Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ottWRGp4OTLf_nrKEYLhJgY7yso.roa
File: ottWRGp4OTLf_nrKEYLhJgY7yso.roa (raw, json)
Hash identifier: f/LcYOB6cz9VLB3sRz2SSyP9H6RSLaNKZzOjiHG+Ak8=
Subject key identifier: A2:DB:56:44:6A:78:39:32:DF:FE:7A:CA:11:82:E1:26:06:3B:CA:CA
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01833DC88C53D9AADBA0853C263AE0834D21
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ottWRGp4OTLf_nrKEYLhJgY7yso.roa
Signing time: Wed 14 Sep 2022 20:54:56 +0000
ROA not before: Wed 14 Sep 2022 20:54:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57428
IP address blocks: 109.205.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3d:c8:8c:53:d9:aa:db:a0:85:3c:26:3a:e0:83:4d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Sep 14 20:54:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2db56446a783932dffe7aca1182e126063bcaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ce:59:33:77:8d:d7:39:48:4d:4e:57:16:79:
3b:ca:b5:d4:36:92:b9:9f:a5:3e:cd:81:99:8c:a8:
db:72:3d:04:14:9e:3d:17:7b:c6:1c:24:c3:9d:f3:
74:29:9b:85:00:56:99:21:6a:c5:33:d5:0e:d9:ee:
cf:79:37:51:13:fb:0e:29:0a:c6:6e:86:f2:14:a5:
fd:76:5d:e8:2e:f3:b9:47:85:04:b0:ac:0f:39:39:
db:af:ff:3e:67:03:ad:14:4c:8d:1c:38:80:07:f5:
7e:05:fc:a0:07:41:ef:90:3e:f7:82:a7:48:db:bf:
6d:8e:ec:cf:a0:99:f8:54:2e:5a:c1:2c:7f:31:31:
4c:5d:cd:a6:a6:b9:e7:60:60:db:dc:f6:59:fc:61:
11:2f:14:22:1e:2f:00:d0:c2:64:0e:ee:3e:aa:74:
08:99:92:2f:1e:76:52:78:49:9f:de:b8:b5:4e:9e:
ab:10:02:c6:de:18:ef:03:0c:08:3c:93:1d:41:5a:
6f:c0:5d:28:25:06:04:81:26:6d:2a:ff:90:5a:49:
6e:ec:a4:bd:8d:a8:4e:e6:1d:cf:8b:0b:a6:58:93:
7d:70:11:79:68:bf:28:f0:f4:06:94:db:44:75:31:
72:3b:70:9f:a8:37:ee:22:bd:0c:9e:1b:df:e1:9d:
d9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DB:56:44:6A:78:39:32:DF:FE:7A:CA:11:82:E1:26:06:3B:CA:CA
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ottWRGp4OTLf_nrKEYLhJgY7yso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.215.0/24
Signature Algorithm: sha256WithRSAEncryption
05:97:7d:89:5f:94:a6:53:d5:66:0c:be:61:b3:7f:d7:4f:78:
77:c6:dd:06:45:12:22:d2:98:de:90:e8:99:58:6c:76:93:2f:
d6:5f:43:92:52:ba:9a:70:06:67:2a:12:2d:24:be:e1:b0:68:
4c:d1:f6:50:3d:47:b2:fe:dc:53:01:27:8d:49:14:45:48:04:
f8:68:b9:11:8b:f9:ee:25:a6:83:8a:75:5d:02:fb:43:51:89:
72:92:fd:ec:53:ca:91:69:5d:29:20:24:9c:d7:d5:28:ba:7f:
f0:1b:d5:7a:28:bb:dc:b7:9e:82:ae:90:bf:ce:91:3e:a9:5e:
92:cf:a0:16:62:14:c8:a0:2b:61:96:8d:ef:c5:64:f8:90:1e:
42:8b:2b:6c:15:95:3f:f0:89:7f:bb:47:0e:20:7b:07:38:4b:
99:88:5c:99:95:57:d8:a9:c5:12:7a:d2:97:98:9a:16:b0:c0:
76:c6:b0:82:35:32:56:15:b1:4d:0c:09:3a:4f:d1:4b:36:9d:
5a:0f:d8:b5:28:45:a0:87:31:05:a0:05:bf:6a:a6:49:45:b0:
22:0c:12:8d:9a:4c:35:8d:d3:24:56:90:02:e3:5f:07:57:5f:
50:52:6a:35:37:cd:00:c7:aa:78:58:3b:37:c1:e9:6e:79:cf:
88:8c:ad:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:26 2025 by rpki-client