Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/oaQScmGYm1qTML72Bbe_RvOZAbs.roa
File: oaQScmGYm1qTML72Bbe_RvOZAbs.roa (raw, json)
Hash identifier: F81Vy1TFVmQAYnb1vRq90xkiKqAh86NalBUHnRu6DLw=
Subject key identifier: A1:A4:12:72:61:98:9B:5A:93:30:BE:F6:05:B7:BF:46:F3:99:01:BB
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 01842D49556EA54AAD296A5A6ECF7168326E
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/oaQScmGYm1qTML72Bbe_RvOZAbs.roa
Signing time: Mon 31 Oct 2022 09:04:51 +0000
ROA not before: Mon 31 Oct 2022 09:04:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210558
IP address blocks: 194.26.192.0/24 maxlen: 24
2.58.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:49:55:6e:a5:4a:ad:29:6a:5a:6e:cf:71:68:32:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Oct 31 09:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1a4127261989b5a9330bef605b7bf46f39901bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:95:11:62:73:bd:bd:07:38:75:45:94:49:a9:
53:92:50:82:d0:bb:c8:03:da:25:42:a5:17:4a:b6:
ff:15:92:0b:bb:3b:6f:b5:a8:77:c9:a3:be:bb:4a:
80:cc:76:2a:ca:eb:82:89:e6:f8:7f:bc:c5:ef:9b:
4b:72:4a:4a:dd:5e:f3:5f:52:b1:ef:a4:3d:d9:09:
2a:e9:00:38:01:94:c3:e8:bc:ae:f4:f9:7d:69:56:
db:c0:fc:59:f3:c3:80:70:8f:c7:b8:65:42:e9:3e:
98:43:f9:f3:46:b9:55:8b:cd:8b:b8:a5:ec:b3:18:
f5:2a:ea:4c:c5:d9:3c:8c:52:64:41:e6:06:d6:3b:
6b:ae:f6:08:76:d0:b9:83:f1:1d:48:ee:a9:fd:36:
9b:ac:88:b4:42:3e:80:7a:c2:1a:bb:09:46:47:f3:
88:01:bc:c8:70:33:95:7c:a8:3d:6c:f5:14:e3:6c:
62:e3:24:78:14:33:98:cf:33:3e:8a:fb:36:d8:f4:
a4:62:a7:8b:13:4d:a1:54:57:0c:af:f6:22:e4:2f:
d2:e8:97:c5:d0:e0:d1:65:48:05:6a:c1:56:13:11:
d1:75:9c:de:c0:7d:fd:78:e8:5e:64:4f:16:d5:ef:
04:65:78:48:db:eb:da:66:7d:b5:f0:e4:1d:7b:7e:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A4:12:72:61:98:9B:5A:93:30:BE:F6:05:B7:BF:46:F3:99:01:BB
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/oaQScmGYm1qTML72Bbe_RvOZAbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.56.0/24
194.26.192.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:03:b2:85:ec:b3:5e:6a:f2:3b:21:e1:e7:89:76:09:31:a9:
de:8a:79:59:76:69:3a:39:86:1d:f5:a6:1b:32:49:c3:7b:72:
3e:a9:43:83:c8:3e:c2:eb:10:64:de:23:51:bd:15:b5:3d:19:
b2:cc:13:27:3d:e8:6e:5e:84:24:2d:1f:6a:e8:e7:1a:37:dd:
1a:3d:17:00:c6:e6:fc:2e:9d:51:e0:22:f0:18:ac:23:dc:d4:
4b:14:b0:1b:d6:5e:1c:dd:c1:31:f0:7d:a0:ca:8d:59:09:67:
4a:1f:e0:5b:89:ec:0c:93:11:e7:f5:85:cd:9b:bb:b4:d0:39:
3b:98:ea:25:10:b2:37:a9:c6:4b:83:ba:9c:2f:4c:f0:1f:4f:
5e:3d:cd:e7:0d:db:56:d3:c2:96:04:8b:01:1e:5c:49:6d:f1:
40:d9:15:8c:d6:b2:b5:e5:9a:67:5a:4f:e5:3d:97:1b:6a:b2:
04:11:a5:0d:ec:57:15:18:cb:44:2a:25:56:cc:0f:ad:6f:ed:
90:68:6e:ab:a3:be:8a:c7:80:84:73:6b:2c:e8:ba:18:ad:25:
f4:77:02:b6:b0:ae:de:04:fd:13:e5:ad:37:58:fe:e5:a0:76:
dc:4a:e0:0f:11:a1:94:4c:64:83:73:ce:5c:32:2b:52:33:79:
d5:74:cf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:27:23 2025 by rpki-client