Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/OfW_22-CPFIAQyboPPAWkLkoGI4.roa
File: OfW_22-CPFIAQyboPPAWkLkoGI4.roa (raw, json)
Hash identifier: 6npWbsFBgLm2bSiAWuOF35w0/9tZ6V+ovmQ1+QXTMFI=
Subject key identifier: 39:F5:BF:DB:6F:82:3C:52:00:43:26:E8:3C:F0:16:90:B9:28:18:8E
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0188DE2FD70CC456E26C7FB12297C3F16FD1
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/OfW_22-CPFIAQyboPPAWkLkoGI4.roa
Signing time: Wed 21 Jun 2023 13:40:57 +0000
ROA not before: Wed 21 Jun 2023 13:40:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 46.162.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:de:2f:d7:0c:c4:56:e2:6c:7f:b1:22:97:c3:f1:6f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jun 21 13:40:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39f5bfdb6f823c52004326e83cf01690b928188e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:80:25:2a:cb:37:cc:77:14:62:e9:8e:ed:b8:
f5:2b:66:19:30:ad:70:06:38:40:7c:20:6d:ca:09:
3e:02:2a:6c:30:a9:38:70:e4:12:ec:86:03:8a:e2:
c6:ab:8e:68:61:1f:78:f3:6a:cc:95:59:ed:c6:f1:
ac:e1:7d:36:e3:97:ee:c8:20:df:02:1a:1a:01:7a:
42:49:73:cc:8e:5c:a9:91:5c:38:11:da:fd:57:2e:
70:b0:3b:c2:9e:7e:13:16:2a:b1:f1:41:e5:b9:29:
44:7f:64:ee:a8:29:74:bb:89:e4:0c:38:e1:a4:e7:
36:60:54:96:3c:bf:29:f6:9a:41:0f:da:d2:3a:cf:
7a:5c:10:d6:c3:41:16:d7:0d:e7:aa:8f:87:91:b6:
43:77:64:8b:7c:ba:28:9a:82:a0:a9:95:92:7f:3e:
c4:a3:1f:1e:8a:e0:60:85:a7:fc:5d:9a:da:ad:b4:
57:56:47:9a:b0:62:97:c8:cc:e3:3c:ef:94:83:af:
aa:4b:ff:11:99:5a:6a:15:06:55:da:71:e3:4c:b3:
96:07:d7:0c:4e:14:ae:78:e5:89:a4:4e:8d:df:bf:
0c:e8:82:5d:71:72:f8:a0:f7:00:aa:d7:81:7e:39:
00:2b:ff:7d:4e:1b:07:2c:1e:12:a1:6e:75:20:39:
e0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F5:BF:DB:6F:82:3C:52:00:43:26:E8:3C:F0:16:90:B9:28:18:8E
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/OfW_22-CPFIAQyboPPAWkLkoGI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.22.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:90:c2:73:18:38:98:14:0d:ed:c8:bb:35:db:8b:21:ed:17:
df:ac:18:02:fc:c1:92:05:6c:2f:8b:29:61:19:6e:3e:a5:35:
cf:55:e8:04:c2:21:d9:22:16:e3:ba:7b:bd:f5:ef:cd:12:62:
c6:d6:81:7a:5b:a7:57:7f:cd:39:d3:8d:40:fd:d1:2a:6a:a9:
08:eb:eb:27:60:97:58:e4:98:97:6c:9f:97:b1:27:c9:b7:6e:
cc:69:94:91:5e:c5:16:31:80:85:60:de:68:6d:40:b9:7e:49:
5d:d9:d0:0d:50:5d:25:bd:37:c4:7c:e3:3a:07:ef:ab:62:e9:
a4:39:72:78:89:41:cb:e5:17:e0:e6:9a:98:ce:32:7a:61:e2:
9c:35:69:05:6a:ce:a7:9d:63:be:94:fd:fc:db:33:88:24:40:
5f:da:1f:0c:4b:02:ea:7c:e6:64:70:a5:f1:99:99:53:b4:64:
4b:90:dc:5c:4f:58:80:31:80:30:65:d5:f2:b0:c8:ef:65:b7:
f8:21:30:2c:93:a8:5c:ce:80:67:8d:c4:7a:00:e3:e9:49:c9:
ae:14:43:1c:df:de:58:e4:ae:33:67:73:c6:fd:c2:67:fe:92:
58:08:c2:c1:f4:a6:e5:c4:d8:72:37:43:9a:50:41:e5:ad:a9:
7b:62:02:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:13 2025 by rpki-client