Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/0yIao8Bk3X_8_onJEpDpSLnq_OM.roa
File: 0yIao8Bk3X_8_onJEpDpSLnq_OM.roa (raw, json)
Hash identifier: FdscyXxdSkxnvCSvBzzxK9dPVnIGrN8ep02q2RJ2h6s=
Subject key identifier: D3:22:1A:A3:C0:64:DD:7F:FC:FE:89:C9:12:90:E9:48:B9:EA:FC:E3
Certificate issuer: /CN=c2fca944458606b1017e26c3ca17430f7ff924b3
Certificate serial: 4CB50AC5
Authority key identifier: C2:FC:A9:44:45:86:06:B1:01:7E:26:C3:CA:17:43:0F:7F:F9:24:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/0yIao8Bk3X_8_onJEpDpSLnq_OM.roa
Signing time: Fri 22 Apr 2022 05:41:33 +0000
ROA not before: Fri 22 Apr 2022 05:41:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2107
IP address blocks: 178.172.0.0/17 maxlen: 17
163.159.128.0/17 maxlen: 17
193.2.0.0/16 maxlen: 16
92.244.64.0/19 maxlen: 19
95.87.128.0/18 maxlen: 18
149.62.64.0/18 maxlen: 18
153.5.0.0/16 maxlen: 16
88.200.0.0/17 maxlen: 17
212.235.128.0/17 maxlen: 17
185.13.52.0/22 maxlen: 22
141.255.192.0/18 maxlen: 18
109.127.192.0/18 maxlen: 18
194.249.0.0/16 maxlen: 16
2001:1470::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1286933189 (0x4cb50ac5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fca944458606b1017e26c3ca17430f7ff924b3
Validity
Not Before: Apr 22 05:41:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3221aa3c064dd7ffcfe89c91290e948b9eafce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:53:73:09:ef:ca:df:72:18:7e:dc:4f:25:
29:79:82:0d:fa:25:95:7c:9c:59:08:a6:ae:47:d6:
c5:e4:3b:4a:2b:66:96:e9:0d:89:27:40:5a:42:49:
5d:11:0e:18:bf:62:fc:5e:f2:33:fe:17:72:fb:8c:
58:92:39:43:b4:1a:58:bf:de:b9:55:46:7d:6f:a9:
fa:27:f8:9a:f8:0b:00:7b:c1:e7:2f:5c:3c:d7:dd:
82:2d:66:86:36:a6:1c:00:84:4e:79:a1:c7:0d:32:
c4:fc:4c:4a:da:9a:13:fd:ec:43:70:86:58:e1:8d:
7d:17:a6:bc:a8:b7:e3:55:e5:46:fc:b7:47:b2:a8:
7b:5b:07:79:2c:bd:1b:12:b2:db:3c:0e:93:bd:6c:
b1:78:be:ec:ef:1c:f1:6f:92:9e:0d:05:13:ac:ee:
93:72:b6:a9:95:c3:bb:31:33:4a:76:2b:d8:80:c3:
e1:02:ad:2f:f8:b1:13:a3:af:58:fb:2d:5c:f2:d3:
61:f0:7b:a0:0b:88:66:02:34:1b:09:6d:7e:6c:91:
85:8c:6b:e9:1f:d7:4e:af:e1:6a:78:b2:5c:5a:a1:
83:0b:5f:8d:f6:84:ce:47:a7:f2:90:91:0f:8e:4a:
40:90:f2:d7:a2:e2:67:cb:02:17:68:d1:ef:3d:7b:
c8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:22:1A:A3:C0:64:DD:7F:FC:FE:89:C9:12:90:E9:48:B9:EA:FC:E3
X509v3 Authority Key Identifier:
keyid:C2:FC:A9:44:45:86:06:B1:01:7E:26:C3:CA:17:43:0F:7F:F9:24:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/0yIao8Bk3X_8_onJEpDpSLnq_OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.200.0.0/17
92.244.64.0/19
95.87.128.0/18
109.127.192.0/18
141.255.192.0/18
149.62.64.0/18
153.5.0.0/16
163.159.128.0/17
178.172.0.0/17
185.13.52.0/22
193.2.0.0/16
194.249.0.0/16
212.235.128.0/17
IPv6:
2001:1470::/29
Signature Algorithm: sha256WithRSAEncryption
8f:ea:0c:6d:69:e2:ef:ca:b9:04:a3:a8:86:5a:bf:02:da:1b:
4d:42:3c:82:a9:06:e7:4c:c8:cb:c8:45:09:53:e1:72:d5:bd:
39:19:15:61:99:b0:6e:bb:a8:18:dd:67:76:1c:3e:b2:84:75:
3c:54:94:df:23:1f:80:e5:ba:f4:80:c8:91:7d:ec:66:0a:f0:
7c:fe:16:4d:ae:24:16:99:f2:f1:18:be:71:d9:2e:4d:2e:e5:
8f:7e:79:6e:c0:39:b4:87:d1:08:8d:38:91:1f:53:41:d4:da:
8e:ae:8d:ab:e6:6b:58:30:b2:e1:2e:11:1c:ac:9d:32:98:24:
f7:ae:be:fd:e1:dd:3f:a5:ca:13:8b:e2:90:d9:34:13:9d:59:
84:cd:33:50:cb:93:2c:e7:23:1f:59:53:da:f6:8a:5f:fd:e2:
94:4b:6d:42:4a:e2:29:ed:5b:7f:47:9f:8c:45:81:ce:6c:81:
62:e2:f3:bf:29:f2:93:27:d8:6b:08:33:5f:c7:42:d3:8d:1a:
36:e7:73:1d:6d:48:06:3b:c2:a8:10:3b:86:b0:4f:e4:5b:d5:
c5:dd:24:91:67:13:44:f9:4d:28:db:f0:a6:da:d6:51:b1:e8:
70:fe:09:fc:69:76:7d:21:47:28:fd:b1:69:a3:94:6c:21:68:
63:6e:f0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:38:50 2025 by rpki-client