Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Oa7hNkdDkTOKh-0aerMjcU5tOHg.roa
File: Oa7hNkdDkTOKh-0aerMjcU5tOHg.roa (raw, json)
Hash identifier: KOBCOYsiZehz/dNGcW9Y2pgSI8+dKTbT5JIE77EAgAA=
Subject key identifier: 39:AE:E1:36:47:43:91:33:8A:87:ED:1A:7A:B3:23:71:4E:6D:38:78
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 275BE07F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Oa7hNkdDkTOKh-0aerMjcU5tOHg.roa
Signing time: Sat 01 Jan 2022 16:07:51 +0000
ROA not before: Sat 01 Jan 2022 16:07:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12722
IP address blocks: 146.120.110.0/24 maxlen: 24
95.47.161.0/24 maxlen: 24
93.170.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660332671 (0x275be07f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:07:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39aee136474391338a87ed1a7ab323714e6d3878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:e6:87:b2:8c:ee:ec:37:13:88:ad:44:df:
62:35:17:16:a5:2d:5a:10:1e:06:73:ba:9f:62:73:
a9:af:0a:cf:bc:aa:b3:a6:51:76:0f:27:55:37:ba:
5c:d6:6f:f4:30:ff:d2:84:ed:b5:6f:f7:64:50:99:
f0:40:c7:51:dc:af:a2:c5:75:07:5a:18:9d:01:6f:
d3:95:0f:75:8f:21:e1:f2:27:dc:f1:ca:04:8f:4e:
cc:8e:c2:3d:d4:fe:76:8e:6a:2c:2a:14:75:34:b1:
03:ff:00:63:24:64:15:47:76:0a:22:b9:b4:78:f0:
fc:33:59:91:74:3a:cd:83:02:b1:da:71:6a:2d:fe:
3e:20:38:54:c4:04:db:35:12:dc:5b:71:7b:31:e1:
eb:b8:2a:24:40:ab:4e:ac:9b:a6:d9:ee:dd:13:d1:
3e:3a:a0:3a:a8:e3:1b:1b:28:d9:69:11:f3:cf:2e:
58:ce:4d:d9:30:55:08:74:00:94:b5:9b:54:4f:4c:
32:22:5e:e3:82:f9:3f:93:d2:80:85:fd:f3:3b:c6:
b7:4a:c0:8a:16:1d:20:06:cc:e2:3d:44:2c:32:90:
ca:23:94:1c:25:6b:61:49:09:96:17:0d:69:36:b2:
e0:35:98:97:3b:6c:43:99:9b:2f:59:96:1e:e9:e9:
38:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AE:E1:36:47:43:91:33:8A:87:ED:1A:7A:B3:23:71:4E:6D:38:78
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Oa7hNkdDkTOKh-0aerMjcU5tOHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.76.0/24
95.47.161.0/24
146.120.110.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:4b:cf:95:64:51:56:90:8d:78:b7:04:df:ec:6b:15:8e:71:
c6:44:a4:76:c2:9f:03:1a:88:da:ef:82:2c:96:89:f5:e4:a1:
60:35:7a:78:4b:88:18:8e:9f:be:c0:2e:94:7f:97:73:a8:63:
7b:9d:8a:20:e9:d5:ae:10:07:0c:30:6a:d7:f8:88:c9:b0:d4:
c7:a8:b2:33:21:3e:33:fe:77:0c:02:16:ea:0c:16:27:35:98:
23:d1:d0:69:e7:7b:14:47:cc:97:7f:cb:72:e0:3a:2e:aa:01:
c6:00:02:86:29:7b:e0:ce:56:66:0f:08:d6:52:2e:d8:8b:25:
06:03:3f:00:75:63:84:14:dd:e4:4b:32:51:a6:f1:89:43:0f:
c8:c0:2c:84:94:c6:ad:ee:64:80:99:60:0e:a4:7d:e7:90:5d:
21:3f:58:81:af:af:4d:3d:d9:1d:19:b1:a8:ba:bf:52:8b:93:
80:d3:64:42:24:ed:8f:d0:21:8c:8f:0a:3f:8a:e8:4f:15:39:
f0:35:00:f5:a9:7c:7a:06:03:c0:ad:1c:00:e6:7d:45:f9:4a:
85:c3:9e:88:dc:09:b9:aa:d6:cc:ae:94:4a:b0:d9:84:12:9e:
6c:ec:ea:e7:b4:15:ba:2b:23:69:ac:af:54:14:be:84:e8:ad:
9a:ac:f7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:09 2025 by rpki-client