Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/OoHfbEZ53zqPecQJijGJ_ECQ0b0.roa
File: OoHfbEZ53zqPecQJijGJ_ECQ0b0.roa (raw, json)
Hash identifier: i72HZiA6WKyWmDxpbm+H3T2PSvMZNiPj1nPGDtex0U0=
Subject key identifier: 3A:81:DF:6C:46:79:DF:3A:8F:79:C4:09:8A:31:89:FC:40:90:D1:BD
Certificate issuer: /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Certificate serial: 294475FC
Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/OoHfbEZ53zqPecQJijGJ_ECQ0b0.roa
Signing time: Sat 01 Jan 2022 06:54:41 +0000
ROA not before: Sat 01 Jan 2022 06:54:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56635
IP address blocks: 31.7.192.0/19 maxlen: 19
45.147.136.0/22 maxlen: 22
2a03:a100::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 692352508 (0x294475fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Validity
Not Before: Jan 1 06:54:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a81df6c4679df3a8f79c4098a3189fc4090d1bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ad:48:8a:f6:34:de:67:5a:64:4a:0c:e0:cd:
ab:e1:b5:dc:dc:a1:50:26:0f:27:f0:be:88:b9:b4:
f0:07:b5:fe:4f:c6:d3:5c:01:80:0f:4d:04:5c:2e:
02:cd:81:3b:2f:19:eb:cd:46:06:70:71:45:67:48:
a5:43:c9:8f:66:a0:7d:49:85:b0:0c:9b:5c:12:ff:
0f:9f:a5:e9:fb:0a:46:d9:41:e0:6c:42:79:d1:70:
82:09:31:e7:89:4f:7a:62:ea:86:e7:cc:42:e6:3c:
37:74:e3:57:24:9b:84:8b:c4:83:70:a1:66:3b:ae:
fc:90:1d:de:17:0a:c5:89:8d:57:d4:7e:80:8b:7c:
cf:3b:8b:c9:e5:f2:ce:d4:c6:a5:a4:23:88:0e:64:
19:9e:b3:d1:fb:05:5c:d9:9d:88:02:37:e5:17:62:
0c:3b:13:2d:04:63:5e:5f:5b:9e:eb:e3:06:e3:ac:
34:80:8f:14:55:ac:86:5f:e9:96:cc:54:9e:3d:ab:
a8:04:79:1b:a6:ae:6b:02:6a:02:73:76:31:c1:21:
fd:f2:b6:29:f6:db:81:5b:d0:c4:30:83:fa:44:e9:
33:d0:71:75:64:69:33:67:bb:1e:45:a0:88:02:8c:
63:30:48:9d:35:78:93:d0:61:54:6d:be:ed:a3:08:
fc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:81:DF:6C:46:79:DF:3A:8F:79:C4:09:8A:31:89:FC:40:90:D1:BD
X509v3 Authority Key Identifier:
keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/OoHfbEZ53zqPecQJijGJ_ECQ0b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.192.0/19
45.147.136.0/22
IPv6:
2a03:a100::/32
Signature Algorithm: sha256WithRSAEncryption
74:58:3a:cf:d4:41:3f:dd:0f:f4:92:5c:7f:0d:9a:0b:69:a0:
b4:4b:22:cc:df:84:57:e6:1d:98:72:09:bc:45:5e:9c:43:68:
91:de:e3:22:32:a6:0e:b1:1a:7e:08:23:c6:32:9e:7d:8e:ab:
b8:25:43:6a:c7:a1:24:97:02:fb:3a:19:53:35:04:fc:cc:7d:
5f:37:60:bc:7b:51:72:0a:81:21:fb:40:e0:3d:7d:c6:d2:9d:
3a:39:c6:29:2a:7b:07:0f:82:45:2a:85:d5:52:a3:d5:f9:a8:
8b:35:20:c3:60:d0:33:2a:af:cf:1f:4f:9c:23:52:21:35:66:
73:16:ea:00:df:30:ef:df:bf:8b:43:17:d2:bd:ac:7e:67:7c:
27:ce:4e:43:a4:8e:3e:49:df:b7:34:3c:c0:90:47:71:29:3e:
7e:e7:9c:49:42:45:37:37:3a:9a:73:a8:0c:cd:ef:91:27:40:
38:19:b1:65:fc:42:c7:b4:0a:74:77:73:2e:de:5d:e6:25:dc:
30:73:46:1f:62:13:86:c2:6c:02:18:80:c8:a3:17:13:ef:94:
19:ed:fb:15:e1:e7:1e:3f:97:82:c2:00:ce:ce:e1:6b:cc:3f:
c0:3d:e8:61:c0:41:40:c0:1b:8c:d0:f8:d9:59:6b:cf:dc:5b:
11:73:2d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:54 2025 by rpki-client