Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/OussWzE0WaRThc2ne_GUf8A2H8s.roa
File: OussWzE0WaRThc2ne_GUf8A2H8s.roa (raw, json)
Hash identifier: 79MQJwBSAJym7uOuVpzOUI26rrwHatT6MAtqCnmLjJc=
Subject key identifier: 3A:EB:2C:5B:31:34:59:A4:53:85:CD:A7:7B:F1:94:7F:C0:36:1F:CB
Certificate issuer: /CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Certificate serial: 0188BEC41D7A1786602366C6936A98A2541A
Authority key identifier: 00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/OussWzE0WaRThc2ne_GUf8A2H8s.roa
Signing time: Thu 15 Jun 2023 11:15:03 +0000
ROA not before: Thu 15 Jun 2023 11:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 146943
IP address blocks: 195.93.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:c4:1d:7a:17:86:60:23:66:c6:93:6a:98:a2:54:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e0b4eaf9c10791f353ba987de2360a138417bd
Validity
Not Before: Jun 15 11:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3aeb2c5b313459a45385cda77bf1947fc0361fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f9:f9:db:c9:27:66:9a:8e:39:14:c2:34:8e:
a9:15:bd:ed:84:cb:1a:17:29:6d:c0:bf:b8:a6:12:
5a:1a:e6:69:58:5f:d4:5d:c2:ca:02:de:c2:4d:4b:
2a:57:a0:f5:11:ac:9d:26:bc:b6:a8:68:f8:91:a1:
20:0b:cc:0e:0c:15:26:5f:1e:33:18:3e:85:35:ed:
4d:20:e8:86:e1:d8:07:a6:24:74:7c:ec:7b:c7:70:
2c:69:2c:50:a2:f9:74:65:3e:a3:de:22:e1:31:a1:
7e:13:e8:ec:f6:a4:65:04:80:6f:37:4f:2e:da:71:
42:40:92:39:89:dc:b0:b9:eb:a7:ad:e5:26:93:1d:
89:4b:fe:74:fb:b7:25:a0:61:40:04:00:d8:bb:ac:
98:61:1d:07:38:c9:45:ef:46:2f:d8:83:cf:c8:85:
15:29:70:17:32:de:f5:62:df:3f:c1:13:1f:81:d0:
21:5b:c5:ae:da:2b:a3:99:92:22:c3:9f:09:fe:fa:
3e:1c:17:65:20:29:5d:98:af:c8:98:6a:73:8b:d8:
57:45:4f:1d:91:12:bd:88:6a:d7:44:ed:77:61:18:
45:55:40:0a:9b:fd:fb:73:9a:c6:b1:99:68:a6:f4:
10:ce:ab:a6:a7:4b:96:91:4b:ba:bf:27:6e:23:32:
a0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EB:2C:5B:31:34:59:A4:53:85:CD:A7:7B:F1:94:7F:C0:36:1F:CB
X509v3 Authority Key Identifier:
keyid:00:E0:B4:EA:F9:C1:07:91:F3:53:BA:98:7D:E2:36:0A:13:84:17:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOC06vnBB5HzU7qYfeI2ChOEF70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/OussWzE0WaRThc2ne_GUf8A2H8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/210043-5afe-456f-b3f8-dc027432e5a5/1/AOC06vnBB5HzU7qYfeI2ChOEF70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.227.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:06:c8:64:aa:a3:d1:c8:10:a4:05:a3:41:c9:c5:05:c5:82:
16:ff:2e:14:34:95:75:1f:89:8b:66:56:f1:ce:dc:bc:67:31:
4a:2c:84:85:bd:1e:ab:e3:3e:ab:6c:8a:f1:27:b1:fd:aa:f8:
64:cb:fa:5e:d8:66:3d:73:95:76:8c:90:5a:e9:e0:65:9e:30:
55:47:cd:84:1c:6d:1e:9d:65:cc:0b:29:33:47:3a:4d:6b:36:
aa:86:ea:b2:a9:4b:92:1f:c2:63:89:91:c1:6a:9f:99:81:b3:
4c:a8:e6:2c:76:0d:51:7f:c1:52:51:32:19:64:76:09:20:4a:
b0:91:e7:b6:a9:3d:90:fc:d6:70:c9:3a:77:1c:5a:25:f8:dd:
9c:4e:7f:ef:a6:f8:13:61:5e:ea:b2:67:8b:07:37:70:4c:6c:
ac:3c:ce:77:8e:f5:b5:cd:02:84:c6:3b:46:63:ad:06:49:dc:
4f:ad:68:e4:b9:35:dd:a3:b0:53:13:13:72:d9:fb:3f:56:5a:
86:90:1d:84:2d:8f:1a:8f:ca:45:01:2f:4a:fa:d9:3a:77:ab:
a3:8a:73:ef:f8:82:0b:5f:47:8a:4c:bb:f1:b6:93:a0:18:e8:
59:b5:b7:e1:60:ad:44:82:1c:90:aa:7a:d6:97:c7:17:ee:3e:
ed:a5:9a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:05 2025 by rpki-client