Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Osp7ddNkjZCyRZbcpI1NAir_U54.roa
File: Osp7ddNkjZCyRZbcpI1NAir_U54.roa (raw, json)
Hash identifier: Rc1LT56ufyLT82fYOm7hZoSyazRI8NrwexRDWk7sFDQ=
Subject key identifier: 3A:CA:7B:75:D3:64:8D:90:B2:45:96:DC:A4:8D:4D:02:2A:FF:53:9E
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 37F07175
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Osp7ddNkjZCyRZbcpI1NAir_U54.roa
Signing time: Sat 01 Jan 2022 06:01:02 +0000
ROA not before: Sat 01 Jan 2022 06:01:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202131
IP address blocks: 185.52.172.0/23 maxlen: 32
2a04:c740::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938504565 (0x37f07175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Jan 1 06:01:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3aca7b75d3648d90b24596dca48d4d022aff539e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:09:f2:88:d5:27:4c:09:c1:c4:1f:16:15:
03:87:78:42:88:f0:7f:2f:54:a0:9b:bb:ba:ca:ed:
a4:94:77:6a:85:47:dc:54:a4:71:75:5d:91:da:de:
02:ce:8f:f9:1e:45:5c:3d:57:20:6b:75:0c:0a:f6:
b5:b5:65:c6:ee:ee:88:2a:a9:82:c2:62:ce:fb:89:
28:da:a8:3a:20:31:91:16:6b:37:35:7a:b5:4d:bc:
a9:bb:81:c2:15:17:63:87:b4:e1:61:95:82:c4:56:
be:29:e2:d1:41:c8:08:ea:e3:4f:88:38:0b:db:99:
36:0d:34:a7:19:b3:aa:13:14:85:c2:2d:16:f1:dc:
de:e7:5f:c2:b7:c5:ed:e4:e1:4a:b0:83:57:df:52:
85:85:b1:8c:54:26:2b:29:9f:ea:af:fa:ac:e9:c7:
d6:78:f3:b4:8f:17:d3:f0:e6:84:46:80:97:19:7a:
4c:9f:55:b7:43:22:98:02:aa:8f:9e:62:69:2f:ec:
96:e4:70:5b:dc:16:8d:e8:e5:b9:33:e5:87:9b:60:
69:29:c0:e7:c7:ca:7c:24:bd:41:b5:a0:f6:11:7a:
23:aa:f4:4c:4c:a3:ff:9e:58:3f:a0:9d:8a:e9:a0:
72:53:c3:93:03:fd:03:ad:57:e9:1e:fb:79:72:43:
da:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CA:7B:75:D3:64:8D:90:B2:45:96:DC:A4:8D:4D:02:2A:FF:53:9E
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Osp7ddNkjZCyRZbcpI1NAir_U54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.172.0/23
IPv6:
2a04:c740::/29
Signature Algorithm: sha256WithRSAEncryption
9d:42:37:18:2b:7b:5e:d9:dc:c2:9c:e7:7b:8c:ea:b1:11:56:
96:ce:f5:a6:1f:ea:52:17:1b:c3:38:d1:d3:70:06:83:7c:ba:
92:bb:b6:78:3f:21:ff:4a:ff:dc:f9:8a:f4:be:28:76:77:6a:
f3:c2:e0:ad:2f:78:8f:9c:58:a6:48:3d:91:7d:56:c6:3f:23:
4b:e3:33:da:7b:9a:03:4b:0f:00:31:da:2e:e9:e9:a8:e2:cf:
7b:df:6f:49:f0:9f:5b:70:b1:f3:50:26:9a:c2:2c:3f:e9:00:
c9:08:d5:a2:db:da:0a:b0:6e:df:9e:50:8c:f1:9a:48:bb:8a:
56:8c:a0:5c:ff:77:38:4a:95:98:d9:c9:27:4c:38:82:34:c4:
62:98:2b:34:8b:a5:f7:23:f5:38:fe:ea:a1:0d:7d:0a:fc:43:
fd:aa:15:1b:b0:8d:69:1e:a0:e6:b5:08:cc:ad:c6:d5:e0:43:
b1:f4:0a:2e:8e:82:e8:52:70:c1:f5:b2:e0:57:68:aa:02:04:
fc:43:cc:33:9b:07:79:1e:dc:92:1a:06:ac:4e:c8:66:75:23:
bc:e8:83:76:8c:96:cb:7b:12:1a:fc:52:fd:ab:f1:3f:f1:68:
f1:3c:53:e2:7a:a2:90:9c:33:a5:7e:37:4c:eb:9e:2a:7a:45:
d4:97:2d:c5
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEN/BxdTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NTlmMGY1ZmY2MjBlMGRiNTMxMWY2NDczNjkwOTk3M2FjNjBmNmYzMB4XDTIyMDEw
MTA2MDEwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2FjYTdiNzVkMzY0
OGQ5MGIyNDU5NmRjYTQ4ZDRkMDIyYWZmNTM5ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKMwCfKI1SdMCcHEHxYVA4d4Qojwfy9UoJu7usrtpJR3aoVH
3FSkcXVdkdreAs6P+R5FXD1XIGt1DAr2tbVlxu7uiCqpgsJizvuJKNqoOiAxkRZr
NzV6tU28qbuBwhUXY4e04WGVgsRWvini0UHICOrjT4g4C9uZNg00pxmzqhMUhcIt
FvHc3udfwrfF7eThSrCDV99ShYWxjFQmKymf6q/6rOnH1njztI8X0/DmhEaAlxl6
TJ9Vt0MimAKqj55iaS/sluRwW9wWjejluTPlh5tgaSnA58fKfCS9QbWg9hF6I6r0
TEyj/55YP6CdiumgclPDkwP9A61X6R77eXJD2j8CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQ6ynt102SNkLJFltykjU0CKv9TnjAfBgNVHSMEGDAWgBQ1nw9f9iDg21MR
9kc2kJlzrGD28zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05aOFBYX1lnNE50VEVmWkhOcENaYzZ4Zzl2TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWEvNDBkOWE1LTI1NjYtNDllMS1hNTdiLWQxYWJmNGVlMzJjYi8x
L09zcDdkZE5ralpDeVJaYmNwSTFOQWlyX1U1NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEv
NDBkOWE1LTI1NjYtNDllMS1hNTdiLWQxYWJmNGVlMzJjYi8xL05aOFBYX1lnNE50
VEVmWkhOcENaYzZ4Zzl2TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAbk0rDANBAIAAjAHAwUDKgTHQDAN
BgkqhkiG9w0BAQsFAAOCAQEAnUI3GCt7Xtncwpzne4zqsRFWls71ph/qUhcbwzjR
03AGg3y6kru2eD8h/0r/3PmK9L4odndq88LgrS94j5xYpkg9kX1Wxj8jS+Mz2nua
A0sPADHaLunpqOLPe99vSfCfW3Cx81AmmsIsP+kAyQjVotvaCrBu355QjPGaSLuK
VoygXP93OEqVmNnJJ0w4gjTEYpgrNIul9yP1OP7qoQ19CvxD/aoVG7CNaR6g5rUI
zK3G1eBDsfQKLo6C6FJwwfWy4FdoqgIE/EPMM5sHeR7ckhoGrE7IZnUjvOiDdoyW
y3sSGvxS/avxP/Fo8TxT4nqikJwzpX43TOueKnpF1JctxQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:47:05 2025 by rpki-client