Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/Oohr5C8lmvl1xg9O5amxMTZYMMk.roa
File: Oohr5C8lmvl1xg9O5amxMTZYMMk.roa (raw, json)
Hash identifier: 5wnkWZKcl5PblQOyv7Yv6g2B+yPcBNlZGa8N8OV+Kl8=
Subject key identifier: 3A:88:6B:E4:2F:25:9A:F9:75:C6:0F:4E:E5:A9:B1:31:36:58:30:C9
Certificate issuer: /CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4
Certificate serial: 01856D8AF0531CD35D438F5998965C7A36AC
Authority key identifier: 9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/Oohr5C8lmvl1xg9O5amxMTZYMMk.roa
Signing time: Sun 01 Jan 2023 13:34:59 +0000
ROA not before: Sun 01 Jan 2023 13:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47548
IP address blocks: 5.149.178.0/24 maxlen: 24
5.149.176.0/20 maxlen: 20
5.149.179.0/24 maxlen: 24
5.149.176.0/24 maxlen: 24
5.149.177.0/24 maxlen: 24
5.149.182.0/24 maxlen: 24
5.149.180.0/24 maxlen: 24
5.149.181.0/24 maxlen: 24
5.149.185.0/24 maxlen: 24
5.149.186.0/24 maxlen: 24
5.149.183.0/24 maxlen: 24
5.149.184.0/24 maxlen: 24
5.149.188.0/23 maxlen: 23
5.149.187.0/24 maxlen: 24
5.149.190.0/23 maxlen: 23
185.216.38.0/24 maxlen: 24
185.216.36.0/24 maxlen: 24
185.216.36.0/22 maxlen: 22
185.216.37.0/24 maxlen: 24
185.216.39.0/24 maxlen: 24
2a00:b7c0:200::/40 maxlen: 40
2a00:b7c0:100::/40 maxlen: 40
2a00:b7c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:f0:53:1c:d3:5d:43:8f:59:98:96:5c:7a:36:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e80702ee6a1dcbf3ae257a199415f59b8338ea4
Validity
Not Before: Jan 1 13:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a886be42f259af975c60f4ee5a9b131365830c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:ee:b8:d7:34:0f:04:c4:94:ff:3c:20:6c:
41:16:db:27:01:f6:e3:4b:85:6b:ab:e9:ba:fd:2a:
c7:98:84:7e:2a:60:a6:09:b2:75:b2:bb:0a:e8:a1:
da:48:19:79:f0:d2:c4:ee:81:0b:9b:29:82:1c:5f:
74:52:04:3a:9c:90:8c:a1:5b:08:70:6a:8b:29:b9:
38:6e:83:02:c2:21:32:26:bc:fc:fb:a7:da:21:cb:
0d:da:2e:1c:f8:85:8f:f0:d6:ff:46:3d:b3:c0:17:
a8:26:95:4d:33:bd:c7:38:22:2b:be:b4:a3:84:75:
e7:29:45:93:8c:3e:09:22:16:9b:bb:08:f6:43:a2:
d4:64:94:18:f8:2f:ef:96:87:04:cd:35:7a:44:bc:
7b:57:f6:37:4b:1a:ce:7a:3f:5c:7b:f5:2e:9b:63:
0d:58:93:b3:7c:2e:ed:d2:d3:44:3a:8f:30:af:fa:
a0:ba:ea:f0:af:85:e7:ad:7d:75:64:47:09:31:ba:
6f:cc:ec:c7:83:1c:46:62:77:f9:00:92:f3:1a:57:
37:4d:c4:b0:4d:e3:83:86:cb:2c:13:58:bd:7a:8e:
ef:32:70:a0:98:b0:20:8c:b2:e1:da:bd:b3:5d:78:
2f:05:55:b7:0b:e6:53:09:76:40:c3:9a:48:a5:5c:
33:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:88:6B:E4:2F:25:9A:F9:75:C6:0F:4E:E5:A9:B1:31:36:58:30:C9
X509v3 Authority Key Identifier:
keyid:9E:80:70:2E:E6:A1:DC:BF:3A:E2:57:A1:99:41:5F:59:B8:33:8E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noBwLuah3L864lehmUFfWbgzjqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/Oohr5C8lmvl1xg9O5amxMTZYMMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1bde39-b6d5-46ec-a813-26ef96643d84/1/noBwLuah3L864lehmUFfWbgzjqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.176.0/20
185.216.36.0/22
IPv6:
2a00:b7c0::/32
Signature Algorithm: sha256WithRSAEncryption
00:f9:8b:85:0f:d8:b9:56:0d:25:05:7e:cb:ab:20:b0:ba:6f:
12:10:57:57:f6:bd:9a:85:92:7a:e0:0b:b3:0c:28:34:a0:ef:
ef:c2:95:e9:03:cc:3a:ec:99:be:d1:17:e3:7e:56:5d:46:3d:
47:6b:4f:ca:30:f2:6d:ad:75:c4:df:7d:56:97:d6:1d:bd:85:
a3:19:02:a0:c8:ea:8e:5a:bb:ee:8c:79:a3:2b:23:2e:ce:ca:
0c:05:fd:50:82:10:bc:08:5f:45:a3:4f:80:7b:cd:4e:0b:73:
e1:93:84:4d:c1:3a:61:41:f6:bc:99:55:6b:74:55:6d:ba:b4:
2a:12:41:75:12:1d:15:33:5e:e0:ef:3b:9d:88:f4:87:5b:a3:
e5:5c:a9:ea:5d:26:8b:12:1e:9e:39:26:66:94:ac:f8:03:32:
7e:fa:37:3c:36:ad:f0:1d:b3:8d:df:86:f0:c8:33:75:02:48:
4d:26:b3:61:4a:b6:ac:b5:37:23:28:21:a6:40:22:c4:a6:b6:
ca:53:57:e6:d6:66:8a:69:d1:51:af:1b:6e:ac:e5:95:9a:6b:
88:5a:a0:bb:06:15:ed:f9:8f:8f:31:2e:a5:39:6f:16:50:47:
c0:55:c9:99:96:fc:9f:32:76:ca:c0:27:ee:80:8b:9d:d7:0a:
28:09:87:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:12 2025 by rpki-client