Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/wZ8p1ppn20eMksEl3xC-OFCHtS0.roa
File: wZ8p1ppn20eMksEl3xC-OFCHtS0.roa (raw, json)
Hash identifier: J4uFeo1xlYPQs5VyAftnmRMuBXw8aoSUqLVlYdiMmas=
Subject key identifier: C1:9F:29:D6:9A:67:DB:47:8C:92:C1:25:DF:10:BE:38:50:87:B5:2D
Certificate issuer: /CN=3a66869dd1a997164ba4fa23e0fd41fb3acb10be
Certificate serial: 02CB71C4
Authority key identifier: 3A:66:86:9D:D1:A9:97:16:4B:A4:FA:23:E0:FD:41:FB:3A:CB:10:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/wZ8p1ppn20eMksEl3xC-OFCHtS0.roa
Signing time: Sat 01 Jan 2022 13:05:17 +0000
ROA not before: Sat 01 Jan 2022 13:05:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202956
IP address blocks: 185.149.76.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46887364 (0x2cb71c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a66869dd1a997164ba4fa23e0fd41fb3acb10be
Validity
Not Before: Jan 1 13:05:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c19f29d69a67db478c92c125df10be385087b52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:0b:5e:2b:47:31:de:d3:75:10:eb:20:cf:
fd:d4:f1:59:b9:cc:4f:4f:ae:69:9a:d5:4a:96:8a:
26:b9:bb:29:c4:7b:8f:52:9b:e8:ca:b1:04:d8:ed:
01:fe:d2:8c:07:62:c8:9d:b4:7c:11:62:a0:a8:b5:
d8:61:d5:76:20:10:52:20:64:77:20:b5:d6:4a:ef:
4e:d3:fa:bd:3f:16:4d:c8:14:30:de:2c:bc:45:09:
bd:54:68:22:7f:1a:49:c2:26:80:ca:16:a8:c3:d8:
d0:23:31:b8:72:aa:36:c9:b8:f8:d4:73:10:5d:08:
c7:ba:ea:f8:db:28:9a:be:70:ac:1c:a0:2f:43:01:
7e:ae:5d:90:21:b6:7b:01:1d:cc:5a:be:e0:a5:d8:
55:53:3c:e2:1e:93:11:33:42:81:96:32:03:88:c0:
d1:d3:9c:6b:70:01:10:37:75:c9:df:79:5d:94:e3:
84:67:1b:97:ef:4f:65:71:56:24:f5:91:33:61:5b:
41:9d:8a:02:f5:61:ad:9d:e5:b1:2e:01:40:f1:06:
bc:45:3a:52:24:a5:f6:5e:16:5e:4d:1e:c9:e4:f0:
1c:53:40:00:61:59:c3:3d:39:ab:dc:56:74:d9:c2:
96:9b:0a:f6:7c:d2:85:be:b2:ac:a0:32:cb:73:47:
4a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9F:29:D6:9A:67:DB:47:8C:92:C1:25:DF:10:BE:38:50:87:B5:2D
X509v3 Authority Key Identifier:
keyid:3A:66:86:9D:D1:A9:97:16:4B:A4:FA:23:E0:FD:41:FB:3A:CB:10:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmaGndGplxZLpPoj4P1B-zrLEL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/wZ8p1ppn20eMksEl3xC-OFCHtS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9118e3-13da-4d48-9c38-711fc1a2d0a0/1/OmaGndGplxZLpPoj4P1B-zrLEL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.76.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:69:03:7d:3d:5e:49:4e:e4:df:ef:19:73:bd:83:b3:8f:2d:
cc:ea:93:f9:6c:81:77:21:e3:4d:b9:ad:82:a0:db:56:ae:33:
4b:fc:e7:05:76:fb:65:0e:35:62:3e:27:3b:da:ed:6f:28:55:
ae:5e:a7:82:a4:ad:7b:c2:44:e9:83:51:77:e4:25:59:00:1f:
3a:b3:74:b0:59:48:63:d6:0e:a8:d3:9b:61:74:5c:97:ff:af:
8f:bf:09:ae:d8:27:ea:6c:18:85:93:3d:e1:6f:80:0d:00:61:
53:63:a3:15:10:86:15:26:e4:f2:c0:22:45:0e:88:62:be:5c:
2f:43:28:f7:c5:47:00:a3:05:be:06:b1:a7:f9:a5:24:95:15:
66:2f:78:d0:61:f8:16:33:71:88:04:f0:02:3a:63:fb:6e:f3:
7f:ae:37:02:23:0a:df:e4:cc:3e:43:d2:a3:f2:38:76:cc:75:
e6:2e:72:a5:4e:d8:d6:f0:ef:5f:47:f2:39:05:5e:a8:3c:1d:
36:b1:df:12:2b:02:13:80:e2:bc:3e:ed:ae:70:42:6e:92:e7:
52:79:03:99:ee:a5:11:a0:23:02:27:bd:f0:af:ec:1d:da:e4:
10:85:a5:d2:1f:68:44:d6:9d:d9:ec:fe:67:70:43:2c:8e:f5:
90:a8:5a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:38 2025 by rpki-client