Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/OlxTbHBIbF-YFg289KSzY79YjQM.roa
File: OlxTbHBIbF-YFg289KSzY79YjQM.roa (raw, json)
Hash identifier: q1YUzwzS6xqM8mkSVmzw9ZSBiLW6PZWQ6KCXXwlVheA=
Subject key identifier: 3A:5C:53:6C:70:48:6C:5F:98:16:0D:BC:F4:A4:B3:63:BF:58:8D:03
Certificate issuer: /CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Certificate serial: 018570DE330BA9C269742594EA6FE29DB2C6
Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/OlxTbHBIbF-YFg289KSzY79YjQM.roa
Signing time: Mon 02 Jan 2023 05:04:48 +0000
ROA not before: Mon 02 Jan 2023 05:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55002
IP address blocks: 195.234.206.0/24 maxlen: 24
195.234.204.0/24 maxlen: 24
195.234.205.0/24 maxlen: 24
195.234.207.0/24 maxlen: 24
2001:67c:2620::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:33:0b:a9:c2:69:74:25:94:ea:6f:e2:9d:b2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Validity
Not Before: Jan 2 05:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a5c536c70486c5f98160dbcf4a4b363bf588d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:72:4e:19:ea:09:ba:a2:bd:45:47:94:9b:0e:
8e:65:e4:06:37:4d:3f:56:b1:16:ad:24:a3:5a:8a:
76:17:7d:e4:5e:13:75:ce:e0:29:f6:22:e6:1c:b2:
db:a8:87:60:31:e5:98:c4:f6:59:4c:3d:08:8d:e7:
a8:7e:b6:34:49:63:9e:ab:bf:85:af:3e:00:bb:b4:
f6:48:59:d2:99:1e:18:0b:29:1c:47:92:1e:9c:91:
04:3e:97:8c:12:6e:5e:61:70:04:95:bd:26:e0:95:
c2:28:30:4c:50:d9:e8:f1:a9:04:99:31:c3:71:b8:
15:60:e5:5b:a4:f2:77:27:42:be:55:f9:60:24:3e:
56:0b:59:d9:28:d7:8f:ee:fd:e8:16:ea:33:7c:37:
52:94:40:a4:5a:bc:c6:3b:eb:eb:15:80:9f:60:af:
0d:29:e3:f3:a0:50:96:8d:02:e5:7a:ae:59:f4:7d:
1b:5d:a8:7a:1e:6a:8b:99:29:ff:b2:d9:3f:77:15:
10:b6:f9:38:c0:91:23:f4:73:95:82:1a:26:ef:a4:
76:54:7c:00:a0:7d:b9:c9:8b:e9:ad:97:20:b4:a0:
56:49:c5:4c:ac:cd:7d:b4:47:f0:d5:3d:4e:23:e9:
63:b9:21:10:f8:df:47:11:74:61:8d:b0:eb:fc:cc:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5C:53:6C:70:48:6C:5F:98:16:0D:BC:F4:A4:B3:63:BF:58:8D:03
X509v3 Authority Key Identifier:
keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/OlxTbHBIbF-YFg289KSzY79YjQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.204.0/22
IPv6:
2001:67c:2620::/48
Signature Algorithm: sha256WithRSAEncryption
8a:8a:e7:16:09:fb:23:00:9a:6a:33:0c:51:30:a6:da:3c:42:
93:b4:06:5e:95:23:ed:3d:45:e8:ad:9b:fa:e0:93:3d:f8:96:
9a:3b:22:60:73:4b:c9:76:67:51:55:60:a4:b6:68:79:ee:7c:
a8:24:5b:c1:91:cb:e8:9a:1b:7b:35:d6:0b:ac:79:e9:37:57:
af:3d:9c:0e:17:a9:0b:97:1f:99:35:57:92:4b:d6:b4:ac:9e:
d2:c1:85:43:0f:a9:e1:b4:f1:75:0f:48:52:ba:8c:93:f4:68:
5e:33:a7:6a:ee:c9:a8:2f:26:05:4d:f2:02:e4:c3:91:33:c6:
a5:c0:07:11:dd:bf:5b:36:5f:87:fa:8f:a3:69:f1:cb:ec:be:
01:38:90:8e:e3:4a:2e:99:34:59:b9:20:b5:da:52:e5:9d:c0:
76:99:b5:6d:f6:77:97:5d:09:05:c9:f4:1a:49:1f:fd:a7:f5:
b9:46:db:29:4d:3d:86:47:8c:22:78:0f:ca:28:3d:18:37:e0:
b2:92:4d:b1:7f:f2:8f:79:fd:82:0a:6b:f6:93:19:a1:93:ae:
7a:36:b9:3a:eb:30:5d:e8:e0:9f:e4:ac:ab:82:a2:1e:70:12:
2c:cb:22:fd:87:3b:8d:27:04:ab:ea:00:6f:e9:38:41:f5:1b:
5f:cd:a5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:23 2025 by rpki-client