Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/oBbl5xircupwlpYJSFK1qj1WXaA.roa
File: oBbl5xircupwlpYJSFK1qj1WXaA.roa (raw, json)
Hash identifier: m+psFpZ9gIAuXOzLHBQByKoXMqwKCVPtHTA1ma5RZOQ=
Subject key identifier: A0:16:E5:E7:18:AB:72:EA:70:96:96:09:48:52:B5:AA:3D:56:5D:A0
Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial: 3FC18B76
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/oBbl5xircupwlpYJSFK1qj1WXaA.roa
Signing time: Sat 01 Jan 2022 08:55:08 +0000
ROA not before: Sat 01 Jan 2022 08:55:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206394
IP address blocks: 195.150.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1069648758 (0x3fc18b76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Validity
Not Before: Jan 1 08:55:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a016e5e718ab72ea709696094852b5aa3d565da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:13:d8:ed:d0:bb:fb:1b:2c:6d:94:45:e7:21:
a6:6b:7e:a7:93:a7:49:8c:d2:f0:a1:b5:51:37:93:
19:2c:01:d8:ba:b2:6f:ed:0a:97:3a:79:95:c6:12:
e9:64:e4:87:8b:a0:b2:3e:07:71:ed:07:38:d2:32:
fc:b6:85:69:ee:2e:f8:69:90:73:7b:3a:66:96:a2:
52:75:3d:2a:92:73:39:8d:82:38:8e:f7:05:91:6b:
3a:60:3a:ec:55:49:3a:4a:66:70:2f:0e:a9:6e:6b:
7f:b1:80:fe:66:38:e0:7e:c7:06:32:04:67:fc:e2:
2c:8e:74:c9:2c:19:e9:9f:a9:38:5c:03:a0:9c:85:
0f:db:f9:a8:e0:6f:34:cb:ef:b6:c1:31:49:90:a6:
d4:4f:b7:3a:02:d3:0e:2b:ef:ac:9f:ed:36:dd:b7:
7e:8c:9e:f4:a6:2c:97:80:8a:5a:da:44:51:35:35:
eb:a3:87:36:9a:1e:75:09:96:55:60:de:73:a6:9f:
a5:ec:82:69:65:4e:60:72:34:5d:b7:16:72:b8:0b:
bf:43:25:04:6f:9a:fe:8e:a8:f4:19:54:aa:ca:6e:
c0:f7:9e:36:64:60:4d:fc:85:9f:d8:07:8b:dd:90:
94:6f:5a:0b:e0:57:ae:2a:67:07:47:c6:a7:71:c4:
01:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:16:E5:E7:18:AB:72:EA:70:96:96:09:48:52:B5:AA:3D:56:5D:A0
X509v3 Authority Key Identifier:
keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/oBbl5xircupwlpYJSFK1qj1WXaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.150.200.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:58:22:c6:96:5b:fe:e5:64:8f:71:23:a7:59:76:2f:59:be:
f3:f3:7f:fe:bf:4b:68:cf:14:9b:5f:a7:ab:94:c0:89:c4:52:
bc:89:3e:be:ba:42:ad:b2:68:ce:8d:13:51:ee:cc:98:fb:6b:
78:7f:50:22:a0:f4:ea:b2:82:11:f4:07:ff:c9:b0:14:08:47:
57:b8:c9:f6:e1:19:6f:f5:ad:c6:cd:f3:ac:8a:1a:35:bf:2c:
7f:42:24:89:35:ca:9d:b7:06:7a:91:94:22:3e:63:72:de:5b:
bd:76:6c:d0:70:20:a5:ad:cb:5c:f4:c1:da:9f:1d:9d:ea:4f:
07:ec:d5:75:7c:9c:b1:82:77:d8:01:60:98:77:a9:36:ff:b7:
8e:97:a5:1f:3a:f6:4f:24:24:68:c8:44:c9:4f:44:70:b2:f9:
16:6a:af:be:01:83:93:9e:b5:ff:82:1c:9e:8e:4d:11:4f:d8:
30:9d:8a:ef:f6:25:cc:7e:ef:ff:c7:c9:dd:32:60:f0:05:f7:
ce:77:38:95:dc:da:e4:c8:ac:d5:eb:58:83:28:73:5b:ea:ce:
a7:c5:53:9f:4a:bc:b6:bc:18:bb:19:9f:6f:d5:5e:54:29:13:
69:b3:07:3d:b0:9c:3c:5b:5d:4e:7e:38:2a:3b:ec:b9:b9:a5:
fc:45:a4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:11 2025 by rpki-client