Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/hoO3_mTthZZmaloxXKs3lQk-bok.roa
File: hoO3_mTthZZmaloxXKs3lQk-bok.roa (raw, json)
Hash identifier: o/1c95TOgPeTl516740MJf/s95jdBXRfIu86YqTJ7OQ=
Subject key identifier: 86:83:B7:FE:64:ED:85:96:66:6A:5A:31:5C:AB:37:95:09:3E:6E:89
Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial: 2D986254
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/hoO3_mTthZZmaloxXKs3lQk-bok.roa
Signing time: Sat 01 Jan 2022 04:59:19 +0000
ROA not before: Sat 01 Jan 2022 04:59:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21026
IP address blocks: 193.188.250.0/24 maxlen: 25
194.8.96.0/19 maxlen: 25
194.145.64.0/19 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 764961364 (0x2d986254)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Validity
Not Before: Jan 1 04:59:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8683b7fe64ed8596666a5a315cab3795093e6e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:24:91:90:45:9d:60:eb:5a:ac:0b:66:25:
63:67:61:bc:bd:4c:8e:70:4d:18:43:a6:70:e1:c1:
18:48:d8:84:5c:fd:08:de:b0:33:b8:cf:d1:d4:8f:
cb:1f:a0:a0:c3:ab:33:77:3b:6a:bb:e0:e3:17:5f:
b5:b7:12:1d:8d:5b:a4:6f:9d:1c:02:8d:00:01:a2:
b0:98:f4:29:d9:17:c3:42:34:92:97:6f:e8:8a:fc:
f7:67:31:43:e1:4a:4c:2c:8e:3e:bf:e4:c0:54:51:
8a:75:d3:0d:21:7e:00:a2:90:53:17:9d:80:7d:06:
ca:51:29:06:c7:ca:f4:3a:20:b3:f6:de:23:91:51:
7c:0a:da:45:25:47:31:f8:c7:99:b1:8c:08:78:ea:
06:84:66:95:e0:7c:10:0f:09:83:02:c0:32:c7:f3:
da:20:df:4b:fd:9f:d3:49:1b:88:d2:c6:96:7f:e9:
6b:f8:d3:29:74:56:8d:02:fa:f5:b9:fd:8b:5e:3a:
70:a4:36:4c:23:6a:ee:b4:05:3c:a4:79:c8:b3:a7:
49:4a:83:7d:de:73:54:e4:d7:e1:24:9a:35:e5:b2:
78:d3:0b:13:38:4c:19:ef:32:53:4b:78:e4:b3:14:
da:47:ec:4f:a1:eb:0c:43:bd:b6:8b:ee:a0:fe:da:
4b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:83:B7:FE:64:ED:85:96:66:6A:5A:31:5C:AB:37:95:09:3E:6E:89
X509v3 Authority Key Identifier:
keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/hoO3_mTthZZmaloxXKs3lQk-bok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.250.0/24
194.8.96.0/19
194.145.64.0/19
Signature Algorithm: sha256WithRSAEncryption
3c:2e:66:02:98:5b:96:54:56:fa:2b:d1:ac:56:c7:d0:6e:27:
72:a4:21:72:11:8a:39:fd:e7:21:be:ab:1f:82:71:01:14:41:
83:3b:ad:ba:d8:52:db:1c:7a:eb:07:c6:f2:3a:03:1e:bb:cf:
eb:d3:a0:3f:a7:2e:9e:ad:85:c5:3d:51:92:8e:ec:4e:43:55:
2f:37:30:db:96:6d:6e:4c:08:e7:d0:78:35:0d:c9:8e:ed:82:
60:0a:b2:d2:c1:9c:a5:75:d8:7d:e2:d4:48:d8:1a:44:73:eb:
38:72:37:0a:90:1d:c4:41:8d:f0:f2:63:63:35:0e:75:b2:2f:
88:22:74:8b:64:dd:c1:77:8b:45:db:b6:bd:ca:37:b8:6c:95:
76:aa:2f:b8:5a:e1:74:5c:c6:c8:53:a3:e7:30:3d:9c:56:98:
7e:1e:92:0e:f9:37:3b:89:a4:5c:14:4d:91:e3:24:35:49:f9:
07:57:a5:d7:68:91:95:3f:21:b7:74:02:14:c7:fc:fa:27:b9:
06:3b:4f:36:d0:8b:03:8a:a0:31:e4:cd:87:1c:88:22:fd:32:
2f:17:c5:90:25:25:a5:79:2c:de:fb:a2:c4:8a:c8:68:df:ed:
2d:54:db:47:06:14:f5:30:16:f6:75:b0:6c:ec:a3:e1:c2:8d:
db:21:0a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:56 2025 by rpki-client