Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/OKCoC-1x8wY51_FLexYNAvmCSVM.roa
File: OKCoC-1x8wY51_FLexYNAvmCSVM.roa (raw, json)
Hash identifier: 9/E9gbvJeVP3sILjpK4IonlnilIlGeSSyCt4JpVI6zA=
Subject key identifier: 38:A0:A8:0B:ED:71:F3:06:39:D7:F1:4B:7B:16:0D:02:F9:82:49:53
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 01856F6FFEA7B87ECBB17183ECF22CE62E02
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/OKCoC-1x8wY51_FLexYNAvmCSVM.roa
Signing time: Sun 01 Jan 2023 22:24:48 +0000
ROA not before: Sun 01 Jan 2023 22:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3399
IP address blocks: 193.178.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:fe:a7:b8:7e:cb:b1:71:83:ec:f2:2c:e6:2e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: Jan 1 22:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38a0a80bed71f30639d7f14b7b160d02f9824953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:1b:ae:08:42:de:76:01:01:99:6d:02:c6:
9d:e0:64:3c:7f:7f:a1:9e:c9:8a:ff:d2:83:9a:bf:
fa:5d:c9:13:73:dc:d1:36:8b:ae:73:3b:7a:c5:52:
46:7b:70:bf:f9:1f:d4:14:e8:b6:e3:99:8e:9a:fd:
4b:39:45:42:80:33:3c:30:76:a1:64:fc:98:77:a0:
49:bb:77:cb:5c:70:37:27:66:4c:e7:1d:1f:c9:9b:
7f:94:8a:cf:b5:ed:54:33:ee:23:10:b2:0e:d0:da:
97:40:26:43:af:27:bc:ca:94:58:8d:88:9b:74:43:
eb:cb:49:11:79:1f:cb:96:32:d0:6c:cc:a4:2b:89:
4b:07:d1:c7:31:87:c2:33:8a:2a:11:8b:90:53:43:
e2:c7:1f:0f:70:cc:90:bc:bd:fc:48:77:fc:ab:2a:
c9:5b:69:12:ec:cb:b8:71:08:0b:48:3e:a8:35:41:
26:ba:d9:f1:02:03:d7:5f:03:70:69:eb:a0:e3:6d:
73:5f:45:8b:f7:22:8a:4d:42:f9:59:5a:59:4b:d0:
cb:2e:81:2b:30:81:9c:cd:f5:c2:1a:b4:ee:b7:02:
53:95:08:25:2c:37:c4:a4:17:26:9e:02:0c:4b:a3:
d9:83:ed:bd:9d:1b:01:84:2a:92:41:01:2a:3e:f4:
f8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A0:A8:0B:ED:71:F3:06:39:D7:F1:4B:7B:16:0D:02:F9:82:49:53
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/OKCoC-1x8wY51_FLexYNAvmCSVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.129.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:52:a4:32:6c:35:13:57:9a:a2:7c:74:94:b4:25:15:52:84:
b3:a6:41:6d:e2:ea:02:a1:94:da:2a:04:91:8b:4b:7f:c1:64:
5a:16:84:a3:d1:96:8e:c4:41:2d:29:ff:21:c4:ee:90:1b:a1:
81:63:93:f0:d1:bf:a7:fb:2c:cd:85:23:a9:d4:24:8e:01:18:
2e:99:c9:b9:22:85:2e:9e:7a:b9:e8:8a:ea:f0:28:fd:88:19:
33:64:4d:16:be:7c:27:88:ce:10:57:e6:a6:f3:e1:83:c0:69:
9c:ea:f3:44:20:87:66:16:a9:e3:b2:8d:e6:cb:68:8b:fe:72:
77:55:72:f4:01:a4:83:d9:e8:8e:91:cb:fa:2b:02:2c:d9:bb:
87:82:4a:d0:4c:1c:2a:7d:fe:5a:f3:89:32:e2:51:21:15:4e:
5a:0a:7a:c4:02:8f:01:eb:a1:c9:63:b7:22:25:07:00:df:08:
cd:50:f2:7c:92:e2:cf:0b:27:ef:d1:b7:33:59:67:19:9a:a6:
26:a6:c4:60:94:1f:e0:c3:6a:f1:fc:bd:2f:80:41:d7:00:cf:
f3:9f:82:28:7f:98:aa:53:97:54:11:8e:6c:55:1d:01:57:ba:
2d:de:93:a8:09:71:13:d0:61:7d:a9:b2:1f:65:1f:6c:5a:d0:
59:e4:7e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:46 2025 by rpki-client