Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ObXlNmodn0BMz9WzHZflm3VKAM0.roa
File: ObXlNmodn0BMz9WzHZflm3VKAM0.roa (raw, json)
Hash identifier: Dr54MQzQ8D/NY5Ct94SplX7wYnvtHA/IKuLNbHWDf+k=
Subject key identifier: 39:B5:E5:36:6A:1D:9F:40:4C:CF:D5:B3:1D:97:E5:9B:75:4A:00:CD
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 12920E46
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ObXlNmodn0BMz9WzHZflm3VKAM0.roa
Signing time: Thu 12 May 2022 07:23:02 +0000
ROA not before: Thu 12 May 2022 07:23:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29484
IP address blocks: 185.73.23.0/24 maxlen: 24
185.73.22.0/25 maxlen: 25
185.73.20.0/23 maxlen: 23
185.73.20.0/22 maxlen: 22
134.147.0.0/16 maxlen: 16
2a05:3e06::/31 maxlen: 31
2a05:3e05::/32 maxlen: 32
2a05:3e00::/30 maxlen: 30
2a05:3e00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311561798 (0x12920e46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: May 12 07:23:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39b5e5366a1d9f404ccfd5b31d97e59b754a00cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:a1:3e:ad:35:28:3b:3e:5a:06:45:21:f0:
fb:8a:51:17:76:a9:d3:c4:94:1d:64:38:3b:3c:00:
a6:4f:92:6a:53:2c:46:f3:c5:fb:fa:1a:17:7f:2e:
b1:85:e0:30:17:ac:93:ac:39:28:de:a7:52:b9:7e:
30:28:64:0d:ab:16:c5:eb:f5:5b:e4:de:00:a3:3f:
98:cd:8e:2e:c2:74:38:fd:1c:ba:b0:d4:b0:d4:4b:
66:8a:7b:54:0f:b6:91:fa:5c:bc:78:f0:4a:24:4e:
df:80:9a:0c:5e:e7:c8:fb:11:cc:a7:00:34:e9:18:
83:ec:e9:86:3f:5c:03:a1:da:2a:d2:65:93:8e:35:
2d:fc:10:e2:32:6a:05:ca:51:b6:1f:37:aa:b6:07:
8d:7c:0e:f7:76:09:12:e7:38:2e:32:53:6f:56:1a:
98:2e:0b:36:f8:cf:66:5f:eb:13:4a:11:c8:ee:6a:
ee:a3:eb:88:5e:42:a0:44:3d:eb:d4:11:c2:f5:ee:
e2:3d:aa:6f:21:72:a2:5b:8d:9c:c0:89:d4:b1:b7:
d9:ac:41:9b:a2:9f:12:c4:01:e6:17:75:45:28:77:
f0:59:87:d7:5e:cf:74:1f:89:8d:14:e0:4f:1b:1b:
82:52:41:d7:20:e7:07:5b:11:e1:cc:c4:ad:e9:40:
76:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B5:E5:36:6A:1D:9F:40:4C:CF:D5:B3:1D:97:E5:9B:75:4A:00:CD
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ObXlNmodn0BMz9WzHZflm3VKAM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.147.0.0/16
185.73.20.0/22
IPv6:
2a05:3e00::/29
Signature Algorithm: sha256WithRSAEncryption
5d:4a:60:e7:a1:80:91:de:f6:16:8e:e0:a9:6f:e7:38:39:e3:
8d:40:16:4c:38:9e:62:ff:e2:f4:61:4b:70:5c:83:86:5d:95:
2d:95:5b:04:66:a1:99:91:7a:44:5e:39:4a:b6:f9:41:7a:8d:
6f:4d:7b:44:47:f7:ed:6c:79:a9:43:b7:5c:17:dc:11:d8:b2:
68:b3:8b:7a:eb:19:d9:47:fc:e8:24:02:d6:d6:d5:c1:fd:c7:
8b:d3:5d:fc:36:c4:c8:00:93:c5:11:a6:3f:c8:1f:78:0f:b4:
b9:f3:2a:d3:ec:a4:e9:c3:e8:45:0c:80:72:4d:56:4c:c9:85:
dd:b2:06:95:68:57:f5:99:c5:58:79:6a:29:ab:ff:09:cd:b7:
c0:e3:d1:6e:66:21:4f:d9:cd:67:72:90:76:b2:65:2d:d9:61:
d5:58:96:6d:28:83:1e:9b:6a:d6:22:a8:59:3f:99:1c:ea:17:
9e:d4:43:15:68:68:33:02:18:41:62:35:9b:6a:fa:4b:e6:ac:
cb:1c:7b:96:02:fa:bf:04:08:84:f3:12:c6:71:af:dd:e5:b0:
c5:54:9b:f4:5d:a8:d7:fd:45:54:72:3f:43:04:f7:b0:73:b9:
2b:51:6c:ca:54:55:8a:ea:3c:e2:58:21:72:17:b1:0e:f9:17:
03:62:8a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:08:38 2025 by rpki-client