Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/OLyi7JnB9i4Eyt0jav_jWjZUKAs.roa
File: OLyi7JnB9i4Eyt0jav_jWjZUKAs.roa (raw, json)
Hash identifier: ng8t9okmZRFHyIKxXuf+UG1mZMnBnb2vOhWw1a1H2AA=
Subject key identifier: 38:BC:A2:EC:99:C1:F6:2E:04:CA:DD:23:6A:FF:E3:5A:36:54:28:0B
Certificate issuer: /CN=17dbd5acf1f9c75d18a1f75031114c48f0b23363
Certificate serial: 0188D8821703007EA3D9F3EB4A98A9D3AEC9
Authority key identifier: 17:DB:D5:AC:F1:F9:C7:5D:18:A1:F7:50:31:11:4C:48:F0:B2:33:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/OLyi7JnB9i4Eyt0jav_jWjZUKAs.roa
Signing time: Tue 20 Jun 2023 11:13:04 +0000
ROA not before: Tue 20 Jun 2023 11:13:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34699
IP address blocks: 85.116.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d8:82:17:03:00:7e:a3:d9:f3:eb:4a:98:a9:d3:ae:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17dbd5acf1f9c75d18a1f75031114c48f0b23363
Validity
Not Before: Jun 20 11:13:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38bca2ec99c1f62e04cadd236affe35a3654280b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:6c:e4:af:e2:df:83:97:5f:72:c1:23:af:
df:6c:d5:a9:c0:d4:1b:06:1f:15:c1:b6:5c:70:14:
9d:61:fc:c8:99:51:b3:81:41:6f:d9:f4:ac:a8:09:
12:10:d2:f1:74:4a:2c:62:d2:e1:4b:26:7a:18:45:
d5:e3:e2:d7:dd:59:a0:00:0a:e1:9c:67:10:15:0b:
5c:8e:c3:a4:48:98:50:e5:17:c2:e3:1c:7f:a7:26:
0d:e6:36:fe:81:92:c7:ec:69:ee:23:36:d1:44:e6:
f5:32:f6:dc:97:c7:c5:a3:60:eb:be:28:7a:aa:74:
cf:98:98:eb:4b:b8:c7:8f:ac:3b:29:3a:c5:f9:8b:
17:c7:19:47:24:9e:5e:f4:6d:11:df:fb:57:32:be:
73:ef:3f:73:6d:d8:32:7b:c8:7f:60:3c:97:c1:44:
a8:b8:b6:1a:80:d9:ba:5a:06:8f:ef:e0:b8:34:27:
ab:ba:0f:5a:bf:5e:1a:70:cf:67:3a:a7:21:5b:f5:
c9:9f:bb:2c:26:17:dc:d5:17:42:6e:ad:0c:86:83:
8c:0f:92:d2:35:31:c9:b2:56:cf:6a:a6:7e:ce:d8:
04:23:1b:3f:00:cd:73:6a:3c:d9:a1:f9:f7:62:d2:
5c:4e:e9:15:27:0d:e3:ea:01:20:ce:0e:70:1e:9c:
5d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BC:A2:EC:99:C1:F6:2E:04:CA:DD:23:6A:FF:E3:5A:36:54:28:0B
X509v3 Authority Key Identifier:
keyid:17:DB:D5:AC:F1:F9:C7:5D:18:A1:F7:50:31:11:4C:48:F0:B2:33:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/OLyi7JnB9i4Eyt0jav_jWjZUKAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.116.224.0/20
Signature Algorithm: sha256WithRSAEncryption
98:ae:dd:71:f1:da:93:ab:ad:f0:ec:d3:31:29:8e:aa:e7:07:
30:8c:43:7f:91:bf:77:84:bc:9c:0a:58:3a:06:79:9e:30:24:
fd:92:cf:3f:a7:e6:84:66:81:a6:6b:da:1b:1f:e8:96:e3:0e:
bc:76:e7:6d:a1:8b:81:2b:2d:bc:5a:42:1f:3b:f2:ff:fb:73:
80:39:b4:94:25:9f:2f:a7:90:2c:67:3d:58:13:e0:e6:8b:16:
64:4c:ef:f7:d6:b4:eb:11:82:ea:e8:8d:2d:f1:59:7e:02:81:
a5:a8:e9:2a:32:36:ad:e3:1d:f9:8a:fa:0b:76:20:26:cb:62:
43:19:00:e9:0d:bd:9b:1b:48:d0:78:d0:f0:bb:fc:1b:cc:bf:
f7:3b:95:e9:13:25:39:35:9a:e1:a6:be:49:b2:78:56:5f:af:
08:fe:3c:42:fd:bd:e9:0a:6e:33:cc:3d:1f:6c:2f:50:38:b5:
ef:77:9a:f5:a1:e9:52:0a:1e:99:41:f7:16:42:2e:4d:b3:33:
3c:6c:8f:9c:6c:c4:d6:33:ec:84:d7:c9:53:fa:84:15:ce:28:
0c:26:d3:3b:f5:c2:24:e2:b5:da:96:b6:28:47:cb:a1:1c:cb:
b7:ed:20:e1:91:f9:e5:c1:e3:ea:9e:fa:24:e4:24:80:a7:21:
42:f3:66:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:17:51 2025 by rpki-client