Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/OLkiB8bk26fjwyKd5ZMqUGAB9NU.roa
File: OLkiB8bk26fjwyKd5ZMqUGAB9NU.roa (raw, json)
Hash identifier: 5lLnxkLBDM2Eu+zJ2tPxqNZawKzb5vah/FP3AVsJvII=
Subject key identifier: 38:B9:22:07:C6:E4:DB:A7:E3:C3:22:9D:E5:93:2A:50:60:01:F4:D5
Certificate issuer: /CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Certificate serial: 111F167D
Authority key identifier: A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/OLkiB8bk26fjwyKd5ZMqUGAB9NU.roa
Signing time: Mon 20 Jun 2022 12:37:44 +0000
ROA not before: Mon 20 Jun 2022 12:37:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5394
IP address blocks: 81.29.184.0/21 maxlen: 21
81.29.180.0/22 maxlen: 22
194.183.0.0/19 maxlen: 19
77.39.224.0/20 maxlen: 20
77.39.224.0/19 maxlen: 19
194.183.16.0/24 maxlen: 24
77.39.240.0/20 maxlen: 20
77.39.160.0/19 maxlen: 19
77.39.160.0/20 maxlen: 20
77.39.176.0/20 maxlen: 20
195.250.224.0/19 maxlen: 19
195.250.224.0/24 maxlen: 24
195.250.232.0/24 maxlen: 24
217.72.96.0/20 maxlen: 20
195.94.152.0/24 maxlen: 24
195.94.160.0/24 maxlen: 24
195.94.128.0/18 maxlen: 18
194.79.208.0/20 maxlen: 20
194.79.207.0/24 maxlen: 24
213.233.27.0/24 maxlen: 24
213.233.32.0/19 maxlen: 19
213.233.36.0/24 maxlen: 24
194.79.192.0/20 maxlen: 20
194.79.192.0/19 maxlen: 19
213.233.0.0/19 maxlen: 19
213.233.0.0/18 maxlen: 18
2a02:688::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 287250045 (0x111f167d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4cb50e78a3a31e3375cf2aab865e845ff2e99c1
Validity
Not Before: Jun 20 12:37:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38b92207c6e4dba7e3c3229de5932a506001f4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:3d:b5:79:19:61:31:9f:75:36:4c:59:d7:
74:93:c1:ac:29:5a:af:ae:00:a5:60:89:6e:17:a5:
f2:8e:68:53:3a:8f:ff:da:da:d1:8f:11:ec:1b:5e:
8c:26:9e:49:91:a4:95:ea:c2:14:7b:2c:ae:38:72:
ff:df:51:da:85:19:c8:fd:8c:9e:9d:90:85:c5:5a:
f3:15:db:e1:39:4d:2d:c6:80:52:05:d6:c6:b5:62:
2e:14:3b:4b:6d:4f:8c:63:81:08:dc:6b:40:07:70:
f9:17:ab:d0:85:49:03:aa:5e:f5:69:3a:16:28:2c:
03:e2:58:ac:fd:11:9c:63:19:e3:78:01:bf:97:31:
45:f8:9c:54:68:9a:07:65:81:30:90:79:7c:6a:db:
40:83:4a:04:9c:6a:e3:e9:74:76:a5:20:f7:39:8d:
97:d8:74:ce:f5:46:eb:aa:cd:d3:ae:0e:29:40:8d:
e5:a1:6c:9c:ad:bf:fb:56:72:d4:de:92:9d:eb:2f:
f6:ae:69:5c:e2:6b:26:dc:4c:45:5b:c4:13:85:bd:
7d:12:01:3e:46:5a:fc:99:3b:e4:5e:89:88:72:61:
6b:9a:78:03:3b:87:22:a1:eb:34:17:9d:cc:c2:5a:
c3:6a:c5:67:d3:1c:fa:8e:12:43:15:73:12:47:3c:
db:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B9:22:07:C6:E4:DB:A7:E3:C3:22:9D:E5:93:2A:50:60:01:F4:D5
X509v3 Authority Key Identifier:
keyid:A4:CB:50:E7:8A:3A:31:E3:37:5C:F2:AA:B8:65:E8:45:FF:2E:99:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMtQ54o6MeM3XPKquGXoRf8umcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/OLkiB8bk26fjwyKd5ZMqUGAB9NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b1f2e0-8a60-4c8a-90dc-4be794d6406d/1/pMtQ54o6MeM3XPKquGXoRf8umcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.39.160.0/19
77.39.224.0/19
81.29.180.0-81.29.191.255
194.79.192.0/19
194.183.0.0/19
195.94.128.0/18
195.250.224.0/19
213.233.0.0/18
217.72.96.0/20
IPv6:
2a02:688::/32
Signature Algorithm: sha256WithRSAEncryption
7f:8b:b6:9c:1b:ca:0c:d8:ec:8b:71:af:07:85:84:cd:89:9b:
4a:ac:0c:65:cc:15:fb:f4:bc:ed:4b:52:81:6e:3d:74:65:ca:
6f:c1:79:cf:68:da:53:5f:0e:2b:93:90:18:42:76:24:80:2f:
9b:3b:04:e8:2b:48:ac:eb:a4:a6:54:17:4d:cc:c7:7e:7e:cc:
13:a8:54:91:d8:81:4b:22:05:c4:20:e2:e9:9b:e4:27:58:f4:
47:ab:e9:75:e4:3f:5d:1b:07:91:b3:e3:9a:5f:a2:ff:ae:38:
86:de:25:67:ba:cc:e6:b9:44:df:25:7d:03:b6:b6:f3:b2:96:
86:e4:0f:79:5e:ad:ae:c2:46:5c:c9:4c:de:0c:bd:89:56:b1:
7f:cc:a9:bc:34:61:b6:b5:9b:26:b7:f0:f7:b1:1e:e8:7b:64:
b9:df:25:89:45:25:f0:dd:70:eb:2b:e5:e9:ec:1c:ef:90:29:
9e:95:00:64:b8:07:73:60:2f:77:82:be:7d:1d:9c:91:e5:27:
3d:c9:18:43:91:61:8d:61:fd:2e:2d:bc:8f:f5:ef:83:9a:5b:
2b:0a:f0:2c:dd:f2:ea:ec:a1:44:f2:fa:fd:53:5f:de:4c:4e:
aa:90:69:b7:5e:98:4b:d4:44:35:ed:05:ab:e6:9b:4a:7e:4f:
36:c2:d9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:41 2025 by rpki-client