Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/OubARyXsAhYR0krZD5Vq_MU-LSQ.roa
File: OubARyXsAhYR0krZD5Vq_MU-LSQ.roa (raw, json)
Hash identifier: YrV7TcMsyTIrI+GSRQdeUZ0E/QzzUgMcyz/EAQ7hzq4=
Subject key identifier: 3A:E6:C0:47:25:EC:02:16:11:D2:4A:D9:0F:95:6A:FC:C5:3E:2D:24
Certificate issuer: /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Certificate serial: 0D96A6E1
Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/OubARyXsAhYR0krZD5Vq_MU-LSQ.roa
Signing time: Sat 01 Jan 2022 08:53:29 +0000
ROA not before: Sat 01 Jan 2022 08:53:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29217
IP address blocks: 217.150.160.0/20 maxlen: 20
217.150.165.0/24 maxlen: 24
217.150.161.32/28 maxlen: 28
217.150.171.0/24 maxlen: 24
83.174.64.0/18 maxlen: 18
217.150.175.0/27 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227976929 (0xd96a6e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Validity
Not Before: Jan 1 08:53:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ae6c04725ec021611d24ad90f956afcc53e2d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4f:71:a0:4d:f5:9d:ae:23:e0:af:b4:2a:58:
46:a2:d9:54:df:20:ad:e5:82:bc:42:8e:b1:bb:15:
87:90:10:df:5e:8d:b3:28:a0:41:6d:85:a7:65:19:
ba:9d:7c:5d:11:e8:f3:2c:84:20:5a:74:9f:02:e0:
07:32:bd:ed:39:aa:3b:5e:54:df:df:63:b0:e8:81:
a5:58:92:74:20:c2:22:a3:ed:2f:a3:55:c3:c9:4b:
ef:e0:86:4b:fe:b0:db:28:7b:1f:7e:a2:03:e3:78:
28:11:c5:af:40:40:00:08:5a:aa:46:ad:1d:8e:46:
42:93:25:d6:90:b9:90:d5:ab:84:53:d6:c3:b2:6f:
1b:52:b5:b5:fc:6b:65:19:ac:5b:64:f7:68:59:b3:
39:4c:20:c9:7d:70:a3:39:ad:43:cd:7d:e7:d4:46:
3c:76:53:47:e4:6b:9b:c6:8c:e8:6d:f2:98:2c:ca:
5f:cb:6e:62:58:ec:b0:52:f7:75:19:11:4a:4a:d5:
3e:46:17:bd:73:a2:d5:9b:8d:1d:75:bd:c6:ae:20:
60:42:30:52:32:f2:b9:18:08:bd:a1:59:40:16:b2:
fa:3a:78:63:fa:e6:a3:bc:19:c8:48:98:6a:c0:56:
93:a9:aa:51:a6:89:04:dd:52:9c:4e:64:61:07:04:
66:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E6:C0:47:25:EC:02:16:11:D2:4A:D9:0F:95:6A:FC:C5:3E:2D:24
X509v3 Authority Key Identifier:
keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/OubARyXsAhYR0krZD5Vq_MU-LSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.174.64.0/18
217.150.160.0/20
Signature Algorithm: sha256WithRSAEncryption
8a:12:bb:7f:55:f6:56:a2:1a:2f:f5:59:27:01:3b:55:e3:66:
40:30:54:42:e8:ab:ef:f3:b0:bd:d0:a2:1a:da:6b:ae:cd:6a:
a5:bf:8a:ba:e3:63:e1:85:70:5f:c0:25:4c:c4:e3:29:ad:21:
8b:e1:9f:6b:6a:63:bd:f4:45:eb:29:d8:b1:10:6a:e4:2f:2f:
3b:55:1e:eb:e3:d4:53:fc:12:a9:c9:dc:32:2b:fa:56:0b:28:
84:92:30:79:7e:c5:61:d2:9c:71:d6:00:26:ce:c6:6b:d3:02:
53:d4:bd:fb:f5:c0:46:c8:37:06:b4:d1:09:22:25:ff:8b:a3:
c6:13:64:5e:6a:72:58:ec:56:45:a3:97:85:05:59:fd:f4:68:
97:94:08:5b:fd:0b:9f:35:9f:98:e2:05:6d:0f:86:6e:68:2f:
01:a7:99:a8:05:b6:2b:af:50:9a:24:56:7d:89:14:92:97:18:
7a:6c:08:da:2b:74:f4:2e:44:bd:f4:31:26:af:31:ab:bf:a3:
e1:64:bd:f5:81:c7:8c:49:b8:ba:69:1e:f4:77:80:f3:18:45:
81:a2:03:22:8d:e0:ab:65:b9:f3:87:3d:15:f6:ba:83:54:d2:
13:fa:43:ac:f8:8a:5f:67:a7:b4:6b:11:45:e1:b7:18:e3:50:
0a:21:52:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:00 2024 by rpki-client on console-fra.rpki-client.org