Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/oM6Jq-5rY7eqK1o00rulrljzqb8.roa
File: oM6Jq-5rY7eqK1o00rulrljzqb8.roa (raw, json)
Hash identifier: bMHFtwazyswSRc+tttrnSckzGd/92J8oY/5C1AcLu/g=
Subject key identifier: A0:CE:89:AB:EE:6B:63:B7:AA:2B:5A:34:D2:BB:A5:AE:58:F3:A9:BF
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 018972350CC8D1865E6EBA9C1129BE43C403
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/oM6Jq-5rY7eqK1o00rulrljzqb8.roa
Signing time: Thu 20 Jul 2023 07:30:26 +0000
ROA not before: Thu 20 Jul 2023 07:30:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 192.109.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:35:0c:c8:d1:86:5e:6e:ba:9c:11:29:be:43:c4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Jul 20 07:30:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0ce89abee6b63b7aa2b5a34d2bba5ae58f3a9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:8e:ed:f6:52:a7:98:19:7e:df:96:59:eb:
9b:75:8c:9c:82:c5:1a:61:ad:57:03:35:67:06:f8:
63:50:f8:a5:86:bb:ba:26:03:38:4d:7f:de:b5:24:
82:e9:fb:50:54:e3:fe:45:69:25:70:06:cd:ff:b7:
1a:93:ca:75:1e:90:26:61:a1:3f:ea:d5:bb:1d:df:
0f:ce:48:54:e7:bc:f2:4b:41:db:29:52:07:b6:6e:
0f:02:d7:78:ce:78:c9:9e:f0:c6:fc:ef:ac:e2:ab:
89:e3:8f:6f:c9:30:1f:2e:b3:75:8b:8f:c3:97:e5:
24:3b:77:1b:e7:59:a9:19:35:aa:28:09:9e:29:30:
4b:18:23:0d:89:56:4c:11:c5:84:a5:34:58:20:3d:
08:a5:08:af:11:36:fd:ef:42:bc:23:84:b6:d1:f3:
77:4a:02:cb:66:77:0d:d2:32:73:fe:a1:59:5e:2f:
3c:50:fa:e2:d4:22:19:1e:61:09:ed:93:12:07:29:
34:a1:f0:19:f6:f0:10:9a:50:5b:6f:ae:02:18:e0:
68:1b:36:c6:0f:50:2d:d4:1f:e4:7a:66:09:56:e1:
15:b0:ab:30:2f:4a:46:23:2e:05:bf:14:92:1c:21:
91:e8:96:d8:e9:1a:5d:97:6e:9d:0f:62:c6:33:1d:
89:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CE:89:AB:EE:6B:63:B7:AA:2B:5A:34:D2:BB:A5:AE:58:F3:A9:BF
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/oM6Jq-5rY7eqK1o00rulrljzqb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.200.0/24
Signature Algorithm: sha256WithRSAEncryption
25:1a:99:53:59:db:ce:76:24:1e:c4:cd:3e:2a:0f:56:cd:ca:
ad:a4:f5:78:6b:b4:5b:68:5d:dd:fe:83:47:9e:6f:32:de:1d:
81:07:3e:83:21:82:3e:83:ac:f3:83:77:5c:03:98:36:fa:9d:
2d:ac:2e:4b:09:5a:38:fd:86:56:16:b9:4a:ff:ff:9d:03:c7:
81:e4:9c:2e:d9:cc:d8:fc:f2:84:6f:71:74:63:b0:34:ca:1c:
9a:9a:21:12:2c:1f:fc:3e:f6:c2:1f:d2:ee:9d:12:3e:3a:d9:
34:e8:d4:1d:82:82:e1:b9:ee:ed:3c:f0:f3:fd:de:c6:67:1b:
0e:0a:41:93:98:ce:e0:5c:45:e1:c2:ef:8c:f8:87:bc:7f:19:
c1:5c:5e:1d:af:5c:f9:d3:f2:03:89:79:3c:da:67:3c:f3:35:
5d:ed:5c:64:24:56:34:d8:da:f7:b5:87:38:42:33:69:89:f4:
d5:70:b7:47:c7:e5:62:78:87:7b:a3:a7:a9:4a:41:5d:b0:1c:
8b:cd:a4:0d:14:13:81:c8:50:4e:80:d8:5d:8b:11:52:3b:b3:
c5:d0:e8:c2:15:bd:7f:46:23:24:6b:7b:ef:b0:e2:ad:72:5a:
99:6f:ab:e7:d0:06:bf:10:a8:7e:0b:ba:d5:6e:d4:21:52:8f:
67:91:72:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:54 2025 by rpki-client