Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/Omu65Qx7JgLyyXA_Iq1TQD9hVNY.roa
File: Omu65Qx7JgLyyXA_Iq1TQD9hVNY.roa (raw, json)
Hash identifier: sKBIbkt22sjDx74sy955Cg1GVIcetY0NgKCGjzoJr84=
Subject key identifier: 3A:6B:BA:E5:0C:7B:26:02:F2:C9:70:3F:22:AD:53:40:3F:61:54:D6
Certificate issuer: /CN=dd189621d2fa872166e6a05ee47a7d756243e919
Certificate serial: 09D44BAE
Authority key identifier: DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/Omu65Qx7JgLyyXA_Iq1TQD9hVNY.roa
Signing time: Sat 01 Jan 2022 09:03:43 +0000
ROA not before: Sat 01 Jan 2022 09:03:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15751
IP address blocks: 185.51.72.0/22 maxlen: 23
109.125.0.0/18 maxlen: 18
212.129.64.0/24 maxlen: 24
212.129.68.0/22 maxlen: 22
212.129.66.0/23 maxlen: 23
212.129.72.0/21 maxlen: 21
212.129.80.0/20 maxlen: 20
2a01:b340::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164907950 (0x9d44bae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd189621d2fa872166e6a05ee47a7d756243e919
Validity
Not Before: Jan 1 09:03:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a6bbae50c7b2602f2c9703f22ad53403f6154d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:a9:d6:1c:2c:3d:5b:ab:c6:2e:46:39:f8:
1e:71:5d:62:15:a2:6d:3d:f8:35:55:47:5b:b5:2a:
e7:48:1d:59:cc:1b:f7:5e:cb:13:b2:e6:28:2f:4c:
35:14:c3:08:55:a2:10:f9:0b:7d:9c:09:80:14:a4:
89:27:b9:a9:dd:f1:98:c7:2f:c6:9e:06:f6:6e:04:
51:2b:b4:18:5f:75:a6:b4:b5:a7:33:0f:5d:fa:82:
09:91:b3:4d:b3:dc:2f:d3:9c:d1:6f:26:18:9e:56:
dd:35:91:60:c0:63:30:2e:97:86:62:7a:66:10:82:
c3:32:41:09:4f:2e:86:24:48:1f:b9:1f:91:c0:66:
7d:90:3a:61:34:81:f1:fe:d2:97:a1:b5:d3:e8:76:
03:c6:32:72:e6:d8:14:c7:c5:53:e2:ab:ee:8e:d0:
20:c8:09:fa:09:5e:86:ee:9a:e3:8a:f5:cc:d8:94:
ce:52:a8:00:f6:fd:c1:42:52:15:3b:96:83:10:27:
da:25:91:c5:bc:92:2c:8c:a7:c6:cd:dc:2c:68:a2:
c0:33:8a:b8:b6:a7:f6:0d:6f:14:b9:30:1f:90:3d:
bd:01:ff:fb:de:ec:64:93:57:a5:76:81:52:70:a3:
6c:d8:ac:06:3f:d3:72:46:04:f2:5a:57:7c:33:ba:
64:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6B:BA:E5:0C:7B:26:02:F2:C9:70:3F:22:AD:53:40:3F:61:54:D6
X509v3 Authority Key Identifier:
keyid:DD:18:96:21:D2:FA:87:21:66:E6:A0:5E:E4:7A:7D:75:62:43:E9:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/Omu65Qx7JgLyyXA_Iq1TQD9hVNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d6327f-803e-47fc-8e25-44311f9cb856/1/3RiWIdL6hyFm5qBe5Hp9dWJD6Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.125.0.0/18
185.51.72.0/22
212.129.64.0/24
212.129.66.0-212.129.95.255
IPv6:
2a01:b340::/32
Signature Algorithm: sha256WithRSAEncryption
5f:d2:66:3a:eb:c5:2a:78:54:8c:93:cc:4d:a2:a3:d2:da:70:
87:36:c3:a2:6c:36:76:ba:3a:9e:94:5d:89:ea:a1:c5:50:3e:
a0:ef:8b:0a:48:a6:36:ca:3e:a7:8a:73:4a:00:83:c6:74:8e:
3b:cc:76:46:8a:c9:f2:36:65:36:ab:b0:cd:21:d6:ac:4c:f8:
34:6e:18:2c:f0:2f:cf:bd:70:8c:0f:b5:b8:35:6e:e4:e0:49:
92:34:37:86:c9:c2:88:f1:c9:cd:eb:ef:e1:ad:68:b3:32:81:
9d:36:8c:9b:58:8b:81:d2:71:4a:40:44:5e:a8:c0:6c:cb:4e:
8f:2c:09:48:56:94:47:ec:08:d2:87:23:87:2b:90:0e:3b:75:
f4:bb:ed:fb:1d:14:05:3f:85:14:8e:7c:17:32:b9:f0:ce:aa:
47:53:b4:85:7b:9b:06:01:f9:a2:f0:74:8a:48:60:a7:2d:15:
c4:4c:d1:91:5f:45:04:d5:bf:c4:5d:f7:27:df:9e:aa:ad:31:
08:9e:98:05:07:aa:24:38:ed:9b:7d:cb:dd:78:78:5d:03:2b:
d9:e5:23:1b:fa:10:72:a4:f9:4a:77:30:ec:bb:ba:2c:cb:32:
c2:02:37:95:fd:f1:02:cf:3c:40:8b:8c:ed:e2:53:bb:4c:42:
17:af:07:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:19:01 2025 by rpki-client