Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/oomNSOomjy91KFaqxUcY2GdfFao.roa
File: oomNSOomjy91KFaqxUcY2GdfFao.roa (raw, json)
Hash identifier: BCdy2i6elXZPA9AUUXHaF98Ks9GVNQFWE/v2nARhmwQ=
Subject key identifier: A2:89:8D:48:EA:26:8F:2F:75:28:56:AA:C5:47:18:D8:67:5F:15:AA
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 04BA0D4D
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/oomNSOomjy91KFaqxUcY2GdfFao.roa
Signing time: Sat 01 Jan 2022 05:56:07 +0000
ROA not before: Sat 01 Jan 2022 05:56:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209088
IP address blocks: 5.181.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79301965 (0x4ba0d4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Jan 1 05:56:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2898d48ea268f2f752856aac54718d8675f15aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2a:29:a7:c8:42:00:ef:e1:8e:76:e6:5f:fc:
37:4d:00:d5:1b:7d:fb:7c:a2:e3:c9:a2:10:3f:6b:
f5:88:9e:ae:3d:9f:8a:99:0e:30:07:64:8a:4c:b8:
21:ae:6c:4f:ce:2a:66:bb:82:a8:3a:9c:e4:47:a2:
b9:c5:ae:d3:5f:cb:ed:c3:8a:11:6a:66:05:1c:c1:
b9:1b:ae:89:e1:3b:d0:90:15:a5:07:df:85:83:35:
51:6c:fc:7d:33:25:e6:33:fb:9b:f3:2a:65:cd:35:
bd:ce:6d:4a:81:9a:9f:32:02:07:d0:9e:a7:31:69:
f0:aa:8a:b9:89:25:8c:a7:ea:8e:37:fd:4a:ab:48:
30:3a:7d:a8:a0:49:00:a3:3c:fa:cd:63:58:02:3b:
bc:0f:13:6b:f1:4a:be:cb:76:3f:dc:67:21:87:fd:
e5:8f:6f:5b:61:3b:b9:6a:e3:d3:e2:8c:0b:2d:e7:
0e:37:ac:83:00:27:2e:73:a8:63:61:37:73:bb:36:
7c:97:02:25:6f:8a:22:31:6e:f0:16:c9:ca:86:ae:
a0:6f:78:dd:db:1a:b1:61:e8:fb:6d:00:d0:1b:1a:
2e:03:43:07:58:0f:df:cc:b5:fd:be:c7:3b:12:76:
61:c1:9d:a0:1c:de:a2:9f:d2:79:8e:82:5c:50:b3:
e1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:89:8D:48:EA:26:8F:2F:75:28:56:AA:C5:47:18:D8:67:5F:15:AA
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/oomNSOomjy91KFaqxUcY2GdfFao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.212.0/22
Signature Algorithm: sha256WithRSAEncryption
76:90:09:ee:a6:c2:63:69:ea:3a:f5:bf:3d:86:9c:f7:26:98:
f3:e8:0c:84:02:b8:c6:5d:a1:10:1a:cf:49:a4:c7:53:a4:95:
13:57:3f:0c:90:72:17:8c:83:93:98:62:64:14:f3:fc:fc:24:
29:67:f4:05:eb:1c:d8:26:2f:8b:40:14:9c:dd:c8:31:ac:b1:
b5:b5:57:c7:1c:31:42:37:5e:03:63:7a:c4:09:0f:c0:a4:98:
b9:bc:ba:62:2d:90:d1:c7:94:ca:f0:f6:5b:06:c4:a9:22:4b:
27:e7:d5:57:f0:fe:01:42:6f:05:42:1f:a7:0f:ac:21:24:a4:
03:4d:58:71:ef:ae:ef:4b:a0:19:87:4f:1a:7f:8d:86:9f:a5:
b9:53:0c:36:7f:16:86:af:6f:16:24:c3:a3:bd:47:6c:e7:7a:
41:89:a7:9d:6a:01:06:7b:1d:2d:69:08:9e:0b:5b:ab:84:9c:
3a:51:94:8a:09:77:fc:62:d0:db:0a:ac:29:1e:0b:3a:8c:14:
c0:fa:e5:a4:e2:24:9b:7f:da:56:67:45:ff:2e:8e:3d:0b:0f:
3e:07:6b:6a:96:74:93:3c:ad:d7:4f:4d:8c:07:a4:95:e2:a5:
29:8b:89:ca:12:40:b2:5b:c1:fd:17:0d:b1:f5:69:83:50:13:
70:f3:1f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:03 2025 by rpki-client