Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/omgcNrsXRRAEzhU-3JkKDFngZ4o.roa
File: omgcNrsXRRAEzhU-3JkKDFngZ4o.roa (raw, json)
Hash identifier: 0Gt4pCfRMik101tScFaZPkCOyTNmqyqj1yOjGQsyaJE=
Subject key identifier: A2:68:1C:36:BB:17:45:10:04:CE:15:3E:DC:99:0A:0C:59:E0:67:8A
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018B70985FB4D99D85F75F39F8670B7DA4E8
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/omgcNrsXRRAEzhU-3JkKDFngZ4o.roa
Signing time: Fri 27 Oct 2023 10:05:16 +0000
ROA not before: Fri 27 Oct 2023 10:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53587
IP address blocks: 37.128.254.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:98:5f:b4:d9:9d:85:f7:5f:39:f8:67:0b:7d:a4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Oct 27 10:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2681c36bb17451004ce153edc990a0c59e0678a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:39:0c:f4:da:b4:08:81:30:ec:df:b4:93:fe:
70:6a:ca:33:42:b6:05:8f:82:70:8f:7e:19:e6:27:
3b:00:55:c1:1e:49:7c:3b:5d:c4:ca:6f:fa:00:89:
e2:4f:38:2e:be:07:e7:d2:17:17:a0:7a:f3:df:da:
4c:f0:0e:07:5c:8e:5e:e8:ed:5a:78:ba:fe:ff:7f:
9a:13:7e:ce:29:4a:e6:e8:0d:c4:79:b6:c5:2c:07:
6d:4d:1c:6f:20:76:bc:28:93:62:a8:71:06:14:bb:
bd:df:f8:af:8d:e2:e7:c3:36:14:cf:6a:b4:7d:31:
e7:f9:c1:24:76:6a:e5:c1:5b:92:42:2b:42:81:ff:
d3:42:0c:ca:db:72:22:8d:57:6a:b8:0d:90:bc:b9:
1f:df:50:3c:a4:48:5d:9f:e7:be:b8:7f:3c:a0:c9:
90:65:58:6a:87:b3:11:bd:49:26:70:29:28:c0:4d:
47:f0:be:ca:e3:63:4a:5e:bd:20:99:e4:33:5b:17:
ce:97:8c:01:58:d7:5b:80:7f:4b:de:a5:a5:43:9f:
92:35:06:98:2a:29:5d:09:00:a7:4b:37:6f:1f:67:
2b:9e:8f:4b:b8:76:56:b2:6a:7b:6f:a6:aa:ce:0b:
b1:d6:8a:a0:31:7a:c2:a1:d3:49:6f:d6:96:d0:13:
e6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:68:1C:36:BB:17:45:10:04:CE:15:3E:DC:99:0A:0C:59:E0:67:8A
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/omgcNrsXRRAEzhU-3JkKDFngZ4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.254.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:de:3d:25:d9:3a:ff:f1:31:2b:f2:4a:00:e3:42:cd:85:a1:
24:bd:60:59:b4:f1:b3:bb:d3:6b:a0:27:9e:49:48:38:4c:89:
e7:e6:f0:f1:79:e8:51:1d:a2:81:22:3e:72:4d:ae:fd:95:d2:
ea:75:a1:f3:a7:52:6e:7d:40:95:73:4a:bd:ad:32:a6:fa:00:
35:17:93:6a:bc:d5:54:83:f8:0e:af:ce:77:4e:2b:2b:69:f6:
e9:88:39:3a:f8:92:f3:99:0d:bb:12:b6:34:93:f1:ad:79:20:
7c:0d:8d:23:87:6b:15:1a:56:ea:e3:a7:62:b7:57:89:27:a1:
8e:c5:5a:0d:de:88:67:f3:8e:bd:a6:2c:2e:44:fd:cf:a0:f2:
84:60:c8:e5:5a:d7:a1:45:49:6c:fe:b3:e1:8b:68:08:8b:54:
79:0f:c5:48:b6:15:39:7f:36:45:f3:4c:21:13:03:3e:48:fa:
41:e4:50:e3:1e:6a:a3:73:d8:cb:b8:ad:fa:16:b7:8d:41:cf:
84:5a:15:e0:11:d5:f1:4b:4d:7d:90:9e:db:c8:64:9e:c7:f1:
18:ae:de:03:ca:a5:1a:6e:95:73:f1:4f:d6:53:60:52:3b:d0:
a0:1e:c4:e1:b8:20:77:1c:4a:12:16:51:af:f0:3c:bf:f8:57:
71:b7:71:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:25 2025 by rpki-client