Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/O7p1_OEyWBdeO59a1J41w2b1UZs.roa
File: O7p1_OEyWBdeO59a1J41w2b1UZs.roa (raw, json)
Hash identifier: 1RJMLupmYo9/1RAUKnPnbkGP6go/2zOuqC2j2v9Vn7M=
Subject key identifier: 3B:BA:75:FC:E1:32:58:17:5E:3B:9F:5A:D4:9E:35:C3:66:F5:51:9B
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 02E76060
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/O7p1_OEyWBdeO59a1J41w2b1UZs.roa
Signing time: Mon 31 Jan 2022 18:36:35 +0000
ROA not before: Mon 31 Jan 2022 18:36:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 89.42.215.0/24 maxlen: 24
176.223.181.0/24 maxlen: 24
93.114.69.0/24 maxlen: 24
188.211.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48717920 (0x2e76060)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 31 18:36:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3bba75fce13258175e3b9f5ad49e35c366f5519b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:27:62:dd:31:de:64:51:59:31:06:00:da:8f:
84:f4:1b:99:41:ae:c0:fa:5e:21:4d:ed:ba:11:0d:
38:ea:e4:1f:6a:b5:5b:de:61:bc:3e:98:05:07:a1:
4e:16:3c:2c:d7:31:95:48:bc:df:22:9c:70:78:9f:
48:11:66:08:65:6b:26:c5:0c:8b:b8:48:94:32:6b:
4b:d3:e6:73:51:0a:cb:77:0d:43:d1:40:75:55:65:
3f:b7:66:b6:78:e8:f6:f3:7b:53:e6:92:ff:7a:cb:
c9:f0:9e:1d:7d:8e:0c:88:9e:94:bf:ee:22:fa:26:
38:9f:5b:4d:fc:04:00:91:f4:8d:83:c7:72:81:9f:
9c:14:94:89:ad:fe:68:5e:04:74:99:e8:06:21:18:
92:ef:5f:f5:ac:47:7c:fb:6f:be:1b:c3:e8:14:50:
16:98:9a:d8:c1:3f:60:0c:27:13:bc:56:a1:b6:3c:
d2:d0:9e:d5:0e:d1:67:27:41:08:1f:32:82:81:e7:
ba:18:e5:b2:c1:da:84:ee:48:65:8f:84:43:ef:3a:
85:c5:54:8e:0f:9a:44:a6:63:2e:60:8f:b1:ec:ca:
9b:e9:34:13:a0:8b:8f:22:94:b1:77:7e:ae:2c:20:
d9:8d:c6:58:ab:4c:a4:4d:18:b6:1a:31:84:b2:47:
0d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BA:75:FC:E1:32:58:17:5E:3B:9F:5A:D4:9E:35:C3:66:F5:51:9B
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/O7p1_OEyWBdeO59a1J41w2b1UZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.215.0/24
93.114.69.0/24
176.223.181.0/24
188.211.249.0/24
Signature Algorithm: sha256WithRSAEncryption
19:93:f5:d6:52:4f:43:ee:47:43:da:b8:f0:db:22:b0:c8:d4:
6d:aa:41:f9:df:e4:e4:86:98:2d:71:f4:96:0e:53:89:c2:9e:
8b:e8:15:7f:d5:72:41:4d:90:31:c9:eb:9a:66:0a:d2:ab:2e:
32:54:67:f7:25:4f:68:cb:e8:a8:9c:97:c6:bc:be:80:92:fd:
86:be:81:2e:fa:95:3a:80:ab:0b:9e:bd:99:7d:54:ac:25:58:
0d:ac:a2:c5:7e:a1:14:db:bb:b0:bf:5a:a8:e8:8d:e7:42:ab:
3a:76:29:9e:99:53:44:51:fb:d4:57:de:9b:e8:8a:36:d7:19:
86:ed:3a:fa:db:45:a3:13:cb:92:5b:c4:8d:e4:eb:5a:38:c6:
8a:f4:f3:6e:11:35:c0:46:de:8f:eb:16:83:a8:20:b2:56:07:
7b:05:a7:d1:35:14:a7:0e:ba:5a:c7:64:43:a0:d7:34:e8:35:
0c:98:cf:66:5f:c9:9a:e8:aa:5f:67:6f:52:e7:2e:76:a1:c6:
77:c1:3b:a0:a3:68:6a:29:7b:68:24:e5:2d:f3:b5:33:d7:b1:
51:51:55:4a:61:25:50:4b:b8:b5:46:8c:d2:7c:9a:87:e5:34:
7a:ed:a7:7b:49:b0:4d:fe:e7:42:a9:52:85:fd:70:8e:c4:7d:
c2:02:9e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org