Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/oW6kXXm0CKsjxv67meJlsDLmhvA.roa
File: oW6kXXm0CKsjxv67meJlsDLmhvA.roa (raw, json)
Hash identifier: 7yPn+ln/ki0zw3Cr4rP64RzZsTCcp5tvgl1a6EFSe48=
Subject key identifier: A1:6E:A4:5D:79:B4:08:AB:23:C6:FE:BB:99:E2:65:B0:32:E6:86:F0
Certificate issuer: /CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Certificate serial: 0133F335
Authority key identifier: 7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/oW6kXXm0CKsjxv67meJlsDLmhvA.roa
Signing time: Tue 01 Feb 2022 21:11:45 +0000
ROA not before: Tue 01 Feb 2022 21:11:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24843
IP address blocks: 193.57.130.0/24 maxlen: 24
193.57.131.0/24 maxlen: 24
193.57.129.0/24 maxlen: 24
193.57.128.0/24 maxlen: 24
185.108.35.0/24 maxlen: 24
2a02:c804::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20181813 (0x133f335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Validity
Not Before: Feb 1 21:11:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a16ea45d79b408ab23c6febb99e265b032e686f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:af:bd:98:66:af:ff:a2:da:c8:ef:41:60:
1e:90:4a:32:2e:f0:96:e1:63:83:e3:44:ae:eb:6e:
ac:98:30:aa:be:4f:b6:ea:64:e4:6c:ec:f7:5b:a7:
bb:05:53:b9:f1:26:5a:4f:2e:02:00:cf:f8:f4:82:
13:ca:5b:5f:d3:c7:f2:de:82:6a:e5:c4:17:02:62:
f6:fb:6d:12:22:46:89:c4:b6:fb:d4:e7:37:2a:c1:
26:93:0a:53:96:f9:5b:dc:5c:0f:52:7d:7c:09:12:
7f:a3:64:65:f2:12:6c:77:c4:18:ac:2a:8f:8d:ce:
fd:bc:0b:39:a1:76:d1:ae:07:ce:05:65:24:55:bb:
35:93:2f:1f:27:f0:77:c0:ce:d9:30:1e:52:66:53:
cb:aa:34:11:58:52:a1:8f:a7:46:98:10:6b:44:a5:
ff:75:94:23:f9:9e:1b:ae:15:9c:85:21:1d:90:d4:
a4:82:4e:2c:aa:9f:bc:39:ee:d8:1e:dd:63:72:75:
05:c1:26:fd:4d:7f:62:e5:eb:75:d3:e8:76:94:80:
85:18:aa:b3:df:5f:56:ad:19:79:d1:e6:1b:07:d8:
53:aa:cf:93:3b:d7:15:a0:5b:f7:86:34:70:fb:cf:
62:a0:09:ac:25:67:12:e7:60:b4:0a:f9:b3:fa:77:
11:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6E:A4:5D:79:B4:08:AB:23:C6:FE:BB:99:E2:65:B0:32:E6:86:F0
X509v3 Authority Key Identifier:
keyid:7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/oW6kXXm0CKsjxv67meJlsDLmhvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.35.0/24
193.57.128.0/22
IPv6:
2a02:c804::/32
Signature Algorithm: sha256WithRSAEncryption
12:53:8c:87:e1:55:43:d7:0e:9e:bb:7c:eb:8c:ed:3e:d0:69:
9d:47:f6:99:00:a1:62:67:03:97:9f:b9:2a:71:f6:e9:b6:c2:
6c:bf:7a:a1:34:e7:0b:ea:8a:91:bd:95:5c:8b:ca:0a:19:a2:
40:96:9b:09:bc:f6:1f:78:d9:48:66:60:be:31:e9:60:90:22:
8f:32:7d:31:8b:d7:df:d2:99:c1:c2:49:7b:99:bb:62:06:47:
75:b1:97:74:89:ae:1d:c6:1d:91:c4:c7:90:0b:6d:e2:9b:46:
0f:62:34:39:a6:98:4a:68:36:58:05:c5:1f:ee:29:87:17:4a:
04:cb:22:62:28:24:f0:34:e2:2e:b3:55:b8:3a:b7:dd:b9:58:
3e:5d:0c:a1:d8:9e:4a:3b:84:cc:d4:62:08:b9:8f:f3:42:ed:
29:e1:70:cd:7a:ce:25:50:07:1c:32:ba:70:58:ad:b1:76:8e:
32:49:5a:94:db:54:61:b0:0c:6c:1b:6d:40:88:71:99:ca:92:
c7:5d:5e:2f:38:54:98:9a:42:19:a0:de:33:dc:7f:35:c6:e6:
f7:44:50:4a:a8:df:16:9e:a7:2f:57:e1:57:2d:03:8a:c4:cf:
72:6b:1c:8a:5e:0c:7e:d4:d5:54:13:f9:4e:b3:fb:f3:76:60:
ea:97:ae:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:20:56 2025 by rpki-client