Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/OMB64SSdf7mb6BVMgAMcLecuZKg.roa
File: OMB64SSdf7mb6BVMgAMcLecuZKg.roa (raw, json)
Hash identifier: AJOZmHgjon0Thkq7yL7BTbMwXzDWa8Fv8BvtpSxmfe4=
Subject key identifier: 38:C0:7A:E1:24:9D:7F:B9:9B:E8:15:4C:80:03:1C:2D:E7:2E:64:A8
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 0664A313
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/OMB64SSdf7mb6BVMgAMcLecuZKg.roa
Signing time: Wed 19 Jan 2022 16:28:02 +0000
ROA not before: Wed 19 Jan 2022 16:28:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15626
IP address blocks: 195.28.182.0/23 maxlen: 23
91.210.164.0/23 maxlen: 23
2001:67c:2f6c::/48 maxlen: 48
2a0a:8c46::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107258643 (0x664a313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Jan 19 16:28:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38c07ae1249d7fb99be8154c80031c2de72e64a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:fd:8e:bd:95:01:77:a0:ff:77:41:94:50:
e6:a8:51:6a:e0:5a:b6:17:12:3d:b0:61:70:52:72:
da:7a:5b:f5:cc:8c:1f:bb:56:b8:2e:ea:87:ab:85:
34:6d:4d:76:3f:e9:69:ce:19:60:53:dd:88:11:4b:
c3:3f:6c:fe:95:27:6d:1e:e9:40:73:98:64:1c:2e:
4d:1b:f9:59:d5:7c:2e:de:86:6c:a4:d3:c9:7d:34:
5d:c8:32:76:b3:cb:4b:03:31:af:68:2c:79:9b:18:
c5:df:a9:33:16:b0:de:92:0c:ad:be:95:2e:c1:df:
9e:49:09:8e:c7:a3:38:79:13:f1:3f:b2:b6:36:ec:
a9:09:06:24:7c:86:db:93:81:65:58:97:e6:62:18:
df:f1:39:49:18:44:10:b6:bd:96:96:21:44:6f:5c:
6f:a1:5f:b9:5c:0b:8b:1c:3e:be:1d:e2:e3:1b:1c:
92:d3:5f:2f:4f:d6:c8:9d:7a:8c:0a:5e:33:e3:87:
b6:e4:c6:0c:c3:db:ba:66:3d:cf:8d:aa:28:4d:6f:
0a:64:2b:97:a4:17:83:1f:20:6e:7b:ee:41:08:b4:
21:73:c6:69:84:c8:36:41:79:38:c4:b8:04:5c:88:
ba:9b:9d:d2:1c:98:fb:aa:36:21:d0:66:37:17:a1:
f4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C0:7A:E1:24:9D:7F:B9:9B:E8:15:4C:80:03:1C:2D:E7:2E:64:A8
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/OMB64SSdf7mb6BVMgAMcLecuZKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.164.0/23
195.28.182.0/23
IPv6:
2001:67c:2f6c::/48
2a0a:8c46::/32
Signature Algorithm: sha256WithRSAEncryption
b0:5d:09:94:a3:f4:cb:2b:86:a0:81:e0:6d:8a:16:50:09:d4:
2e:29:45:9a:e4:69:7d:60:6f:45:74:4a:85:53:14:a3:00:de:
b2:5b:af:28:91:da:65:99:d1:8c:c6:0b:aa:fa:e4:06:d4:9f:
8e:3f:3a:0e:bd:67:d4:f5:46:84:b2:59:2c:9e:b8:c8:1c:d3:
a7:7f:19:a7:c9:43:72:2a:3e:b0:10:2c:27:48:85:9e:6c:af:
ec:90:1c:4b:9d:8e:0e:69:9f:78:b5:08:d4:d9:4f:36:88:28:
e8:cd:18:1a:b1:52:ba:a9:c3:d1:a9:6c:f9:46:11:fe:80:37:
3d:44:dc:7b:89:c0:e1:57:d2:d6:d9:bb:25:32:b2:88:d5:29:
9c:7f:31:fb:d0:c8:43:86:e2:1b:57:36:23:49:83:5b:0d:1b:
cf:cf:fb:f1:dd:f6:49:85:93:36:f8:a0:1d:ab:1e:c4:70:62:
85:8f:05:1d:57:c0:dd:b2:8e:72:5f:60:16:38:a4:38:28:2a:
44:c4:ec:d1:ee:59:28:73:f2:38:5a:7e:a6:6b:24:87:cf:8a:
15:68:ab:79:81:d4:39:71:bb:c3:68:84:97:08:22:1d:80:b4:
9f:b4:f3:9c:18:a1:7c:da:c4:b0:72:44:da:98:2d:e0:c1:2e:
28:3b:6c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:26:23 2025 by rpki-client