Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/OqHJW768bLIYGtlGYP92WLCEqDg.roa
File: OqHJW768bLIYGtlGYP92WLCEqDg.roa (raw, json)
Hash identifier: 6QgR9mIWMqIkRZBZcZGmCZw2JP0omqphylTLKetEcUI=
Subject key identifier: 3A:A1:C9:5B:BE:BC:6C:B2:18:1A:D9:46:60:FF:76:58:B0:84:A8:38
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0C649D925306D2174C1F86A619345
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/OqHJW768bLIYGtlGYP92WLCEqDg.roa
Signing time: Mon 02 Jan 2023 05:25:05 +0000
ROA not before: Mon 02 Jan 2023 05:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206442
IP address blocks: 195.136.204.0/22 maxlen: 24
82.177.202.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:c6:49:d9:25:30:6d:21:74:c1:f8:6a:61:93:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3aa1c95bbebc6cb2181ad94660ff7658b084a838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a6:ef:66:ad:10:e0:c8:27:e0:f5:d6:6a:df:
90:ac:3e:0f:c6:fa:a6:94:ea:64:67:ab:a7:ea:2c:
4c:6c:fd:30:c6:1b:06:0c:6f:b8:ed:4c:9f:73:7e:
4d:bb:9f:75:e5:f0:2d:2f:02:87:44:5c:10:e5:31:
80:fa:19:d1:a6:69:2a:4b:62:25:77:0b:d7:b3:87:
fa:e9:9d:fe:93:83:c4:f9:13:b6:42:bd:e8:58:4b:
10:f9:56:89:1d:a8:72:60:05:a2:a2:27:23:ca:f4:
a5:97:38:a7:50:20:ee:81:65:86:b1:dd:ed:ec:ae:
ef:7c:67:fc:74:57:20:27:fa:ea:a8:d1:ac:35:8a:
e2:29:67:85:7d:e6:58:0c:cf:19:ce:6d:46:f4:db:
f3:11:87:7e:0c:53:01:aa:f7:10:59:55:1a:cc:9b:
9b:b7:92:b4:b9:8d:2f:ef:4c:97:e6:44:e9:38:4d:
81:47:c2:7f:b6:bd:ed:12:a1:ed:e7:9b:c0:28:ef:
b1:8a:75:30:59:7c:f7:38:1f:42:13:ee:34:95:f6:
7e:c4:32:fb:72:04:0a:48:85:cd:c3:c3:a6:e1:b7:
38:2b:c3:d8:94:74:27:6d:c6:bb:eb:15:22:fa:23:
87:61:b8:b4:38:74:a7:99:0d:a6:ed:d3:d5:6b:8e:
22:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A1:C9:5B:BE:BC:6C:B2:18:1A:D9:46:60:FF:76:58:B0:84:A8:38
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/OqHJW768bLIYGtlGYP92WLCEqDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.202.0/23
195.136.204.0/22
Signature Algorithm: sha256WithRSAEncryption
01:3f:4c:c6:e9:03:61:52:3c:35:fd:ff:d0:3d:e8:7c:9f:66:
89:d6:b8:3c:a3:4d:2e:e8:92:ba:67:a2:14:21:50:20:17:62:
f8:71:7a:72:47:03:c3:a3:ee:c1:ba:db:28:3c:63:75:d0:69:
fa:01:d7:84:04:20:00:2b:73:4e:a2:e6:42:8a:00:d9:eb:1a:
23:3c:29:71:3c:03:45:b4:f9:93:0f:ed:86:f7:10:ef:f7:c6:
f8:ff:43:6e:f4:3c:c0:84:b7:e6:8f:db:ef:10:9f:78:3d:e1:
f1:52:45:ae:bb:82:e0:c7:c0:50:99:30:d6:41:5b:41:9d:39:
d6:d5:e8:c9:8d:76:c6:c6:ba:3c:b2:1e:32:b0:d8:b4:d4:a8:
e8:24:ac:68:82:b0:c8:25:d4:ba:a9:d4:5b:c5:73:df:02:1f:
e8:b7:40:70:dd:3e:02:88:36:2e:14:dd:05:2d:8d:21:86:07:
73:de:96:9d:07:54:c2:c5:04:d7:3d:b9:b1:c3:91:51:31:18:
3a:df:bb:39:f0:94:9d:c2:5c:95:a9:37:ae:71:7d:8f:a2:9b:
50:d6:af:be:6f:c5:83:1a:70:36:54:2d:2a:5a:2a:37:1a:a8:
d0:96:3b:51:89:36:11:f5:39:60:e6:92:41:b9:4d:ae:b4:e8:
f5:26:f6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:42 2025 by rpki-client