Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/OPiZJan38o6wAFaiKfY1Kyjouvc.roa
File: OPiZJan38o6wAFaiKfY1Kyjouvc.roa (raw, json)
Hash identifier: MIbnxmYFpRzIHukj31zpe62ripxbTnpfy31UB/dz4zc=
Subject key identifier: 38:F8:99:25:A9:F7:F2:8E:B0:00:56:A2:29:F6:35:2B:28:E8:BA:F7
Certificate issuer: /CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Certificate serial: 0B98E05F
Authority key identifier: A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/OPiZJan38o6wAFaiKfY1Kyjouvc.roa
Signing time: Sat 01 Jan 2022 04:56:36 +0000
ROA not before: Sat 01 Jan 2022 04:56:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51265
IP address blocks: 176.126.39.0/24 maxlen: 24
193.9.252.0/23 maxlen: 24
178.157.4.0/22 maxlen: 22
185.44.52.0/22 maxlen: 22
185.69.244.0/22 maxlen: 22
62.240.128.0/19 maxlen: 19
83.216.32.0/19 maxlen: 20
2a07:1740::/29 maxlen: 29
2a04:9540::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194568287 (0xb98e05f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Validity
Not Before: Jan 1 04:56:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38f89925a9f7f28eb00056a229f6352b28e8baf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:6d:64:94:38:31:a5:89:44:98:d6:b7:e6:
bd:81:32:8f:9f:e6:3d:ff:a7:ae:95:30:47:f9:96:
20:5e:4d:d5:7b:12:39:d1:94:a3:c0:da:b7:01:ee:
9f:fd:8d:67:d0:0a:5c:35:e2:98:35:6a:42:b2:cf:
a1:13:f7:c2:9d:3b:d6:d8:21:ae:0c:de:3c:b8:a4:
11:ae:fa:1f:ad:1c:5b:23:16:e7:25:9e:5f:ec:2c:
ee:5a:7d:1c:92:99:6f:a5:67:81:e7:6c:28:2c:d8:
a1:8f:69:66:af:03:49:d7:b1:9e:6a:9b:95:7c:65:
bc:b6:ae:91:f6:61:32:62:db:7b:77:4f:22:b7:b2:
95:81:fd:a1:f4:a5:78:52:8e:03:a5:10:76:fa:6b:
aa:e1:da:b0:50:04:bb:c9:f9:cc:f9:73:84:9a:31:
a5:44:9e:18:42:7e:c4:a0:25:2f:52:94:5a:2b:17:
e5:15:59:19:7d:63:af:f3:5f:cf:d8:1a:17:4a:2e:
10:a9:d7:18:be:1d:49:36:fd:50:c5:4e:f9:73:93:
70:bd:25:03:ba:46:90:83:57:34:16:9f:56:46:1c:
2f:45:34:92:ba:65:60:e7:06:30:e6:ee:0a:65:b5:
42:db:e9:a3:8d:d2:85:0c:c2:89:b5:22:18:79:11:
df:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F8:99:25:A9:F7:F2:8E:B0:00:56:A2:29:F6:35:2B:28:E8:BA:F7
X509v3 Authority Key Identifier:
keyid:A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/OPiZJan38o6wAFaiKfY1Kyjouvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.240.128.0/19
83.216.32.0/19
176.126.39.0/24
178.157.4.0/22
185.44.52.0/22
185.69.244.0/22
193.9.252.0/23
IPv6:
2a04:9540::/29
2a07:1740::/29
Signature Algorithm: sha256WithRSAEncryption
e7:02:98:11:b9:fd:f4:64:70:56:f7:c1:98:d2:64:1a:f9:84:
f5:00:fa:76:6f:7a:80:59:0d:a5:aa:54:5f:5d:e5:ef:7f:f9:
73:e7:77:4e:09:4d:88:79:ae:ca:01:be:fb:6c:16:e7:fb:f6:
7b:31:ed:9a:97:58:18:22:26:ee:2d:18:ff:a6:6a:c4:b2:71:
1f:83:8b:e3:54:36:ab:ce:18:bd:81:58:7a:de:43:17:3e:ed:
9c:d4:dc:2d:16:9a:71:81:c8:24:c5:ab:6b:0a:5f:33:29:66:
47:d8:b7:52:25:0e:51:fc:55:cc:d3:da:fa:9f:8f:c0:dc:a0:
e4:40:56:21:7b:80:c9:2f:7d:eb:f7:bb:5b:45:22:91:f1:0f:
64:e1:5b:a8:24:21:e4:46:01:1d:ee:b0:6d:e6:c3:67:3e:2c:
67:34:e2:b3:41:5e:4f:65:1a:85:87:e0:73:6c:1b:23:2a:ec:
f4:3a:b7:37:ae:f5:c1:b1:32:05:bf:0d:b1:56:55:da:07:c9:
bb:a0:22:d3:dc:68:2b:a1:ec:7b:dc:4d:67:88:b1:9b:cb:de:
6f:7e:50:0d:6d:6a:57:c0:73:55:d5:cc:28:21:d3:69:48:87:
14:d7:96:fe:4b:64:54:5e:2c:9a:82:ff:bf:fa:5a:c3:c0:0f:
aa:c9:47:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:41 2024 by rpki-client on console-ams.rpki-client.org