Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/OFKN-rayUBBqCRc7p-dnGLff3WQ.roa
File: OFKN-rayUBBqCRc7p-dnGLff3WQ.roa (raw, json)
Hash identifier: GFcAIIsbB1zmrk6V3xFGHh2tq8ZPKNkGS9S6TwWhlmo=
Subject key identifier: 38:52:8D:FA:B6:B2:50:10:6A:09:17:3B:A7:E7:67:18:B7:DF:DD:64
Certificate issuer: /CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Certificate serial: 018572B42A0A19C80291B938C8BC9B135665
Authority key identifier: 17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/OFKN-rayUBBqCRc7p-dnGLff3WQ.roa
Signing time: Mon 02 Jan 2023 13:38:07 +0000
ROA not before: Mon 02 Jan 2023 13:38:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56756
IP address blocks: 91.226.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:2a:0a:19:c8:02:91:b9:38:c8:bc:9b:13:56:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Validity
Not Before: Jan 2 13:38:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38528dfab6b250106a09173ba7e76718b7dfdd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:fc:3e:2d:cb:85:35:1a:57:21:59:8d:73:
4c:e5:6b:01:72:b6:8d:36:c0:ee:7b:5c:69:26:5f:
51:33:7e:2c:05:4e:db:31:4b:cc:3d:c0:d8:be:81:
2a:9c:42:82:6a:04:9c:b3:74:3c:87:ab:3d:fb:d0:
cf:c8:fe:4e:81:7d:7f:9b:f1:a0:f9:a7:75:88:ba:
44:f1:04:9f:16:34:a2:b8:bb:cd:c2:c4:2d:3c:bb:
54:52:c5:8a:ad:6a:2b:eb:28:ca:56:7c:20:63:dd:
ec:51:eb:b5:85:09:fd:2c:22:ba:49:64:45:fe:fd:
8b:ac:80:56:39:89:f4:44:f2:7f:72:40:96:7e:6d:
e1:b0:59:3d:4f:06:df:04:81:bc:91:c5:8c:a9:94:
40:53:8d:18:84:d6:da:f3:c7:9a:86:b3:07:be:36:
f5:78:6f:96:80:43:e7:b6:51:3f:56:25:0c:1a:9a:
4a:36:b6:6a:e0:1d:f9:7b:27:2a:51:fb:4e:5b:b8:
3f:c4:22:fa:e9:b2:ef:a5:42:24:3a:8f:a0:e6:0c:
80:17:34:7d:3c:3e:49:64:9d:c4:c7:e9:a2:cc:6c:
0f:73:58:50:50:bd:9c:2a:f9:ea:24:81:d6:e9:20:
22:bd:f5:ce:40:29:ec:ce:8a:dd:4d:88:1e:64:b3:
1a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:52:8D:FA:B6:B2:50:10:6A:09:17:3B:A7:E7:67:18:B7:DF:DD:64
X509v3 Authority Key Identifier:
keyid:17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/OFKN-rayUBBqCRc7p-dnGLff3WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.207.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:65:8a:00:f1:81:ac:49:75:4a:8d:d6:b0:21:2b:03:78:0c:
c0:d6:bf:40:af:56:68:d4:77:14:c3:16:32:45:68:d0:45:c2:
6e:b3:0e:71:ed:b5:a8:8b:93:5a:94:a4:98:2b:a6:72:ed:eb:
ed:40:b5:ad:7b:86:5f:51:65:7e:34:d5:9c:67:c2:2b:27:64:
89:4f:9f:6d:a8:bc:25:46:06:7a:6b:4b:76:a1:5c:7f:7e:b2:
3e:ff:f7:48:10:a2:ed:e3:76:8e:c1:26:4e:67:ba:66:bd:b0:
9b:ae:f9:d2:66:d2:6f:8d:0e:f6:9d:2a:92:67:ab:ec:6d:46:
90:f8:e3:72:46:c6:15:7c:a6:f1:91:f3:67:63:38:11:55:e5:
a3:d0:48:a6:f4:e3:6a:c2:38:98:33:50:28:5a:2a:45:64:96:
bb:43:a1:6e:3e:60:23:60:57:9a:53:b0:4e:55:4c:d1:2f:13:
f3:09:bf:2d:b1:9f:3c:32:bd:81:bf:fb:bb:61:88:55:37:09:
33:4d:39:7a:1a:9d:c1:ad:ef:54:da:ca:ee:c5:7b:f4:e2:b6:
cc:1d:c2:c3:8f:b3:ef:70:60:80:e8:65:db:3c:0a:45:80:45:
c3:27:34:e0:a3:20:20:14:8d:e5:47:26:76:d1:30:ac:46:e4:
cd:db:cd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:29 2025 by rpki-client