Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/OCaIIGC2B_85nU2gLIQtYSUGMaA.roa
File: OCaIIGC2B_85nU2gLIQtYSUGMaA.roa (raw, json)
Hash identifier: 5twlkgdC2YaDYg72xKB5ifShATtReFRPp+3Lw1sMobI=
Subject key identifier: 38:26:88:20:60:B6:07:FF:39:9D:4D:A0:2C:84:2D:61:25:06:31:A0
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 0A36F51E
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/OCaIIGC2B_85nU2gLIQtYSUGMaA.roa
Signing time: Sat 01 Jan 2022 06:58:24 +0000
ROA not before: Sat 01 Jan 2022 06:58:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60248
IP address blocks: 195.110.38.0/24 maxlen: 24
195.110.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171373854 (0xa36f51e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jan 1 06:58:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3826882060b607ff399d4da02c842d61250631a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d8:7d:69:82:36:3c:c0:a4:7c:57:87:8f:93:
5b:99:75:19:2e:76:e0:dc:f7:38:ff:23:cf:05:4e:
47:54:11:7f:6b:8f:08:f3:54:00:89:8a:ff:e1:f2:
fd:b0:8b:87:0a:3b:ec:8c:e7:08:7e:90:b2:ff:2a:
f1:b2:f4:19:c3:4a:ce:37:bc:a2:60:ee:1e:f1:ee:
3c:79:77:b2:db:b5:e8:4c:5c:79:c0:98:19:63:93:
74:3c:a5:7f:91:79:a5:2a:cc:44:d6:de:42:af:8c:
d9:f5:1e:3e:05:4e:95:86:9c:bf:e6:a2:39:45:2d:
1e:9d:a9:10:35:c3:34:1e:cf:2b:71:37:be:da:5f:
29:0e:38:b5:d9:24:ed:dd:70:2e:9b:39:d6:f4:e9:
4e:8b:b3:97:48:3a:20:17:06:d0:16:cf:0b:08:91:
d8:32:dd:a0:e7:ef:74:67:24:d2:67:f9:ed:8d:a6:
1f:89:f6:29:e9:95:77:d6:21:b5:20:78:e3:cb:26:
d8:f0:45:41:eb:2a:65:43:e0:e5:cc:11:40:8c:12:
83:ee:be:53:08:9c:0e:fe:68:a1:34:c7:dd:3a:b2:
b3:75:b1:c0:dc:c7:13:48:a8:27:59:22:d8:89:45:
ee:ec:6b:8e:dd:8f:9d:da:7e:bc:4f:95:d2:9d:62:
6c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:26:88:20:60:B6:07:FF:39:9D:4D:A0:2C:84:2D:61:25:06:31:A0
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/OCaIIGC2B_85nU2gLIQtYSUGMaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.38.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:e1:fd:b7:d9:85:28:da:8b:50:72:15:a9:95:7e:b4:d8:94:
13:2f:40:9d:b1:03:06:fb:d1:d4:46:f9:27:38:18:1f:6b:d7:
a7:9a:59:7c:15:18:cd:73:cf:88:37:84:a9:cd:b4:c8:a7:08:
5d:35:ee:18:08:7e:cb:70:f6:2e:80:80:03:64:c0:00:41:93:
b9:38:c8:4e:67:a0:5e:65:25:4b:8a:17:df:9d:64:4a:5e:08:
40:23:c3:cd:79:a0:aa:22:08:f3:98:46:bd:f1:20:eb:85:8f:
c6:32:f6:08:91:d2:1c:b7:b2:19:2d:b0:3d:ca:95:15:93:37:
8c:58:c9:da:de:97:82:5e:d9:48:6a:87:e4:a4:12:3e:d1:ab:
0b:26:34:ca:6e:03:55:66:29:51:1e:55:8b:d2:70:20:83:4a:
20:8e:00:e6:71:59:67:7e:ed:1b:93:b6:11:24:2b:cc:0e:06:
ca:7a:2d:8d:9b:60:1e:17:df:9f:04:12:d4:b1:86:b1:e6:7a:
0e:93:f7:30:a8:c0:14:19:70:aa:cb:9e:a0:77:2e:b1:c1:4b:
5f:66:37:c2:2b:94:41:ac:bc:66:a8:62:77:a3:15:af:98:d0:
63:71:d0:18:2d:ba:42:8a:e0:d5:33:32:33:c2:6f:24:ce:9a:
6e:55:b4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:00 2025 by rpki-client