Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OJKZNditlK6Umky2-0qJaYb9iK0.roa
File: OJKZNditlK6Umky2-0qJaYb9iK0.roa (raw, json)
Hash identifier: OB4dvfDPfu96dWHayyRD37SgBHVO+G0K8tT7uaqiDZo=
Subject key identifier: 38:92:99:35:D8:AD:94:AE:94:9A:4C:B6:FB:4A:89:69:86:FD:88:AD
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0189D66260D237A38C414F0606664807D67D
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OJKZNditlK6Umky2-0qJaYb9iK0.roa
Signing time: Tue 08 Aug 2023 18:21:58 +0000
ROA not before: Tue 08 Aug 2023 18:21:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.116.226.0/23 maxlen: 24
212.116.252.0/22 maxlen: 24
91.147.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d6:62:60:d2:37:a3:8c:41:4f:06:06:66:48:07:d6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Aug 8 18:21:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38929935d8ad94ae949a4cb6fb4a896986fd88ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:cf:4f:4d:fc:b8:5d:2f:86:1b:1c:da:d0:
b8:ca:81:ca:34:7f:1e:36:02:22:90:02:69:c4:f3:
88:cc:b8:7f:b9:6c:22:82:43:c2:e2:72:52:48:26:
2a:53:1c:09:5d:d7:d0:d2:2b:bf:64:ba:61:c0:10:
1a:b0:fc:0f:fd:3c:18:07:6b:cf:71:d1:b3:b6:f0:
7c:ff:02:1a:32:d8:2a:01:3a:c8:fd:4a:35:1a:24:
f9:fb:a1:db:fa:54:60:c7:53:10:80:92:35:21:11:
80:f5:dc:a7:20:8a:74:ab:b5:ef:6c:71:6c:d4:a3:
91:e1:61:0d:ef:ae:f3:35:76:22:95:6a:93:4d:0a:
43:5c:84:74:e5:00:51:28:18:8f:36:ca:cb:7e:bd:
0c:06:92:dd:16:d9:35:4e:58:72:32:e3:0d:14:51:
8f:8a:cb:ba:d0:34:46:65:27:f0:39:f6:a0:70:37:
3c:8d:0b:bb:51:dd:99:67:7c:c4:0e:2d:5b:27:ee:
03:fe:d0:53:6f:c0:6e:24:57:bc:68:c9:8d:86:a3:
c2:4e:69:6c:a5:32:56:45:80:39:fd:64:53:47:33:
9a:c4:eb:0d:12:22:16:8c:2e:b4:ff:c4:bc:e5:e6:
37:a9:bb:d8:c5:b6:ec:9e:3d:cc:45:30:58:c8:24:
6a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:92:99:35:D8:AD:94:AE:94:9A:4C:B6:FB:4A:89:69:86:FD:88:AD
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OJKZNditlK6Umky2-0qJaYb9iK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.116.0/24
212.116.226.0/23
212.116.252.0/22
Signature Algorithm: sha256WithRSAEncryption
e5:5c:9e:b2:ca:61:e5:13:36:dd:36:ce:e6:ad:9c:91:1f:05:
4f:54:95:ac:c2:f8:85:17:fb:ec:ab:36:07:ee:67:72:ce:1b:
42:db:7c:df:cf:53:d9:61:10:36:b9:01:a6:20:b3:cf:22:46:
5d:ba:42:ac:f5:4e:90:64:29:c1:77:5c:5d:0b:08:d5:7f:2b:
52:b2:04:a1:40:2d:74:65:33:c4:d5:62:2c:2d:90:66:13:06:
b6:6f:3d:6e:c5:ad:52:22:fe:13:08:06:17:8f:2f:67:01:4f:
8c:13:04:5b:98:0a:e4:5e:d6:7d:c4:26:d0:6f:68:4c:53:f1:
72:de:58:96:1d:3f:9e:71:f5:2e:86:73:87:ff:be:3d:19:55:
d2:36:f6:4a:50:eb:c4:e0:cd:2f:c7:ea:19:77:df:41:e5:e3:
93:de:7a:c5:78:3a:42:0a:b4:97:0d:eb:5e:89:cc:52:73:00:
02:bc:b2:28:f8:e3:f2:c3:30:e5:57:e7:51:51:7b:80:0b:42:
65:eb:a5:7b:dd:b8:0a:98:dc:e7:06:c1:f0:b5:a7:a4:49:b5:
21:4d:f3:69:54:1e:61:e9:f6:51:b0:fd:f2:ba:cf:1c:0d:46:
75:24:c9:0d:5f:87:2b:63:19:93:b0:4c:83:03:00:66:8c:4b:
4e:2a:1c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:54 2025 by rpki-client