Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/OLZXEnQkh4cMyAZKd1HGsBg3TH0.roa
File: OLZXEnQkh4cMyAZKd1HGsBg3TH0.roa (raw, json)
Hash identifier: SPnXtTiAJFNHnQyXapYaYg8F3v9Ph7IHmixJKislT04=
Subject key identifier: 38:B6:57:12:74:24:87:87:0C:C8:06:4A:77:51:C6:B0:18:37:4C:7D
Certificate issuer: /CN=a5afc5435fcbbe348d2b56016a7bc7bcacf1b866
Certificate serial: 0185D41FC1F1885D1CE14D037A69AE90492D
Authority key identifier: A5:AF:C5:43:5F:CB:BE:34:8D:2B:56:01:6A:7B:C7:BC:AC:F1:B8:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/OLZXEnQkh4cMyAZKd1HGsBg3TH0.roa
Signing time: Sat 21 Jan 2023 11:38:49 +0000
ROA not before: Sat 21 Jan 2023 11:38:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49719
IP address blocks: 77.87.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d4:1f:c1:f1:88:5d:1c:e1:4d:03:7a:69:ae:90:49:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5afc5435fcbbe348d2b56016a7bc7bcacf1b866
Validity
Not Before: Jan 21 11:38:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38b65712742487870cc8064a7751c6b018374c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:7c:0e:eb:c6:b1:e2:c7:72:fa:e6:5c:52:
53:16:f0:0f:bb:e2:fe:a2:5f:d9:6f:9d:7e:6e:ba:
d1:3b:2e:76:39:4d:b1:27:86:9a:97:61:5c:e4:3e:
48:a6:77:40:ae:b9:71:71:00:04:22:65:c6:9d:30:
a3:10:70:5a:9f:2c:7d:44:fc:04:3f:dd:96:d9:2b:
c7:3d:94:b6:2b:1b:6c:d7:a1:88:e0:83:1a:e5:0d:
a4:16:dc:bc:f0:77:24:e1:1d:67:ca:ac:1f:6b:98:
dc:c9:54:e5:bd:8f:e1:43:04:f0:9c:d2:0d:5f:e8:
c9:b4:fd:f4:5c:9e:1a:63:b8:78:47:4c:30:50:fd:
a0:51:18:0d:b4:9b:d2:0c:dc:45:c9:ba:42:84:93:
d7:ae:13:54:27:85:7d:5b:e8:04:a3:37:18:e7:39:
92:b4:d0:ff:97:d7:16:46:c6:5b:bd:09:f6:2f:f7:
81:db:f1:e0:1f:de:02:f6:bd:c6:93:88:5e:51:6a:
7e:cc:a0:a8:bd:0c:95:44:50:cf:eb:14:77:6d:1f:
e5:25:d7:7c:e6:06:8f:a2:b1:43:69:97:e3:0f:b2:
e4:e4:de:98:99:aa:f5:e5:44:18:0e:ad:81:66:45:
bf:62:22:c1:72:77:41:5b:b5:33:29:36:b7:15:c1:
28:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B6:57:12:74:24:87:87:0C:C8:06:4A:77:51:C6:B0:18:37:4C:7D
X509v3 Authority Key Identifier:
keyid:A5:AF:C5:43:5F:CB:BE:34:8D:2B:56:01:6A:7B:C7:BC:AC:F1:B8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/OLZXEnQkh4cMyAZKd1HGsBg3TH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.88.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:b2:07:70:eb:45:2f:6b:bf:ef:9d:f7:97:e0:f7:db:c2:05:
74:45:b5:28:4e:d3:75:40:9f:32:88:b3:61:63:c3:e9:af:32:
20:f0:46:73:ae:6f:02:eb:7b:73:ed:8e:53:5e:0d:f6:a1:61:
d4:f2:23:3b:1f:2b:dc:45:58:d7:27:e8:cc:81:0e:fc:56:a7:
55:d9:59:40:9e:d9:b1:c6:fb:d4:64:ee:15:98:45:3d:75:42:
52:58:bd:77:97:3a:1a:e1:59:e9:24:fa:30:c3:14:50:14:ce:
b0:47:17:5f:dd:d8:99:8c:78:85:a3:da:03:6f:54:a1:1a:dd:
92:3c:34:aa:3f:7a:76:55:37:b5:7a:d9:43:b9:a1:2b:90:ee:
04:38:81:ac:c0:f7:7d:f6:a7:d9:cf:d3:b1:11:bd:22:3d:b2:
62:de:47:3f:cf:5a:79:6b:49:34:4e:19:68:07:bc:6a:6c:73:
98:1a:aa:83:6a:18:1d:29:eb:3b:63:3e:2c:87:dc:a6:87:71:
f3:fd:c4:2e:52:be:25:b7:b1:95:6d:e4:11:58:4e:00:e8:03:
ca:6a:cb:40:57:56:22:52:f3:9d:b7:c6:4d:a7:65:21:76:26:
dc:20:8a:b2:ce:8c:74:dd:83:d0:11:90:49:94:e0:cc:4a:21:
7f:c3:cc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:55:34 2025 by rpki-client