Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/OMGfio0ZVdJGk5120fFfjHttD6w.roa
File: OMGfio0ZVdJGk5120fFfjHttD6w.roa (raw, json)
Hash identifier: gAe20ixbN/RUwZ5S5vDRZ4LnP3Fo3txOfpC9x8pKG5E=
Subject key identifier: 38:C1:9F:8A:8D:19:55:D2:46:93:9D:76:D1:F1:5F:8C:7B:6D:0F:AC
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0262E4A5
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/OMGfio0ZVdJGk5120fFfjHttD6w.roa
Signing time: Thu 27 Jan 2022 10:20:40 +0000
ROA not before: Thu 27 Jan 2022 10:20:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15723
IP address blocks: 164.215.101.0/24 maxlen: 24
164.215.102.0/24 maxlen: 24
164.215.100.0/24 maxlen: 24
164.215.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40035493 (0x262e4a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 27 10:20:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38c19f8a8d1955d246939d76d1f15f8c7b6d0fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:23:30:fc:94:59:d1:42:6c:f9:a2:98:09:
ea:d1:2a:96:62:b8:dd:14:74:f3:bf:91:2b:25:8b:
7a:6d:09:2f:f5:54:6a:a3:b0:bc:8d:41:55:39:31:
5a:88:34:51:0a:ec:36:7c:f1:06:ae:d6:82:73:86:
c9:4e:18:f4:2a:aa:30:48:7a:7a:8a:01:24:57:fa:
78:48:87:77:c8:dd:a7:3f:50:9a:f9:a1:c3:3a:27:
90:d2:f7:37:db:2d:f2:a9:0f:f4:d8:39:32:58:e5:
a5:5f:50:d9:17:6f:93:57:1c:ac:84:57:a2:55:8a:
55:19:e6:fd:d6:d4:c2:f9:4e:62:6e:d9:be:6b:df:
56:58:9b:c9:a6:f7:c6:53:92:b0:a5:c7:88:80:0f:
29:6f:7e:a4:6d:ea:d7:45:5f:37:2e:1a:aa:16:41:
92:e3:38:ba:48:cc:83:c5:72:f7:53:ac:16:98:80:
c1:a3:6c:f8:ab:b6:58:3c:76:31:27:94:51:10:16:
fe:f9:b2:bd:ff:96:bc:dc:5d:60:78:88:93:1b:bc:
c4:bb:73:0b:b0:2c:e7:52:49:2f:12:5e:91:6f:56:
02:a1:13:36:dd:8a:42:63:17:a8:74:cf:5d:6b:6e:
b3:96:69:9e:b4:3f:fa:bf:12:6e:2c:e9:cf:51:fa:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C1:9F:8A:8D:19:55:D2:46:93:9D:76:D1:F1:5F:8C:7B:6D:0F:AC
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/OMGfio0ZVdJGk5120fFfjHttD6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.215.100.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:6f:72:08:87:02:91:fe:58:2a:00:cb:c9:7e:1a:59:4a:15:
77:f6:b6:55:17:93:f9:11:4d:8e:60:62:a6:b0:07:d3:d4:50:
35:63:1f:44:12:16:e6:91:94:bc:7f:6e:6a:0e:22:2f:64:68:
58:4d:da:b4:1f:3b:a0:8a:4a:93:e7:fa:e1:00:6a:c0:df:ff:
6e:22:37:c1:68:51:d5:05:f0:ab:41:36:67:d5:83:17:a3:e1:
60:81:ce:f6:29:73:9d:b4:4c:7d:b6:db:29:3a:f9:4b:4d:38:
e8:75:09:7f:4a:cc:5e:8e:af:4c:d2:e6:02:28:c4:17:8c:cc:
db:8a:5a:6c:f4:e0:02:3b:d1:1f:a6:34:e5:fa:95:50:ea:84:
51:86:5a:af:54:22:98:f1:97:f2:96:6e:7c:98:89:07:ee:bb:
f5:bb:ba:b5:41:29:ea:28:75:96:89:f1:ac:4d:80:45:b2:42:
44:4a:f3:d5:cb:0d:4f:3d:db:6f:d1:9e:aa:10:6a:92:96:0f:
ce:73:51:36:5e:77:49:f0:b6:36:71:87:fd:59:cc:4d:96:65:
f3:14:be:e1:ac:ac:c2:09:fd:e5:51:76:21:9a:0a:0a:e8:1e:
0d:55:7e:6c:f4:58:76:c5:ad:f1:da:9a:51:07:c6:4a:09:4f:
c7:4e:4d:25
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAmLkpTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZDA2YTQyYmIyNDQ2ZTUxZjE5MmVhMzc1YmRmN2VlYzVhNTFjNzdmMB4XDTIyMDEy
NzEwMjA0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzhjMTlmOGE4ZDE5
NTVkMjQ2OTM5ZDc2ZDFmMTVmOGM3YjZkMGZhYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK0bIzD8lFnRQmz5opgJ6tEqlmK43RR087+RKyWLem0JL/VU
aqOwvI1BVTkxWog0UQrsNnzxBq7WgnOGyU4Y9CqqMEh6eooBJFf6eEiHd8jdpz9Q
mvmhwzonkNL3N9st8qkP9Ng5MljlpV9Q2Rdvk1ccrIRXolWKVRnm/dbUwvlOYm7Z
vmvfVlibyab3xlOSsKXHiIAPKW9+pG3q10VfNy4aqhZBkuM4ukjMg8Vy91OsFpiA
waNs+Ku2WDx2MSeUURAW/vmyvf+WvNxdYHiIkxu8xLtzC7As51JJLxJekW9WAqET
Nt2KQmMXqHTPXWtus5ZpnrQ/+r8Sbizpz1H6+pkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ4wZ+KjRlV0kaTnXbR8V+Me20PrDAfBgNVHSMEGDAWgBR9BqQrskRuUfGS
6jdb337sWlHHfzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZRYWtLN0pFYmxIeGt1bzNXOTktN0ZwUngzOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWMvNzgwMDJhLTRmYzAtNGRiZi04NTg1LTJjZjgwNmIyZDBmMi8x
L09NR2ZpbzBaVmRKR2s1MTIwZkZmakh0dEQ2dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMv
NzgwMDJhLTRmYzAtNGRiZi04NTg1LTJjZjgwNmIyZDBmMi8xL2ZRYWtLN0pFYmxI
eGt1bzNXOTktN0ZwUngzOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqTXZDANBgkqhkiG9w0BAQsFAAOC
AQEAqm9yCIcCkf5YKgDLyX4aWUoVd/a2VReT+RFNjmBiprAH09RQNWMfRBIW5pGU
vH9uag4iL2RoWE3atB87oIpKk+f64QBqwN//biI3wWhR1QXwq0E2Z9WDF6PhYIHO
9ilznbRMfbbbKTr5S0046HUJf0rMXo6vTNLmAijEF4zM24pabPTgAjvRH6Y05fqV
UOqEUYZar1QimPGX8pZufJiJB+679bu6tUEp6ih1lonxrE2ARbJCRErz1csNTz3b
b9GeqhBqkpYPznNRNl53SfC2NnGH/VnMTZZl8xS+4ayswgn95VF2IZoKCugeDVV+
bPRYdsWt8dqaUQfGSglPx05NJQ==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:47 2025 by rpki-client