Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/oExsJnE4-a2GBNDM-5zG_WZckE0.roa
File: oExsJnE4-a2GBNDM-5zG_WZckE0.roa (raw, json)
Hash identifier: tZcNSlrdkcZnayhznCKTOhMsnz8sK+Mml/mudS+zVac=
Subject key identifier: A0:4C:6C:26:71:38:F9:AD:86:04:D0:CC:FB:9C:C6:FD:66:5C:90:4D
Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Certificate serial: 0189A757F5B96A8E9118628BC4EC7F1DD629
Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/oExsJnE4-a2GBNDM-5zG_WZckE0.roa
Signing time: Sun 30 Jul 2023 15:08:26 +0000
ROA not before: Sun 30 Jul 2023 15:08:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200343
IP address blocks: 217.175.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a7:57:f5:b9:6a:8e:91:18:62:8b:c4:ec:7f:1d:d6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf
Validity
Not Before: Jul 30 15:08:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a04c6c267138f9ad8604d0ccfb9cc6fd665c904d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:01:f3:35:9f:9b:b6:ce:5d:e4:a1:8e:d3:14:
31:18:9f:00:e9:45:60:83:9f:e7:53:a6:42:42:cd:
ce:87:0d:4f:5d:54:a3:6d:b8:81:18:39:6c:14:8a:
c2:06:3a:73:48:2b:e4:a7:36:85:67:da:46:61:17:
80:34:61:f1:6e:60:47:89:57:ff:64:6a:75:a5:48:
83:af:24:c4:2d:2c:c9:27:3c:d0:3e:17:4b:94:68:
71:90:b9:74:5a:86:a7:8a:40:01:c3:f3:bc:c0:bf:
89:ba:af:74:fc:d1:18:ec:09:c8:ab:d3:51:74:cd:
65:1b:7a:e5:37:5f:9d:68:b6:c5:c3:33:45:ad:51:
fe:ae:3d:6f:87:20:b4:0e:08:97:53:fc:13:1b:5a:
17:9f:a4:94:b3:aa:a5:34:ad:c8:8a:a0:16:97:4e:
56:9e:59:bf:fe:73:5e:34:df:81:0f:4b:b1:08:1f:
8f:88:5f:d5:b8:46:57:67:19:b0:e0:bb:2b:58:0f:
67:fd:89:52:68:86:02:6d:c6:e9:17:45:36:6e:2a:
a9:dd:c8:3f:ac:52:37:78:5f:07:5c:07:d2:11:2e:
24:98:b8:05:62:2c:d2:84:c9:ed:6e:f0:6e:c7:3b:
31:02:65:e9:d3:1d:66:7c:ce:b1:ad:97:5d:3f:bc:
52:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4C:6C:26:71:38:F9:AD:86:04:D0:CC:FB:9C:C6:FD:66:5C:90:4D
X509v3 Authority Key Identifier:
keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/oExsJnE4-a2GBNDM-5zG_WZckE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.175.95.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:e8:45:24:a2:47:57:42:b2:f0:e3:8b:f9:5c:60:b9:bc:fc:
3e:e9:01:35:69:19:98:b0:e0:3d:f2:06:18:44:81:c2:66:26:
be:0a:8b:9c:14:2d:8d:e4:a2:ba:49:8a:51:62:a8:3b:be:a6:
d9:04:ef:7b:68:44:af:00:02:f8:c7:bd:86:3b:42:fb:2d:1f:
ef:3e:68:c3:8d:e3:90:2a:86:81:ee:bf:6d:71:c6:db:95:03:
11:a2:14:8d:fa:31:09:ea:4e:2d:54:e6:21:a4:b7:60:18:62:
f1:99:33:51:78:f2:d4:4c:af:dd:a5:b8:d5:54:b5:4d:38:ec:
1e:41:92:c9:a6:1f:2d:a1:53:66:12:7b:99:24:0e:3d:eb:22:
8b:9d:34:fd:57:96:76:99:62:fd:bc:af:89:cf:59:72:d6:97:
8b:38:c2:eb:07:46:b9:47:46:d9:ec:9d:57:08:66:8b:50:bf:
e0:ee:39:34:cd:59:91:8e:6a:3d:07:c1:d2:e3:92:c8:25:b2:
96:09:b7:02:88:40:cb:e2:64:79:28:eb:96:71:9e:22:0d:5b:
99:1b:8b:46:39:a6:76:b0:45:41:ec:c0:13:8d:3b:bd:69:b0:
86:6b:27:4c:15:13:b3:81:d3:30:81:ba:e6:fa:8c:f9:63:be:
5c:3c:b0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:29:58 2025 by rpki-client