Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/OCKbNGVHfDlq4ikAEO7k8AZFwmY.roa
File: OCKbNGVHfDlq4ikAEO7k8AZFwmY.roa (raw, json)
Hash identifier: 3Sex8Gp/RZsJGnXdUVVmbEYF1sXXabLclYUq3YIqcKI=
Subject key identifier: 38:22:9B:34:65:47:7C:39:6A:E2:29:00:10:EE:E4:F0:06:45:C2:66
Certificate issuer: /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Certificate serial: 02247B1C
Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/OCKbNGVHfDlq4ikAEO7k8AZFwmY.roa
Signing time: Sat 01 Jan 2022 08:04:37 +0000
ROA not before: Sat 01 Jan 2022 08:04:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59811
IP address blocks: 193.162.44.0/24 maxlen: 24
2a10:f0c0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35945244 (0x2247b1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Validity
Not Before: Jan 1 08:04:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38229b3465477c396ae2290010eee4f00645c266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bc:67:55:2f:02:e6:d3:9d:cc:de:78:92:21:
3b:64:5f:01:ed:dc:e6:d3:82:fd:c5:0c:fa:10:c7:
de:4e:0e:83:58:9a:21:91:59:97:99:10:43:ad:7f:
40:59:57:c1:51:63:61:6e:04:a6:d0:27:74:d7:76:
cd:de:e5:d9:37:88:e8:88:86:e8:35:3c:af:c9:06:
ab:df:69:9a:bf:27:5c:05:0f:6a:ec:a5:ff:de:d8:
85:07:d4:29:45:2a:f1:5e:e7:35:41:f6:f9:39:a8:
c4:94:d5:1b:e5:86:cf:2e:17:4f:43:d1:37:ff:b1:
de:fe:07:31:c1:91:1e:1e:bf:49:9d:8a:45:eb:86:
2b:c7:d5:43:37:89:80:9c:f7:2a:d5:48:a9:b4:2d:
08:1c:60:9d:f6:5e:de:14:db:6d:5a:16:63:4e:77:
c5:83:3c:4c:1e:3a:51:ef:90:96:92:77:4b:d9:00:
9c:d6:bd:d9:49:a3:ab:a0:b4:6f:c1:78:d2:86:5e:
2f:e2:c8:51:5a:dc:5c:02:cb:bf:60:96:f6:aa:af:
0c:62:9b:87:56:92:3e:45:58:3a:18:6c:57:96:36:
03:32:94:ec:ba:ab:dd:56:49:10:94:de:d0:93:24:
d0:4a:c4:64:32:38:e4:e8:8a:6f:82:5e:e4:b2:4e:
3b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:22:9B:34:65:47:7C:39:6A:E2:29:00:10:EE:E4:F0:06:45:C2:66
X509v3 Authority Key Identifier:
keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/OCKbNGVHfDlq4ikAEO7k8AZFwmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.44.0/24
IPv6:
2a10:f0c0::/29
Signature Algorithm: sha256WithRSAEncryption
38:ce:4b:f7:22:b5:7c:c1:6f:a2:3e:29:7b:46:a6:69:90:81:
d8:4a:f9:c5:02:5f:ea:66:ca:a2:3a:13:f7:1e:50:4c:c5:88:
34:5b:7d:f1:4e:fb:ac:ce:fc:f6:c9:4c:d2:f6:b5:de:29:78:
a1:65:7d:7b:74:ab:a2:af:ee:45:53:1e:18:6b:f9:5d:0b:01:
24:61:05:97:45:41:f3:06:ae:d0:5c:48:80:e7:d8:6e:6e:30:
19:b4:a1:8c:d3:c8:49:af:79:ff:64:a8:ce:dc:d0:27:cd:71:
e3:aa:b5:2d:0d:20:fc:dc:82:f2:26:eb:40:4e:31:4c:12:46:
19:56:3d:89:ed:9b:c1:ef:99:a9:8a:8d:73:19:0e:57:f2:a7:
aa:fc:1a:e4:f1:f3:2b:cb:b4:18:e2:c3:c9:0f:df:68:a4:45:
ec:55:c4:66:82:e2:ea:7d:4b:c5:7f:c8:5c:f2:2c:37:bb:c6:
93:d0:d9:4c:77:a9:00:21:d5:84:c4:98:68:81:e9:db:24:be:
55:88:f5:25:bc:15:f8:c9:ac:4f:d0:fe:44:a8:49:a1:0d:34:
8e:7c:92:98:f1:e0:28:3f:b1:0d:14:28:b1:41:bd:02:61:1d:
b3:64:06:f1:ad:86:1c:a9:7b:05:c9:f2:0f:8b:84:c7:e1:f2:
15:68:ea:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:15 2024 by rpki-client on console-fra.rpki-client.org