92:49:b2:cc:91:19:d4:a9:d5:b5:
ff:3f:04:0a:92:bf:ef:63:02:0c:56:cd:ad:0f:68:e6:33:4a:
72:de:f8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:43:04 2025 by rpki-client