Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/1OB1MZrhsN82bHCK6LAaHr6vef4.roa
File: 1OB1MZrhsN82bHCK6LAaHr6vef4.roa (raw, json)
Hash identifier: 1toV70FFnVvFCnhKbkarDfzrBdP1ifHIcX9CKdFHA7U=
Subject key identifier: D4:E0:75:31:9A:E1:B0:DF:36:6C:70:8A:E8:B0:1A:1E:BE:AF:79:FE
Certificate issuer: /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial: 018215A5978CE7D114BC3BCE695A5727701D
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/1OB1MZrhsN82bHCK6LAaHr6vef4.roa
Signing time: Tue 19 Jul 2022 08:49:09 +0000
ROA not before: Tue 19 Jul 2022 08:49:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 185.63.33.0/24 maxlen: 24
185.63.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:15:a5:97:8c:e7:d1:14:bc:3b:ce:69:5a:57:27:70:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Validity
Not Before: Jul 19 08:49:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4e075319ae1b0df366c708ae8b01a1ebeaf79fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:45:c7:0e:fc:24:1d:98:6c:72:c8:35:bb:85:
53:e1:ec:7a:94:59:85:4b:7b:3c:ca:fb:0f:56:ea:
dc:7c:1c:7e:53:b7:48:0d:41:67:d4:a5:0f:32:a0:
f0:bf:c8:34:f9:04:ce:bf:59:e0:81:c1:2d:4c:68:
25:a8:68:7c:9c:9f:f9:9a:f0:aa:3c:00:04:43:5b:
ec:a7:c7:f2:7c:1f:35:b7:d6:ec:12:28:22:c3:0e:
83:e5:bb:e2:86:93:58:4e:7d:64:a1:26:e6:6f:d9:
24:33:a5:3b:8a:3b:01:68:69:aa:99:3d:45:c2:1a:
ca:df:1f:ec:2e:6b:11:ac:15:7c:b0:41:6d:51:91:
4d:16:42:b1:0b:32:ab:e6:ae:53:2b:22:a5:c7:f0:
e2:a7:76:ff:de:6d:5f:16:25:46:fa:96:91:c7:36:
55:85:a0:76:73:4a:90:e5:fb:6a:88:6b:2b:15:6d:
30:af:e0:c2:53:c6:bb:cf:02:eb:f9:72:f8:91:cf:
09:35:24:29:7d:e5:d7:6c:91:bf:76:1e:aa:08:5a:
78:b6:c0:64:a4:08:b6:a3:76:0f:94:0a:48:a2:e4:
12:36:48:8c:a6:79:db:27:ab:c2:ec:7a:e6:24:3b:
9c:a1:a8:39:4f:03:fa:33:29:2d:bf:90:c7:83:11:
89:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E0:75:31:9A:E1:B0:DF:36:6C:70:8A:E8:B0:1A:1E:BE:AF:79:FE
X509v3 Authority Key Identifier:
keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/1OB1MZrhsN82bHCK6LAaHr6vef4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.33.0/24
185.63.35.0/24
Signature Algorithm: sha256WithRSAEncryption
33:fd:ad:84:db:28:bb:26:e4:59:17:27:57:77:3f:17:a1:99:
12:d7:c0:a4:e2:f4:59:fc:ed:45:c7:70:f9:93:46:49:84:84:
df:fe:f1:16:ee:c1:8a:c8:d5:7c:61:2d:2b:91:04:05:c9:f7:
2f:d2:a7:a3:bb:bc:f5:15:c9:52:61:d1:f9:e6:6a:81:bf:4c:
13:20:99:e7:61:3f:61:26:58:fe:10:96:db:55:12:7a:d9:a9:
01:c4:86:9f:3c:e4:95:01:9f:c0:91:c4:5f:72:42:4f:a7:fb:
e5:61:62:fa:c8:27:18:c5:26:66:ff:b2:64:d4:f8:99:6a:b6:
ae:cb:33:03:2a:c7:da:a7:0a:c2:7f:4d:35:e8:40:56:eb:af:
fc:9a:a8:07:f0:11:9f:79:26:76:c6:0e:29:17:43:6e:f2:18:
e0:8d:f2:86:17:e2:4b:e4:80:72:d9:d8:68:7f:6e:a3:16:70:
8e:4c:f5:94:37:0a:0a:4a:1a:0e:f4:51:fb:6e:47:11:2e:66:
a8:e0:ea:5e:7d:73:98:a1:f6:c8:e6:c3:80:1d:74:fe:92:b6:
b2:c8:b6:21:01:aa:53:39:79:71:31:9b:9d:6e:22:72:4b:b8:
90:d9:ca:42:4e:cf:1b:22:68:b0:83:30:12:b0:3a:1d:48:a6:
e1:57:00:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:57 2025 by rpki-client