Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/OWLhBfWupWt7JQxFV3O77WLukAA.roa
File: OWLhBfWupWt7JQxFV3O77WLukAA.roa (raw, json)
Hash identifier: ZWSjj9l4CX3y1xDzKbG3HuqoiMsRepL0Mw6qFiZZrRY=
Subject key identifier: 39:62:E1:05:F5:AE:A5:6B:7B:25:0C:45:57:73:BB:ED:62:EE:90:00
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 01856F4B529068D71368BF6077736DD9D3E1
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/OWLhBfWupWt7JQxFV3O77WLukAA.roa
Signing time: Sun 01 Jan 2023 21:44:45 +0000
ROA not before: Sun 01 Jan 2023 21:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 185.110.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:52:90:68:d7:13:68:bf:60:77:73:6d:d9:d3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Jan 1 21:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3962e105f5aea56b7b250c455773bbed62ee9000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:64:d0:41:7a:dd:5f:c7:e0:04:c1:a4:f8:44:
64:bd:76:ab:03:9b:45:07:ee:a4:e9:66:ce:81:ab:
2a:c4:64:53:db:66:66:21:e6:d1:86:32:ba:19:7e:
78:7d:f8:e3:d1:6d:c9:dc:22:6f:5b:5d:5b:cb:c3:
39:04:86:8a:d2:8f:72:37:54:04:3b:25:b2:fd:79:
04:83:c0:27:6f:79:5a:94:b2:80:ed:00:ab:92:73:
1d:fc:80:2b:b2:0a:b7:ea:8a:a0:b6:a3:53:dd:90:
45:42:03:d9:70:9a:00:77:4e:48:2c:17:56:b9:0c:
5c:55:65:38:c3:c5:da:3f:54:e9:a0:b3:d9:a0:ce:
d3:50:70:6c:2c:6d:2d:07:01:0e:2f:00:d2:e7:1c:
95:9c:14:a3:d4:d0:7e:64:4e:9d:a4:e1:7d:0b:34:
3a:34:04:12:50:49:5f:58:e1:bc:df:c0:a3:b2:ce:
67:c7:fb:93:59:7b:6d:b7:e3:40:87:a8:99:39:4e:
80:9e:ee:65:83:0e:45:a4:31:52:12:1c:70:11:a5:
46:e8:0d:06:43:f1:a7:3c:43:11:de:7e:9e:0d:67:
90:5a:5c:41:f4:0f:c3:fc:4a:c2:91:a1:5a:75:2a:
cc:f4:23:1e:5a:72:83:bf:9f:7d:6b:2a:c1:cd:2d:
89:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:62:E1:05:F5:AE:A5:6B:7B:25:0C:45:57:73:BB:ED:62:EE:90:00
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/OWLhBfWupWt7JQxFV3O77WLukAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.196.0/22
Signature Algorithm: sha256WithRSAEncryption
77:91:1e:04:cd:20:12:17:a8:1d:6b:dc:19:f1:02:0a:7c:f3:
5b:10:89:88:1b:2f:a1:7d:04:35:52:b9:04:e2:e1:99:16:ed:
60:f1:f3:0e:d4:11:63:71:08:6a:8e:36:04:30:ba:7c:a1:4a:
e3:8d:9d:f6:fb:e8:00:5e:70:95:25:f9:62:e9:2c:8e:66:0c:
12:f3:65:bb:ec:c3:97:a1:a0:ac:a9:78:e6:1e:a9:0a:c8:65:
b6:61:39:05:71:a1:90:ab:25:6a:23:c5:a1:a1:b1:f9:25:18:
12:f2:28:2a:68:13:66:49:3a:60:63:97:ca:c5:e6:20:26:e0:
0f:f8:ee:5d:6b:d3:fd:e8:3e:e1:94:15:b6:2e:e5:b4:7d:c1:
05:b0:e4:a0:a5:d2:c5:a5:4b:a3:c3:95:a2:e9:c6:1d:77:7a:
88:1c:04:74:be:31:9e:a4:b0:7d:cd:84:ad:35:77:50:dd:b9:
08:2a:b3:51:66:f7:b4:ce:c8:c6:13:d6:7d:f2:e8:27:17:8c:
4a:63:e5:c0:af:b6:a0:8e:20:e4:28:2c:76:6f:5a:17:5c:3b:
cc:4b:b6:e7:90:28:22:7e:3c:4d:cd:1c:26:c5:26:ad:0e:e8:
ea:5b:3d:76:91:cd:31:3d:78:1d:32:02:5e:43:10:46:13:ce:
4a:22:f4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:04:24 2025 by rpki-client