Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/O9b-E-OxrTxQU7dnSF6YjnFdQjE.roa
File: O9b-E-OxrTxQU7dnSF6YjnFdQjE.roa (raw, json)
Hash identifier: UiBX9Xb8RKLRHw8C5T4MNBEzhLQZpt2KDR4JtEDH8qA=
Subject key identifier: 3B:D6:FE:13:E3:B1:AD:3C:50:53:B7:67:48:5E:98:8E:71:5D:42:31
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 018572833D67EB844CCCB75EB1A0573A4555
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/O9b-E-OxrTxQU7dnSF6YjnFdQjE.roa
Signing time: Mon 02 Jan 2023 12:44:41 +0000
ROA not before: Mon 02 Jan 2023 12:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212552
IP address blocks: 185.110.191.0/24 maxlen: 24
193.163.201.0/24 maxlen: 24
185.221.237.0/24 maxlen: 24
185.231.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:3d:67:eb:84:4c:cc:b7:5e:b1:a0:57:3a:45:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Jan 2 12:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bd6fe13e3b1ad3c5053b767485e988e715d4231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6e:bc:88:f3:1a:40:54:00:d1:2b:0e:77:56:
ad:f2:78:d0:33:a8:ab:f7:bd:9d:75:46:d5:c5:b3:
08:f7:d7:7b:cd:a7:79:81:9b:52:18:d1:da:e4:55:
09:7b:4d:b7:a6:18:82:bb:73:49:b2:08:d0:c9:da:
0f:ad:a5:c2:1b:09:bf:2f:18:66:69:7a:a3:9d:f8:
65:17:27:45:4b:23:0e:94:de:fb:76:74:a4:b8:d6:
fe:4f:a6:70:e0:fb:47:a0:6b:e5:d5:f9:dc:e6:83:
a7:5f:c8:97:3d:88:e1:bf:32:24:60:7f:0d:41:55:
9b:3f:cf:03:2f:31:e5:7d:47:2a:e8:8f:db:48:ed:
4d:33:f7:d9:0c:6e:ef:b7:a7:be:49:86:b1:37:4a:
11:39:9f:a8:22:25:28:a3:0a:10:d6:34:c3:bd:98:
7d:26:db:9d:40:03:a5:f3:13:64:98:e2:e3:99:e1:
15:e9:19:8e:20:c9:84:4d:0d:59:9b:05:3a:af:8e:
33:fd:5f:11:fe:f7:18:83:c1:13:ac:af:5e:65:94:
d9:74:1c:ae:9e:81:4a:ef:4e:6e:24:7a:b2:46:a9:
48:b1:5d:35:7f:e0:df:6b:89:04:49:e3:81:72:81:
31:b3:d6:64:da:6b:e0:a4:c4:5d:7b:6d:ac:cf:89:
d9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D6:FE:13:E3:B1:AD:3C:50:53:B7:67:48:5E:98:8E:71:5D:42:31
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/O9b-E-OxrTxQU7dnSF6YjnFdQjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.191.0/24
185.221.237.0/24
185.231.59.0/24
193.163.201.0/24
Signature Algorithm: sha256WithRSAEncryption
34:5b:da:f1:8b:79:f8:e1:81:0d:03:61:af:6a:5f:1f:cf:6f:
fe:4f:7a:3d:85:ed:c9:9a:3d:26:76:b9:94:a0:62:2b:c7:4c:
6f:42:15:9b:95:5d:9a:98:92:8e:bd:28:00:fc:94:4f:38:3b:
e9:b0:c3:dc:67:9c:40:7c:76:3b:23:0e:ce:35:d0:ca:d3:c3:
88:fd:7a:8d:f3:d5:b8:29:df:65:40:fb:ac:e4:f3:b5:84:c1:
25:e3:69:9e:55:e9:e2:11:e8:17:05:f0:5d:7d:99:29:34:94:
a7:d7:c1:02:d5:c9:10:f7:20:bc:40:5c:01:fc:87:27:e6:0f:
07:96:5f:bd:89:5d:aa:20:9e:c6:c6:4e:d4:ed:98:6d:5d:31:
cc:49:29:f3:35:f6:e0:14:77:4a:92:fc:9d:4f:7e:9c:ef:5d:
95:77:ff:36:1f:b8:83:7c:3b:62:f7:c1:08:ff:0c:a4:5a:75:
7d:7b:05:8e:62:a8:10:b2:1c:55:e7:47:03:d4:2a:f3:99:f3:
8e:f7:f7:0b:e1:9f:85:8b:af:61:8c:2e:32:69:d3:d2:8f:01:
24:be:bf:82:0b:28:f9:27:60:55:5b:2c:ca:0f:12:65:95:7a:
29:9d:a7:ec:e6:8a:3f:b1:a1:3c:a8:3f:81:92:79:e1:d3:37:
c3:6b:ac:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:26 2025 by rpki-client