Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/OyaBPqgpXOglmAqIeAjy7Ch6iyQ.roa
File: OyaBPqgpXOglmAqIeAjy7Ch6iyQ.roa (raw, json)
Hash identifier: +hvubZDf9YCi8Qjak8/3VSXmboeajdvsXF0Fsato0g0=
Subject key identifier: 3B:26:81:3E:A8:29:5C:E8:25:98:0A:88:78:08:F2:EC:28:7A:8B:24
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 018327442F309DD1D9F99EFDAA77E3BF6AD0
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/OyaBPqgpXOglmAqIeAjy7Ch6iyQ.roa
Signing time: Sat 10 Sep 2022 11:58:43 +0000
ROA not before: Sat 10 Sep 2022 11:58:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59729
IP address blocks: 91.215.152.0/24 maxlen: 24
91.215.154.0/24 maxlen: 24
91.210.166.0/23 maxlen: 23
2001:67c:2f4c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:27:44:2f:30:9d:d1:d9:f9:9e:fd:aa:77:e3:bf:6a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Sep 10 11:58:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b26813ea8295ce825980a887808f2ec287a8b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:81:e1:e0:00:f8:03:cc:0b:58:7d:53:73:
92:44:f0:15:7c:8f:e1:be:d2:0c:d4:e2:7a:62:26:
c1:30:90:19:e1:f4:3f:e9:91:7d:2c:d1:d1:fc:70:
b0:f5:ac:5c:d3:82:c3:e9:66:19:26:be:20:b9:dd:
4f:f6:e8:7d:93:5d:25:64:27:df:d2:cd:ab:a4:00:
1d:5d:34:32:51:f2:52:68:97:8d:81:8c:07:12:03:
a4:d4:29:12:a8:aa:27:a7:78:ca:64:3c:b8:a3:93:
6b:fa:e5:49:94:18:7f:c6:d4:35:6d:4a:11:fa:43:
69:c3:bb:e9:88:35:67:3a:5e:7a:99:27:de:9e:8b:
d2:2d:f1:81:a3:56:17:9f:f5:c2:c0:69:27:49:bf:
32:ff:c7:ff:a4:1c:59:34:6a:8a:e0:b5:37:a3:bd:
ad:f2:cb:b5:63:67:0e:02:8c:55:d8:7f:18:51:e8:
51:da:65:96:7a:10:79:b8:9b:45:25:12:ce:34:d7:
ec:73:18:38:3e:ae:60:ac:5a:16:f4:46:c4:ba:b5:
79:d0:c3:c5:7b:d7:c9:87:a2:ed:dc:46:b6:7f:49:
3d:75:44:83:fa:fd:16:8b:7f:15:24:49:5c:6b:08:
52:e7:47:90:6a:23:b6:8a:3c:e4:8d:3d:0c:b7:ed:
c7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:26:81:3E:A8:29:5C:E8:25:98:0A:88:78:08:F2:EC:28:7A:8B:24
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/OyaBPqgpXOglmAqIeAjy7Ch6iyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.166.0/23
91.215.152.0/24
91.215.154.0/24
IPv6:
2001:67c:2f4c::/48
Signature Algorithm: sha256WithRSAEncryption
b4:1e:3b:f7:45:90:17:9f:ec:3d:c1:b1:33:38:69:82:75:ad:
41:7d:1e:c2:56:8f:4f:bb:bc:a7:95:e5:8f:d9:5c:29:29:8e:
03:cd:9b:34:7a:1b:14:23:a0:9f:8f:50:8b:57:78:71:e0:6b:
75:4e:bb:2f:b5:77:c6:66:a0:57:da:75:ef:c4:fc:d5:fc:c5:
b5:e0:8f:54:cf:35:52:64:54:64:bb:58:33:ac:66:a0:8f:4d:
15:76:74:3e:36:d4:12:af:9e:4c:34:f1:73:05:1f:b9:4e:f9:
f8:6c:4c:b0:f9:04:74:d4:eb:f0:42:ad:15:a5:a9:90:5f:e4:
ed:a6:f5:8c:7a:9a:9b:89:23:d4:90:8e:c2:f9:19:a1:38:bd:
c6:1d:22:43:91:ef:fc:a4:af:96:fc:55:7f:7d:72:be:c4:86:
ce:0e:c5:4b:c8:d4:6b:5d:dc:14:8a:5a:15:90:a3:a6:6d:d2:
f3:ca:b9:f5:6b:60:6f:7d:44:c1:6f:d9:8c:47:f2:10:db:0e:
d5:f9:f9:f3:60:55:04:fe:92:e7:63:4c:ad:78:da:fa:6d:eb:
10:5b:ee:30:2a:3a:b4:27:6d:da:ac:82:bf:1d:89:66:09:11:
a3:65:5a:68:cb:33:71:8e:5d:f0:e4:07:25:41:01:2c:4c:57:
8c:8d:e7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:09:14 2025 by rpki-client