Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/8OmjXUMZKNFd0luRiOB1t7TxV6g.roa
File: 8OmjXUMZKNFd0luRiOB1t7TxV6g.roa (raw, json)
Hash identifier: WkJLfS2uSvPi0ywvsPq9qfBMigroVWeS70hcCgf7yIk=
Subject key identifier: F0:E9:A3:5D:43:19:28:D1:5D:D2:5B:91:88:E0:75:B7:B4:F1:57:A8
Certificate issuer: /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial: 0B514797
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/8OmjXUMZKNFd0luRiOB1t7TxV6g.roa
Signing time: Thu 31 Mar 2022 11:22:37 +0000
ROA not before: Thu 31 Mar 2022 11:22:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210834
IP address blocks: 188.93.173.0/24 maxlen: 24
188.93.174.0/24 maxlen: 24
188.93.175.0/24 maxlen: 24
185.215.68.0/22 maxlen: 24
188.93.172.0/24 maxlen: 24
188.93.168.0/21 maxlen: 21
188.93.168.0/24 maxlen: 24
2a0b:880:4::/48 maxlen: 48
2a0b:880:5::/48 maxlen: 48
2a0b:880::/32 maxlen: 32
2a0b:880::/36 maxlen: 36
2a0b:880:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189876119 (0xb514797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
Validity
Not Before: Mar 31 11:22:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0e9a35d431928d15dd25b9188e075b7b4f157a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:7e:ba:4d:d5:67:16:c0:2d:58:6b:02:b7:
d8:8d:65:b9:d5:16:8f:12:cc:c5:71:87:73:8d:d1:
ec:ef:14:e7:f9:42:fd:15:a0:c9:dc:39:81:d1:ef:
d9:06:91:62:6c:06:38:60:63:7f:9c:1b:1d:ee:6d:
2d:08:a2:6c:ef:b6:e7:c0:3c:27:9d:84:6e:db:0e:
14:be:fe:7a:65:44:0e:cc:c4:c7:bf:2c:bd:8f:f3:
de:37:46:7e:e7:48:46:c1:2d:0a:5c:a8:2a:a9:f7:
94:c9:72:5d:7e:a1:46:ed:b0:20:0a:f0:00:8e:c1:
3e:f9:93:45:fd:43:51:af:76:35:65:f7:2f:07:2c:
19:e3:4c:9b:dd:f4:b8:73:03:db:ba:ec:e4:c0:1d:
4e:c2:36:71:2f:51:e6:40:7a:64:d1:3d:2f:27:99:
f0:aa:7c:0b:fa:fe:36:22:f9:f8:20:08:f7:5e:2d:
ad:9c:87:f2:b2:a7:b5:53:2c:ab:c0:76:05:72:38:
66:ee:aa:b4:91:09:81:60:86:14:9e:62:1e:8c:63:
9d:ff:10:fe:5f:d8:87:87:a1:5c:0a:12:3b:33:58:
30:16:b2:cb:f2:f5:16:ac:27:72:3a:34:6e:1a:8c:
49:76:6e:0e:48:35:5e:23:cb:6a:57:d1:42:7c:3d:
b5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E9:A3:5D:43:19:28:D1:5D:D2:5B:91:88:E0:75:B7:B4:F1:57:A8
X509v3 Authority Key Identifier:
keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/8OmjXUMZKNFd0luRiOB1t7TxV6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.68.0/22
188.93.168.0/21
IPv6:
2a0b:880::/32
Signature Algorithm: sha256WithRSAEncryption
5c:79:53:2f:cb:41:d9:50:90:9a:36:29:8f:41:3a:4f:74:3f:
aa:ba:18:cc:34:3d:85:90:12:76:a2:26:d2:ca:98:3d:a3:4a:
79:bd:b2:fc:f6:d1:f7:70:d0:43:c0:51:1e:76:ed:2d:ab:5c:
8f:df:6f:86:ed:f2:a7:27:3c:82:e1:a4:7e:c7:81:bd:0a:09:
39:95:10:d4:f2:46:38:09:5b:c5:04:7d:ef:d1:22:89:22:a1:
aa:2e:cf:bb:95:5b:0f:ae:5b:04:04:9b:bd:a3:dd:9b:e2:4d:
df:cf:3e:22:70:21:40:26:20:9a:49:85:06:2b:dd:12:c7:a1:
62:7a:5d:00:70:6f:a8:21:87:e9:a6:07:84:4a:7d:7e:c3:8b:
93:48:80:8d:76:6d:c2:a4:9f:4b:fe:d3:fa:8c:7e:ca:da:d6:
96:d6:3b:84:e9:11:3f:a1:48:a2:f0:57:99:0c:7e:36:57:5f:
40:e7:55:c6:d5:00:2b:ab:3c:78:79:7a:51:68:d9:60:ad:49:
f9:0c:e7:a8:57:87:56:5c:fc:73:95:65:55:c0:f4:e5:5a:34:
15:5e:3b:6e:61:2d:95:f6:1c:99:3e:34:24:99:0e:e2:21:7e:
3b:4d:ad:ce:69:d8:82:9e:60:2b:92:f2:1c:c4:6a:ce:db:5a:
89:fe:8e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:10 2025 by rpki-client