Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/Oll_CdOLSgWqyRf4Zd-bLkDWjtU.roa
File: Oll_CdOLSgWqyRf4Zd-bLkDWjtU.roa (raw, json)
Hash identifier: PFP4EodQ5JnJAtq2K7yJ85MtsdCGXeG0/IbuTvG4ofg=
Subject key identifier: 3A:59:7F:09:D3:8B:4A:05:AA:C9:17:F8:65:DF:9B:2E:40:D6:8E:D5
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 01848A8865575F41C5FB5DEA7F6BF4B57F20
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/Oll_CdOLSgWqyRf4Zd-bLkDWjtU.roa
Signing time: Fri 18 Nov 2022 11:38:25 +0000
ROA not before: Fri 18 Nov 2022 11:38:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 87.246.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8a:88:65:57:5f:41:c5:fb:5d:ea:7f:6b:f4:b5:7f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Nov 18 11:38:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a597f09d38b4a05aac917f865df9b2e40d68ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bc:50:43:21:ce:2b:69:d4:39:98:83:81:97:
9c:8b:40:5b:6a:64:cd:0e:db:19:3b:a8:36:e1:30:
8d:5a:d4:59:23:6a:00:62:2b:6f:54:41:60:11:3d:
b8:3a:5f:17:ff:53:1b:42:e8:67:7b:3e:31:b4:27:
6d:4a:ae:96:d3:3c:f4:9d:29:4d:f4:97:1f:e3:4a:
51:f4:3f:9b:38:ac:62:29:a4:d8:1b:9e:3d:2c:83:
5d:6b:20:82:a1:7d:4f:b2:37:fb:0e:1f:54:5b:57:
32:9b:ac:f8:3b:a9:cb:4a:22:ea:47:48:4a:3c:8a:
5d:8e:15:9e:06:c8:2b:7d:ec:46:61:d5:86:df:72:
b3:a9:bc:78:cf:f5:9b:df:b2:55:bd:36:e6:18:1a:
d4:58:a8:6c:7e:8f:d9:64:20:a6:77:0a:19:cd:3f:
0d:14:aa:d7:ab:a9:3a:0a:19:72:1e:d1:5d:44:f2:
b8:e8:a3:26:a3:38:68:31:d9:b1:35:4c:85:cd:18:
84:68:7a:8b:7b:47:98:92:c9:32:54:1c:01:01:f2:
ae:4d:d3:12:2c:4f:6a:3a:b9:08:e1:b1:d7:ea:91:
2e:af:af:8e:e7:e5:5d:46:e4:26:4c:3e:b2:68:3e:
33:8e:16:3f:16:fb:85:7b:6f:21:c8:58:30:0e:a3:
51:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:59:7F:09:D3:8B:4A:05:AA:C9:17:F8:65:DF:9B:2E:40:D6:8E:D5
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/Oll_CdOLSgWqyRf4Zd-bLkDWjtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.28.0/22
Signature Algorithm: sha256WithRSAEncryption
05:66:4b:23:33:1f:a2:31:45:7f:6e:40:a0:c4:28:b4:00:3b:
aa:d8:7e:2f:09:a4:69:17:a1:d9:13:9c:73:bf:50:86:73:8d:
f3:96:02:0f:a4:d4:8c:e4:6f:9a:3e:c5:8b:c4:61:e6:5d:b8:
0c:c9:df:c0:cb:13:87:51:02:04:45:56:3d:e9:28:86:8c:94:
69:1f:6e:8e:7d:93:b5:cb:38:e1:7c:84:75:23:ca:0a:9e:59:
72:6e:09:ab:4c:c8:5e:91:07:12:05:82:e4:70:27:2e:91:fe:
18:c5:ac:16:54:9f:db:10:13:3c:a2:22:19:4d:16:3c:15:1c:
73:fc:16:06:17:c7:45:4d:75:f2:6c:09:36:8d:7f:9a:37:c4:
9b:75:30:51:63:95:42:6a:0d:0f:84:8e:a5:03:cc:64:38:c2:
65:b3:24:c5:3e:f1:99:3e:24:cb:a0:6d:c2:86:8e:61:9a:e3:
9a:c4:57:17:16:db:67:47:e7:26:f0:e2:00:01:41:8f:10:fe:
45:db:aa:36:2e:2c:b8:72:56:7a:64:6a:59:d1:62:24:12:c4:
e8:ae:37:d8:95:12:37:4d:8a:ca:85:45:0e:19:c4:8d:d2:a3:
95:80:58:cb:fc:99:78:35:56:9e:56:26:5b:57:75:41:d4:5d:
12:15:3a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:14 2025 by rpki-client