Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/OkwvmiJFw458MnaL_OPt64Fiqqo.roa
File: OkwvmiJFw458MnaL_OPt64Fiqqo.roa (raw, json)
Hash identifier: TiElukCON7vfhcArlmPShnehqEgQf/aFi4t5GKIGYMU=
Subject key identifier: 3A:4C:2F:9A:22:45:C3:8E:7C:32:76:8B:FC:E3:ED:EB:81:62:AA:AA
Certificate issuer: /CN=cb14d30f3b1e1137423c4b235957f3303064daff
Certificate serial: 34340530
Authority key identifier: CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/OkwvmiJFw458MnaL_OPt64Fiqqo.roa
Signing time: Sat 01 Jan 2022 09:55:50 +0000
ROA not before: Sat 01 Jan 2022 09:55:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57710
IP address blocks: 185.235.200.0/22 maxlen: 24
37.61.160.0/20 maxlen: 24
2a00:9640::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 875824432 (0x34340530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb14d30f3b1e1137423c4b235957f3303064daff
Validity
Not Before: Jan 1 09:55:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a4c2f9a2245c38e7c32768bfce3edeb8162aaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:c3:2a:2e:4a:9e:52:e6:c5:e3:ca:70:c5:
9b:54:d2:63:f6:46:8f:c4:88:63:cc:dc:1e:3c:5d:
c0:e2:a9:43:a5:1a:34:81:4d:85:19:73:88:46:93:
6c:00:7d:6c:2b:8e:c5:39:1a:d7:58:bb:28:1d:04:
a5:4b:a2:39:f0:2a:37:cf:6d:20:cd:d7:76:ff:51:
f5:3f:f5:7b:b5:da:0b:09:c4:02:16:32:92:5e:47:
82:40:b3:13:48:ec:7e:d1:f7:56:7d:c7:d7:0d:98:
72:aa:a9:3f:2c:26:02:44:e1:b3:af:4c:e5:d6:06:
c9:10:31:69:89:84:80:fd:74:1c:0e:8e:c1:bb:e1:
b8:3e:10:46:82:71:14:5d:bf:5e:87:a7:af:d9:63:
69:8b:e7:97:ef:cd:1b:2a:ff:ee:d9:e1:5a:50:24:
f5:16:0e:cc:ab:d0:e6:66:9e:73:bd:eb:30:9e:00:
ab:d0:77:a2:13:e0:eb:b0:ab:47:46:a2:a7:8a:44:
4c:87:28:c7:8b:f9:34:db:c9:28:e8:6e:53:c1:c5:
34:11:f2:01:0a:b2:90:0a:89:c6:c7:f6:b5:89:66:
73:b2:ba:86:a8:75:f1:95:92:86:c2:f8:86:ea:bd:
26:a3:e2:27:11:4f:03:67:f6:20:96:f9:d7:98:42:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4C:2F:9A:22:45:C3:8E:7C:32:76:8B:FC:E3:ED:EB:81:62:AA:AA
X509v3 Authority Key Identifier:
keyid:CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/OkwvmiJFw458MnaL_OPt64Fiqqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.61.160.0/20
185.235.200.0/22
IPv6:
2a00:9640::/32
Signature Algorithm: sha256WithRSAEncryption
2a:d8:44:ad:ff:f1:be:34:95:12:cb:08:66:32:55:6d:f5:b0:
54:e0:9e:1e:3b:55:54:17:f7:4e:77:46:59:e5:eb:b2:f7:0c:
3c:8d:ea:8b:21:05:f6:c9:a3:ab:d4:8e:70:3b:22:3a:b6:ba:
cf:ed:fd:60:ff:78:91:f5:09:c8:78:d1:31:b7:21:38:f7:98:
22:d1:7e:ed:6c:c9:1e:99:67:a8:8c:ea:91:38:0a:62:47:e6:
b2:4a:e8:bf:bc:39:2d:91:6a:08:03:e4:07:e9:63:dd:52:22:
04:c9:2f:62:73:10:25:72:95:93:c0:c8:b6:38:e6:06:f5:9e:
4e:16:8d:a6:65:ca:88:b5:7d:99:76:f4:e3:90:ac:88:82:6c:
4f:e5:60:bb:e0:0b:c2:78:29:3b:2c:26:56:f1:70:83:b2:95:
69:e3:e8:8d:f1:b6:37:ee:c0:96:1b:17:bc:8f:0a:47:7f:9c:
83:47:70:bd:e7:62:ec:b3:ff:b9:15:72:c0:ea:4a:6e:2f:a7:
2c:1c:68:94:4d:7b:71:d9:e3:0b:75:d3:85:f8:23:6e:bb:36:
ad:ed:e3:22:d4:eb:01:92:a8:8b:1a:df:b1:1f:b5:8d:b0:7e:
85:8e:3e:36:97:6b:bc:e6:4a:c4:62:45:7a:45:f7:14:1b:eb:
ed:ae:36:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:46 2025 by rpki-client