Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/OolQJjYzWzLd7S98p2iyqUrWTkU.roa
File: OolQJjYzWzLd7S98p2iyqUrWTkU.roa (raw, json)
Hash identifier: KE8VHKo3Yuj+bXRuAhyovR9p1sImmcAHElK6hpyCWSQ=
Subject key identifier: 3A:89:50:26:36:33:5B:32:DD:ED:2F:7C:A7:68:B2:A9:4A:D6:4E:45
Certificate issuer: /CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Certificate serial: 01856D0175DA93E418142980A56E8CF1DD1A
Authority key identifier: 24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/OolQJjYzWzLd7S98p2iyqUrWTkU.roa
Signing time: Sun 01 Jan 2023 11:04:50 +0000
ROA not before: Sun 01 Jan 2023 11:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1850
IP address blocks: 195.130.211.0/24 maxlen: 24
193.4.58.0/23 maxlen: 23
185.93.156.0/22 maxlen: 22
2001:67c:6c::/48 maxlen: 48
2001:7f8:48::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:75:da:93:e4:18:14:29:80:a5:6e:8c:f1:dd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Validity
Not Before: Jan 1 11:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a89502636335b32dded2f7ca768b2a94ad64e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:28:d4:09:d7:89:4d:78:66:02:25:36:d0:
16:02:74:2f:c6:b3:ef:03:4b:4c:09:8e:49:0a:bc:
71:ee:ee:bb:89:d4:91:9c:81:2b:1f:d7:c8:44:64:
68:2f:2f:c2:1d:39:94:c5:14:74:6c:1e:1f:f7:15:
e3:d3:c8:a4:a7:ed:1b:bb:b2:15:5e:ad:44:bd:57:
3e:98:20:ed:7c:bc:18:bb:da:d8:d1:9b:35:25:4a:
85:6e:61:2f:4a:be:29:52:29:20:47:23:5e:7b:6d:
a7:eb:a9:df:85:60:40:2b:80:9a:f3:36:c6:0e:83:
51:2c:59:a6:b8:bd:46:20:2f:6b:5d:ca:f3:ce:5a:
4d:06:a0:a4:42:6d:9a:81:00:5b:53:e8:8e:ce:f2:
ae:0e:47:9b:88:de:2c:1c:28:26:0f:a0:42:d5:97:
77:37:7a:85:9a:0f:5c:d9:c2:17:30:39:69:8b:e1:
ae:45:44:23:58:ea:f5:40:28:b6:25:de:57:13:81:
70:7c:fb:3d:e0:eb:cf:89:97:51:fb:34:84:a5:b7:
66:27:f0:be:cb:b1:d4:2d:03:bb:f4:12:75:0c:c5:
64:9f:99:4d:74:45:fb:b1:e0:5f:a3:e5:fe:8d:8e:
c2:bc:91:31:92:51:1e:8c:ea:17:72:d4:a4:07:11:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:89:50:26:36:33:5B:32:DD:ED:2F:7C:A7:68:B2:A9:4A:D6:4E:45
X509v3 Authority Key Identifier:
keyid:24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/OolQJjYzWzLd7S98p2iyqUrWTkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.156.0/22
193.4.58.0/23
195.130.211.0/24
IPv6:
2001:67c:6c::/48
2001:7f8:48::/48
Signature Algorithm: sha256WithRSAEncryption
46:97:0b:25:05:76:c6:7a:69:a2:11:3c:aa:06:d2:f1:06:f3:
f9:52:f9:a5:0f:47:f0:70:40:86:2a:63:96:b3:31:7e:7b:13:
b7:7d:d4:e6:b2:b2:72:61:6b:2b:0e:6a:60:a1:29:ea:72:15:
1b:06:73:2c:8a:94:dc:60:33:ac:b4:1f:90:b5:10:8e:14:a7:
11:72:23:be:f7:28:f5:e8:f0:9a:93:78:74:2d:67:84:47:66:
4b:94:ba:23:da:ee:11:ce:f4:3b:ac:cd:fb:44:4d:43:16:e6:
13:d5:b4:59:49:c9:0a:3f:c4:d2:3d:12:c0:04:e1:3c:c1:e7:
da:a4:db:54:15:37:c4:98:fc:ab:66:9d:d7:c1:0f:28:fb:4a:
d3:cf:d7:1a:b6:92:54:70:e4:ef:79:a2:1b:21:33:eb:47:49:
54:e8:58:ff:cc:e0:81:7c:e3:27:82:70:b0:e2:9b:22:cb:6f:
36:cc:41:cf:b4:fd:f1:27:4e:3e:77:ef:dc:f1:73:ee:58:b4:
73:ed:dd:35:23:af:f0:5f:7c:bb:6c:d3:cb:28:51:a9:cf:14:
ab:76:40:be:27:78:b2:5a:0d:fd:eb:da:48:dc:88:04:3d:eb:
38:c4:94:26:05:95:92:5f:c3:12:4e:b8:46:c1:f6:6f:32:58:
16:03:1a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:21 2025 by rpki-client