Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/oTVjaqGEOxPg1zwR0JhKIfbnlSY.roa
File: oTVjaqGEOxPg1zwR0JhKIfbnlSY.roa (raw, json)
Hash identifier: BiaBB7eN/l0bFovDvbFkZefxwNwSzL+z7Y1sYT9JPZY=
Subject key identifier: A1:35:63:6A:A1:84:3B:13:E0:D7:3C:11:D0:98:4A:21:F6:E7:95:26
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD5399397CE4F912109A5A8152BA62F
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/oTVjaqGEOxPg1zwR0JhKIfbnlSY.roa
Signing time: Mon 02 Jan 2023 00:15:22 +0000
ROA not before: Mon 02 Jan 2023 00:15:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59765
IP address blocks: 188.214.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:39:93:97:ce:4f:91:21:09:a5:a8:15:2b:a6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a135636aa1843b13e0d73c11d0984a21f6e79526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:34:1e:71:30:15:a7:6e:a1:89:fb:61:38:52:
29:0e:52:89:1d:87:7d:40:b6:ae:8a:00:c1:95:64:
9d:55:f1:49:de:47:5b:8d:90:dc:da:fb:03:01:46:
06:3c:de:c8:85:57:95:96:bc:5d:ba:d0:44:04:9a:
dd:ae:43:81:2e:ac:08:37:a8:89:23:67:35:9f:ef:
89:27:43:a3:ae:9b:3e:ef:2f:f8:14:06:e3:4f:c7:
f7:90:a7:4d:6c:8a:7d:ac:8d:5d:89:c3:28:70:6c:
fc:2b:74:cf:81:b2:bf:39:71:cb:f0:29:68:a6:fd:
ca:2d:d4:3b:12:df:9d:42:0a:7e:a4:09:5c:98:ff:
e3:b7:65:41:72:5d:b0:34:80:bc:22:3c:bc:fc:6b:
a6:e2:72:37:b1:14:99:4b:d1:71:35:52:6c:cc:28:
36:c5:fc:4d:6f:9c:42:28:41:79:5f:4d:d5:1c:a9:
75:cf:84:1a:60:df:e7:cc:e4:0c:d1:40:15:44:2c:
46:15:8b:89:93:b3:37:3e:0b:7e:f3:95:1f:ea:56:
ca:36:d6:71:2f:81:26:28:12:81:13:75:13:a0:fa:
43:9d:75:d8:80:29:91:c9:79:d7:b6:fe:09:60:1d:
dc:ce:81:e2:15:38:24:c1:27:b2:1e:c1:91:c7:35:
11:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:35:63:6A:A1:84:3B:13:E0:D7:3C:11:D0:98:4A:21:F6:E7:95:26
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/oTVjaqGEOxPg1zwR0JhKIfbnlSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.111.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:71:84:bd:47:bb:ec:8c:09:9a:9e:86:2c:e2:e1:fe:05:a4:
77:f8:82:e3:ad:e4:e0:90:14:33:9c:e6:f5:62:6c:f2:49:9b:
36:e2:88:ba:42:f0:c3:a8:5d:80:78:0b:c8:b9:78:b4:41:0c:
af:26:4e:62:44:dc:49:ac:96:5e:ea:1c:4c:3d:2b:b7:97:7f:
ca:fe:49:c1:a8:56:a9:7b:20:52:1c:69:a5:90:ed:a4:7e:ab:
38:29:28:0c:23:97:7e:42:dd:ec:9d:07:17:54:26:16:35:eb:
16:c5:8d:c5:53:89:73:f6:2c:2c:b2:40:94:15:11:78:6e:5a:
d4:9b:c1:8f:b6:52:2b:be:62:d0:d4:d4:98:bc:05:0b:28:45:
77:4f:24:05:f6:30:12:3f:bd:93:0d:cc:3b:d8:b9:2a:e7:df:
01:b5:5c:59:69:ab:98:e2:fa:3e:09:48:ea:54:ea:95:f4:0a:
76:e3:71:77:03:34:34:32:50:0d:ea:ad:bb:e3:e0:f1:5b:2a:
6d:b0:60:c9:50:e2:69:41:bd:ed:a8:90:6b:11:4f:8d:5c:62:
fe:94:dd:b7:78:15:6b:4f:05:e0:64:55:d0:7b:e9:65:fe:fa:
5c:2c:3d:40:f8:cf:fd:40:6b:f5:b1:90:03:6b:72:88:aa:29:
69:55:f1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:17 2025 by rpki-client