Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/O3E4sRYsrGLCiSEX29u5tmndHGs.roa
File: O3E4sRYsrGLCiSEX29u5tmndHGs.roa (raw, json)
Hash identifier: iGEU9AjefF7XkNnHxGhgQw13gyJqhu4btn+WQhODow4=
Subject key identifier: 3B:71:38:B1:16:2C:AC:62:C2:89:21:17:DB:DB:B9:B6:69:DD:1C:6B
Certificate issuer: /CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Certificate serial: 03CBB281
Authority key identifier: 2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/O3E4sRYsrGLCiSEX29u5tmndHGs.roa
Signing time: Sat 01 Jan 2022 07:59:24 +0000
ROA not before: Sat 01 Jan 2022 07:59:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58096
IP address blocks: 193.160.204.0/23 maxlen: 32
193.105.114.0/24 maxlen: 32
185.154.72.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63681153 (0x3cbb281)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c88db81fdfbeccee75f4a9f698a3c1b3a84626e
Validity
Not Before: Jan 1 07:59:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b7138b1162cac62c2892117dbdbb9b669dd1c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:af:bc:82:de:13:5f:77:91:82:41:c1:19:5f:
92:9d:02:87:36:b2:64:df:d2:6a:2c:6c:4f:47:6e:
c3:d4:c6:c7:8f:63:b9:d7:7d:3c:f1:a3:ed:fa:91:
20:0e:a2:df:3b:65:df:88:bf:8d:6d:45:05:1f:5d:
62:37:46:16:43:4c:33:3c:e2:ac:43:fa:94:f4:3f:
e6:8f:42:68:71:f1:b9:9e:2b:25:4e:28:24:06:c8:
dd:28:7d:7a:6d:58:db:ac:c7:e1:2f:a1:a7:94:c3:
02:c4:a9:c4:df:8c:e8:10:03:d6:3e:19:6c:f4:21:
01:d6:ab:5b:c4:66:71:ee:81:e3:62:6a:63:5f:69:
ad:4b:df:0c:61:1a:8f:87:4d:b3:38:9f:82:6c:c2:
11:da:81:57:d9:9a:0f:e2:ec:30:9e:bc:02:b4:f5:
b5:ff:e9:6b:08:05:5c:8b:2a:30:36:13:b2:11:d5:
30:2d:40:b3:e3:4e:02:13:e3:a9:d8:bb:c9:37:3f:
4c:20:e9:3f:23:bb:4d:06:18:1a:99:13:73:44:6f:
d6:fe:70:30:22:dd:49:5c:1e:a8:13:ed:8a:0a:e3:
76:a0:12:74:7d:d9:d7:5c:b8:8c:be:98:22:69:1c:
11:f9:7e:d5:fb:3a:3b:45:f3:b4:3a:05:ac:aa:6b:
af:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:71:38:B1:16:2C:AC:62:C2:89:21:17:DB:DB:B9:B6:69:DD:1C:6B
X509v3 Authority Key Identifier:
keyid:2C:88:DB:81:FD:FB:EC:CE:E7:5F:4A:9F:69:8A:3C:1B:3A:84:62:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIjbgf377M7nX0qfaYo8GzqEYm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/O3E4sRYsrGLCiSEX29u5tmndHGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/LIjbgf377M7nX0qfaYo8GzqEYm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.72.0/22
193.105.114.0/24
193.160.204.0/23
Signature Algorithm: sha256WithRSAEncryption
94:9a:d4:9a:48:ce:00:c4:52:da:7b:22:d1:be:ce:b6:60:3b:
e7:72:f8:77:c5:60:54:3d:8e:9d:49:f3:8e:53:af:13:57:83:
e7:45:05:55:cc:04:43:c4:f1:e7:e0:63:60:30:68:cf:4a:05:
bc:eb:3a:63:5e:dc:86:17:f4:f4:ae:1e:bc:66:60:50:c6:bb:
71:7c:22:37:d8:b2:71:20:03:aa:a3:24:ce:a6:cf:5a:75:c1:
2f:02:e1:16:69:af:d3:8b:32:21:5c:46:0f:ad:e7:5c:17:96:
70:fe:6c:ef:26:d5:74:17:4b:83:ac:4e:74:d8:78:14:ec:db:
17:b9:ea:0e:27:6c:02:24:4e:15:dc:ec:99:10:fd:4a:77:9a:
7d:ee:83:6d:fa:a6:46:8e:19:ab:1e:61:4b:ff:98:93:a8:a6:
63:0a:f2:83:f7:9c:66:e9:43:dd:12:c8:89:ca:8b:e0:2b:dc:
8a:36:ed:e0:87:be:39:70:2b:f9:86:0e:69:a5:a6:f0:52:10:
81:cb:c2:f8:59:ab:9a:24:b0:3c:34:4d:2d:c9:db:c4:66:2d:
11:40:2a:6f:2d:9b:89:a8:c3:75:b8:6f:de:3b:ea:33:16:08:
3e:34:a7:81:7e:fb:ed:97:b2:20:4d:7e:7b:55:38:c9:27:8e:
93:d6:c2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:01 2025 by rpki-client