Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/oWM93_yorLnMmlI-k_FlyNAozTE.roa
File: oWM93_yorLnMmlI-k_FlyNAozTE.roa (raw, json)
Hash identifier: B7UVIK/JDZ9+1uTwr6Y1pPS2WXixF4ftnjgZ0TjH5Qw=
Subject key identifier: A1:63:3D:DF:FC:A8:AC:B9:CC:9A:52:3E:93:F1:65:C8:D0:28:CD:31
Certificate issuer: /CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Certificate serial: 036874EA
Authority key identifier: B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/oWM93_yorLnMmlI-k_FlyNAozTE.roa
Signing time: Sat 01 Jan 2022 01:56:33 +0000
ROA not before: Sat 01 Jan 2022 01:56:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.215.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57177322 (0x36874ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78cddbfc76bda26a029ea80c8987798745f1f02
Validity
Not Before: Jan 1 01:56:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1633ddffca8acb9cc9a523e93f165c8d028cd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:31:e4:26:33:0b:81:be:11:0e:bd:aa:e1:a9:
06:a4:66:6f:66:00:6f:09:3d:7e:8d:ed:c7:66:36:
c2:ac:18:48:42:79:3c:4f:57:a7:fc:c8:b8:76:9e:
db:91:24:f0:3b:5c:1b:8a:a3:fb:14:1d:00:1b:8b:
34:40:47:3e:ab:38:f0:86:01:75:de:03:74:3c:46:
0d:c3:b2:08:db:f3:e8:b4:fb:88:69:d4:c7:83:4f:
0d:f1:2d:93:c0:7d:a5:02:6b:06:04:28:8b:98:eb:
2a:d1:41:47:55:c6:36:3e:d5:3a:3b:0a:eb:b7:2b:
b9:f1:b8:3b:10:55:17:37:34:b4:e9:a6:61:c2:e3:
17:cb:6d:86:98:6b:75:a4:ad:ae:f2:9a:b3:32:bc:
6a:cd:18:bc:41:55:40:9b:c5:b4:02:f5:88:34:af:
53:ab:8d:d8:09:04:17:51:d8:37:aa:5d:4b:65:05:
15:9d:ce:48:ff:38:62:29:25:69:e2:df:a8:39:95:
42:db:af:63:24:7b:f7:94:40:1a:3d:33:30:7e:37:
86:c5:e8:fe:a0:b9:68:4d:ac:3f:ea:85:eb:a8:f6:
91:f5:72:94:9f:e2:d9:0e:01:13:e2:af:2e:31:67:
23:9d:07:97:9e:fe:84:7a:e2:d3:27:46:e7:c2:7f:
66:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:63:3D:DF:FC:A8:AC:B9:CC:9A:52:3E:93:F1:65:C8:D0:28:CD:31
X509v3 Authority Key Identifier:
keyid:B7:8C:DD:BF:C7:6B:DA:26:A0:29:EA:80:C8:98:77:98:74:5F:1F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4zdv8dr2iagKeqAyJh3mHRfHwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/oWM93_yorLnMmlI-k_FlyNAozTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/30b8e9-e7d4-40cc-ad5f-3c741220ea00/1/t4zdv8dr2iagKeqAyJh3mHRfHwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.115.0/24
Signature Algorithm: sha256WithRSAEncryption
51:eb:7d:9c:b3:4d:c6:2f:c5:6f:9c:60:2b:88:f1:00:9f:14:
e0:d6:b0:d1:e1:8e:22:c5:38:1f:25:2a:c2:64:cd:58:76:01:
4c:d3:aa:cc:89:42:29:9a:f8:11:1f:4c:4e:73:da:64:2d:e8:
4f:d8:54:fc:df:f5:e2:fa:15:1d:16:91:27:13:49:1a:85:13:
0e:de:4a:d1:31:c9:b0:27:82:cf:f7:69:ed:36:ee:92:1c:bc:
bd:d7:85:ad:c1:ca:a4:74:21:01:71:a5:be:f5:0e:17:65:75:
54:ef:93:10:8d:7d:16:29:d1:d1:df:84:6f:26:f3:77:f8:6c:
f5:42:4e:4e:3f:fb:1e:f6:ee:20:e9:2d:bf:4b:99:be:33:9a:
d1:92:09:9d:06:7b:76:44:f6:31:3f:85:a9:94:38:14:d4:4d:
4b:d6:c6:af:0a:04:66:fa:0b:d6:a1:d9:9e:29:1c:c3:c5:90:
98:7b:b0:0f:ee:3f:c4:21:be:a3:cd:6b:26:43:25:cd:ba:48:
fa:df:86:08:6c:be:41:96:ff:a5:e1:8b:6d:fe:26:8a:4f:78:
b6:e0:e5:b7:bc:fb:b5:60:54:b8:dc:bb:28:b2:cd:cf:13:33:
17:5d:5f:8e:2e:14:e2:01:c0:42:31:24:18:4c:b1:3b:86:5b:
36:e4:6f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 12:45:58 2025 by rpki-client