Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/Oo1JLwVn7FM5XLTaJw6aKXUpeGA.roa
File: Oo1JLwVn7FM5XLTaJw6aKXUpeGA.roa (raw, json)
Hash identifier: +rHQmV07jKuIdCZFvSFeqWV3Vv4GoRzWTafJm9Ds5AY=
Subject key identifier: 3A:8D:49:2F:05:67:EC:53:39:5C:B4:DA:27:0E:9A:29:75:29:78:60
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 0A9CB048
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/Oo1JLwVn7FM5XLTaJw6aKXUpeGA.roa
Signing time: Wed 27 Apr 2022 06:02:24 +0000
ROA not before: Wed 27 Apr 2022 06:02:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16097
IP address blocks: 153.96.84.0/23 maxlen: 23
153.96.86.0/24 maxlen: 24
153.96.132.0/24 maxlen: 24
129.233.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178040904 (0xa9cb048)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Apr 27 06:02:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a8d492f0567ec53395cb4da270e9a2975297860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fd:49:7d:d5:a9:75:15:0a:68:c7:3a:d7:46:
32:6c:97:3b:ae:63:af:d3:ba:20:fa:ba:9f:cf:0b:
1d:60:60:ae:65:ca:15:4e:ad:5a:18:2b:3d:d8:88:
ae:f9:15:4d:9e:8b:33:01:76:77:d1:fe:a4:b3:4d:
95:ea:e4:d0:6b:ab:4a:ca:47:fb:84:c1:3d:08:b3:
bf:84:f6:eb:6e:7b:4b:04:79:45:5a:54:08:d6:4c:
65:41:ee:eb:b6:55:4b:c9:cf:c2:57:6b:75:5c:57:
2f:4d:b1:1f:9b:f2:03:56:57:0b:97:02:b1:c5:86:
30:24:8b:2f:3f:1e:f7:10:ac:ef:98:eb:93:22:92:
d1:38:47:4e:59:a9:80:0a:97:f8:4d:d3:5b:98:8c:
81:da:e2:53:d9:34:de:b4:7d:3d:2f:f2:81:9b:e3:
ba:d3:05:8b:dc:67:80:59:2f:db:d1:fd:4b:fa:68:
52:a2:f0:72:15:af:85:d3:36:d7:b9:14:cd:6f:f6:
d9:13:38:b6:c2:5d:86:a0:76:ed:f7:91:f2:20:7e:
1b:5c:19:bb:c7:7f:6e:04:62:03:3b:a3:f7:50:e0:
29:4a:64:9f:f1:7a:17:9e:11:6f:de:0a:6c:47:88:
cd:fb:bf:a2:c4:9b:a1:c3:f6:1a:dd:ad:3f:89:91:
b4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8D:49:2F:05:67:EC:53:39:5C:B4:DA:27:0E:9A:29:75:29:78:60
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/Oo1JLwVn7FM5XLTaJw6aKXUpeGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.233.216.0/24
153.96.84.0-153.96.86.255
153.96.132.0/24
Signature Algorithm: sha256WithRSAEncryption
34:aa:bb:4f:3c:ca:b7:c9:7c:1e:0c:e5:af:aa:86:53:ed:a1:
6d:5b:07:29:77:05:e4:15:af:0f:14:b7:ca:8e:5b:69:fc:52:
71:fb:4f:52:d5:d7:4e:01:63:87:af:0b:a1:08:5f:b5:aa:9d:
3f:a8:b4:70:1c:27:e4:a1:a5:9f:96:f0:15:2e:60:26:bd:6a:
8c:0b:f3:de:4a:df:2f:f3:b8:54:e4:3d:a7:08:79:9d:1a:3d:
f6:94:5d:97:cb:a1:c1:fd:16:41:54:5d:75:2c:75:42:69:ef:
3d:48:8b:94:c3:ec:b2:c0:89:b1:75:8d:20:31:56:8a:9c:b8:
0f:a7:99:44:20:4e:82:4b:f2:c5:ce:ed:d8:81:a8:a0:eb:95:
0f:dc:ea:6f:69:2d:61:7d:a1:de:b8:0c:2f:36:1a:35:a9:1d:
b3:01:30:fc:3a:06:f1:49:24:36:23:df:10:2d:cc:5c:5b:fb:
89:27:2c:87:b3:30:f4:ad:aa:eb:38:66:99:c6:d3:c5:72:05:
89:8d:02:62:a7:07:e1:4d:d5:d8:b2:25:41:61:d0:d5:f3:fd:
94:ae:04:94:c9:27:7a:40:67:d2:7e:31:6a:aa:bf:5b:b4:e4:
6a:e1:72:80:9d:74:8e:1e:72:0f:9b:23:44:53:3f:49:5d:bb:
d8:9f:0d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:55 2025 by rpki-client