Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/oELBPplusasJge7DebzEg59_-BY.roa
File: oELBPplusasJge7DebzEg59_-BY.roa (raw, json)
Hash identifier: vXZQI61KMz8wzIAXTwAocTkZKEoiCeHjli7JIwALwn4=
Subject key identifier: A0:42:C1:3E:99:6E:B1:AB:09:81:EE:C3:79:BC:C4:83:9F:7F:F8:16
Certificate issuer: /CN=a24cf90329c47ba343a66cd65d38833a357b5955
Certificate serial: 01856C53D53C9C2C964811C2AF289FC7BD49
Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/oELBPplusasJge7DebzEg59_-BY.roa
Signing time: Sun 01 Jan 2023 07:55:11 +0000
ROA not before: Sun 01 Jan 2023 07:55:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210569
IP address blocks: 185.217.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:d5:3c:9c:2c:96:48:11:c2:af:28:9f:c7:bd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955
Validity
Not Before: Jan 1 07:55:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a042c13e996eb1ab0981eec379bcc4839f7ff816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:15:f8:7c:b7:e8:19:cd:43:ef:5f:72:74:e8:
fe:19:e3:08:ad:70:7a:46:d9:ba:1e:94:35:cd:a5:
f7:b1:1b:c6:9a:d0:c7:8d:b5:09:43:d8:f9:d8:67:
2c:79:c0:1f:9c:2f:3b:3d:98:50:09:ef:0c:3c:a2:
a0:b7:a2:64:84:f8:27:9f:ef:32:28:2a:54:19:2f:
68:43:14:58:b2:a1:4c:77:6e:f6:c0:30:0a:ba:0f:
2d:3a:14:0c:e9:a7:03:5b:b2:0b:fe:e6:82:b6:3e:
22:2c:ca:b6:d4:91:72:ee:4d:7f:92:8b:d7:6b:97:
bd:f8:8e:c6:c5:4d:85:d5:a1:bb:e6:27:ac:f0:8f:
0b:dd:19:58:15:69:1e:00:d2:b7:61:22:f5:0c:85:
f9:ed:d0:49:d5:da:44:3f:63:9d:6a:45:a6:90:1f:
44:11:cc:50:84:f7:2a:6b:59:e2:6f:c3:cd:a8:41:
d6:ad:ca:44:43:59:56:61:a8:2a:0b:ff:dd:22:01:
e8:3a:f5:9b:b7:e1:bc:e2:02:d9:f5:13:7c:ff:d6:
b9:b6:76:99:73:72:36:78:62:e7:b0:6c:e9:a5:ad:
df:3f:ab:b5:fc:06:b5:3a:31:59:e6:a0:32:f7:b3:
cc:f2:4b:14:3a:25:16:59:3d:02:55:78:10:3b:d8:
b9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:42:C1:3E:99:6E:B1:AB:09:81:EE:C3:79:BC:C4:83:9F:7F:F8:16
X509v3 Authority Key Identifier:
keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/oELBPplusasJge7DebzEg59_-BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.30.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:1f:cf:5d:cf:d9:1f:d0:64:fc:84:67:50:be:1d:d3:1a:ab:
02:1b:80:39:e9:6b:2f:bb:4a:00:e1:90:8b:7d:62:77:66:5e:
f1:a1:91:73:aa:be:59:5b:95:23:58:d7:cf:30:66:06:1e:82:
ae:3f:59:13:b5:21:32:95:de:fe:77:6b:65:d9:54:c9:58:47:
a5:2c:0d:39:81:59:2d:ba:00:4a:7d:d2:71:c0:c3:d4:37:22:
b2:2a:93:c3:5a:b8:0f:ef:a6:4d:e5:31:b5:df:af:ce:3c:fc:
d3:34:fb:4d:0f:70:ef:3d:66:eb:af:19:09:ea:98:10:69:cd:
31:93:df:2a:9b:3a:aa:ac:0d:d3:30:6d:09:a2:c1:31:a6:79:
74:52:da:4f:26:35:bf:d5:91:a0:76:cc:b6:bf:35:43:c8:95:
9d:f8:09:f1:62:2c:2f:45:e4:36:e8:89:2f:36:35:06:5f:d2:
22:c9:af:ea:81:d8:da:33:4f:db:1e:75:13:60:27:26:d3:a8:
04:a3:36:4c:ae:94:b9:75:32:3c:1c:c0:58:e5:de:87:84:81:
ef:47:bc:49:b9:0d:92:f9:76:54:2d:67:d9:1d:be:bf:0a:5d:
04:a7:69:3a:04:79:0e:7d:55:07:ab:44:83:de:bd:f0:65:73:
c7:46:c0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:59 2025 by rpki-client