Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/OylUhxLO_YtY7s136_fzdjUGFog.roa
File: OylUhxLO_YtY7s136_fzdjUGFog.roa (raw, json)
Hash identifier: A5YEoYoUIllwOq11F3xSztxz2xEPDoIZ2oiN8rN9mIY=
Subject key identifier: 3B:29:54:87:12:CE:FD:8B:58:EE:CD:77:EB:F7:F3:76:35:06:16:88
Certificate issuer: /CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
Certificate serial: 01856D93D439F78541B0181AFF58F3FBC297
Authority key identifier: 60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/OylUhxLO_YtY7s136_fzdjUGFog.roa
Signing time: Sun 01 Jan 2023 13:44:42 +0000
ROA not before: Sun 01 Jan 2023 13:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210799
IP address blocks: 176.100.45.0/24 maxlen: 24
2a11:c780::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:d4:39:f7:85:41:b0:18:1a:ff:58:f3:fb:c2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606560e03ee88332eefbfa6944ebd1038ae0eab8
Validity
Not Before: Jan 1 13:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b29548712cefd8b58eecd77ebf7f37635061688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:10:56:57:7d:7e:e1:cc:9b:5f:91:c1:66:45:
72:3e:86:f4:32:35:fe:dd:d9:0f:25:4b:60:5d:04:
94:b9:97:85:9a:0a:b5:60:65:b5:aa:42:64:42:58:
af:91:f3:5e:4d:9e:dd:26:cc:9e:2a:10:d4:f1:5b:
ab:13:e3:0a:47:97:8e:64:92:8f:77:db:31:10:67:
61:e4:21:b5:6d:e7:fb:fd:0e:9c:44:a3:c3:59:f6:
b3:d3:de:f1:c4:d7:e9:d4:ba:1b:25:42:6d:88:b0:
78:fd:56:0b:70:cd:b1:82:10:88:cb:51:0c:df:a8:
f5:08:52:24:8b:76:bb:1a:c1:c4:62:9b:ab:fa:33:
3d:bb:11:60:de:d3:27:a6:4b:94:3e:e5:70:c8:61:
a1:7f:22:b8:29:db:36:36:40:7f:5f:b1:ac:97:01:
5d:cf:6d:da:80:35:ea:60:b7:1f:79:00:1e:1d:d7:
48:c2:06:a6:27:8a:2c:f4:b7:e9:f8:6f:47:06:88:
43:cd:54:3b:19:72:f0:e0:e9:99:e1:e1:ee:a0:11:
87:0f:03:3f:b5:97:e8:83:22:14:01:75:74:49:55:
e9:ce:ed:64:fe:00:75:78:2a:80:03:6a:03:73:5a:
47:02:01:59:a2:fd:e0:ad:c3:66:70:d3:32:80:e7:
2b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:29:54:87:12:CE:FD:8B:58:EE:CD:77:EB:F7:F3:76:35:06:16:88
X509v3 Authority Key Identifier:
keyid:60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/OylUhxLO_YtY7s136_fzdjUGFog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.100.45.0/24
IPv6:
2a11:c780::/29
Signature Algorithm: sha256WithRSAEncryption
4c:ed:1c:e5:91:8e:5a:ff:c3:3f:e0:ca:0a:f8:91:af:39:d4:
b8:5d:c0:fc:ec:d2:2b:6c:23:a0:67:3e:b1:3c:6c:4e:bd:25:
26:9b:90:e8:c3:fb:df:83:b0:c8:da:61:de:e5:5b:76:03:b2:
8d:16:4b:80:c2:6b:bd:1f:7c:9a:44:f6:20:f2:f5:1a:20:92:
41:c6:ba:e2:b3:bc:ba:50:50:c0:ca:9b:7f:32:a5:cb:f4:1f:
87:0e:a6:b4:05:f1:3b:74:9a:b0:94:38:c1:56:f8:56:df:90:
6e:2c:96:8b:bf:0b:b0:75:e0:44:2d:c8:c4:9f:63:d4:3d:90:
36:c1:d6:05:e3:73:9e:f9:49:b9:28:a8:b9:c4:8e:f4:c6:94:
f7:99:ba:5c:93:bf:4c:df:24:5d:c2:e5:c9:9c:55:a6:ab:56:
cc:fc:f3:d2:16:47:ef:13:2a:5a:b7:b4:ce:0c:e8:3a:3e:17:
5c:bf:f3:c2:91:57:7e:3c:2f:49:93:6b:ad:8a:d1:4d:ac:26:
af:c4:a6:67:24:e4:6d:c0:19:56:34:16:b9:e4:8f:1a:5d:eb:
ec:3c:2d:d5:12:42:25:2f:08:c5:03:8e:f0:8e:67:04:7e:5d:
dd:64:54:50:fd:15:12:b5:e8:2c:01:07:db:60:11:1a:61:51:
80:b2:28:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:03:39 2025 by rpki-client