Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/OJFIQvH0U7kFkTleGlqc7yJEegA.roa
File: OJFIQvH0U7kFkTleGlqc7yJEegA.roa (raw, json)
Hash identifier: q6RaRVIk29BSfMUw0OqPRscpCHNfIAp6INQDk04/hZk=
Subject key identifier: 38:91:48:42:F1:F4:53:B9:05:91:39:5E:1A:5A:9C:EF:22:44:7A:00
Certificate issuer: /CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Certificate serial: 12DD27FC
Authority key identifier: 9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/OJFIQvH0U7kFkTleGlqc7yJEegA.roa
Signing time: Tue 28 Jun 2022 07:56:02 +0000
ROA not before: Tue 28 Jun 2022 07:56:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8462
IP address blocks: 193.218.98.0/24 maxlen: 24
77.110.160.0/19 maxlen: 19
195.128.232.0/23 maxlen: 23
77.110.128.0/19 maxlen: 19
185.187.248.0/22 maxlen: 22
185.166.136.0/22 maxlen: 22
95.168.64.0/19 maxlen: 19
185.195.52.0/22 maxlen: 22
193.151.116.0/22 maxlen: 22
91.146.128.0/18 maxlen: 18
185.235.112.0/22 maxlen: 22
212.16.128.0/19 maxlen: 19
95.168.32.0/19 maxlen: 19
185.166.132.0/22 maxlen: 22
185.170.84.0/22 maxlen: 22
46.249.128.0/19 maxlen: 19
194.37.88.0/22 maxlen: 22
77.111.128.0/18 maxlen: 18
185.172.44.0/22 maxlen: 22
185.165.108.0/22 maxlen: 22
193.227.196.0/22 maxlen: 22
79.121.104.0/21 maxlen: 21
185.3.136.0/22 maxlen: 22
79.121.112.0/21 maxlen: 21
2a01:5d0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316483580 (0x12dd27fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae07c94a8a6af7a5d18f4eaaea79e26df932214
Validity
Not Before: Jun 28 07:56:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38914842f1f453b90591395e1a5a9cef22447a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:23:97:c8:7e:e0:5f:0c:19:f1:79:02:33:
ac:4a:f9:a1:48:1f:e4:59:ba:48:cb:e9:6f:31:e6:
80:10:eb:6a:7e:41:cb:96:20:0f:98:b5:da:87:34:
a3:22:88:1f:cf:25:98:c6:fb:84:5a:5f:b5:79:78:
c3:c5:68:28:99:8e:a5:86:77:58:98:e4:1f:d1:e7:
08:cf:a6:04:48:30:17:27:4e:5d:8e:4b:b4:a6:bc:
c3:d4:6d:97:b3:34:6f:e0:a2:62:30:4c:36:2f:75:
95:f7:ef:c4:b3:d7:c7:86:90:1e:42:c8:3c:81:48:
e3:40:07:66:c6:a6:b5:d7:af:b7:4b:c6:66:22:ce:
e6:6d:34:c8:74:19:e1:f4:75:c0:50:29:6c:f6:9d:
19:89:fd:73:b7:41:73:31:0b:fd:96:d5:29:3d:5c:
36:68:f3:c5:b2:e0:ec:6f:3f:c4:6e:c4:21:4e:4c:
89:a5:8d:a3:af:7b:00:5d:de:a7:f1:cb:46:40:e9:
b5:2a:00:e6:98:0d:0e:46:37:bf:f4:31:27:be:9d:
1e:ca:01:56:e5:ba:9b:a8:eb:5d:82:f1:fd:a1:10:
ec:52:9c:75:0e:4b:8a:44:6e:8c:cf:74:4b:1f:4d:
98:28:39:e6:52:26:e8:ca:99:c9:9f:09:7d:01:4c:
e2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:91:48:42:F1:F4:53:B9:05:91:39:5E:1A:5A:9C:EF:22:44:7A:00
X509v3 Authority Key Identifier:
keyid:9A:E0:7C:94:A8:A6:AF:7A:5D:18:F4:EA:AE:A7:9E:26:DF:93:22:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muB8lKimr3pdGPTqrqeeJt-TIhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/OJFIQvH0U7kFkTleGlqc7yJEegA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3a8dd0-3875-4eb2-b633-e2665d447d32/1/muB8lKimr3pdGPTqrqeeJt-TIhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.128.0/19
77.110.128.0/18
77.111.128.0/18
79.121.104.0-79.121.119.255
91.146.128.0/18
95.168.32.0-95.168.95.255
185.3.136.0/22
185.165.108.0/22
185.166.132.0-185.166.139.255
185.170.84.0/22
185.172.44.0/22
185.187.248.0/22
185.195.52.0/22
185.235.112.0/22
193.151.116.0/22
193.218.98.0/24
193.227.196.0/22
194.37.88.0/22
195.128.232.0/23
212.16.128.0/19
IPv6:
2a01:5d0::/32
Signature Algorithm: sha256WithRSAEncryption
16:35:61:b1:a4:32:ec:36:e9:81:37:5c:c4:e4:83:7f:84:60:
74:f9:8c:3b:7a:ff:ca:b3:ff:64:d2:02:25:a1:e9:55:dd:72:
09:81:cb:ae:f4:93:22:43:34:99:85:71:6c:df:57:90:f5:fb:
ab:1d:d0:33:67:e3:94:67:97:27:eb:9a:12:3e:1f:0a:c7:7e:
d6:d6:14:83:53:e2:ea:c9:22:11:8c:18:f6:4d:53:af:27:c9:
75:3f:fe:8b:5b:8e:f2:b7:c9:f5:37:5f:33:20:5c:a3:30:50:
e1:bd:3d:95:1b:b0:72:a5:1d:b1:4c:5b:73:55:ac:58:bd:d6:
3e:94:62:a1:31:97:d9:67:98:87:97:4e:24:de:d6:bf:68:92:
c0:98:a6:ae:66:75:b6:33:9f:3d:bb:a3:bc:b5:b2:c8:35:67:
6b:fc:c8:9d:1e:3e:f3:cb:47:8a:b5:b2:9f:1f:2e:85:7e:de:
39:81:9b:d3:03:d3:bb:46:06:61:f8:8a:b6:6d:70:da:13:3f:
d7:f7:9e:54:bc:3e:12:e4:84:11:ff:ef:48:35:69:27:a9:6a:
bd:46:f3:6c:1c:b8:fa:a4:1a:89:d6:ba:9d:eb:e5:98:b8:89:
84:07:2d:31:cd:22:9d:b1:6e:67:2f:83:05:46:6f:a1:ba:77:
0c:5e:55:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:00 2025 by rpki-client