Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/0vxbY_WjinZWC49yBEu8_mmL8qI.roa
File: 0vxbY_WjinZWC49yBEu8_mmL8qI.roa (raw, json)
Hash identifier: WZ4TtDYjUo3eo8vouc1r7wtEINYjDz8Y3x9LAlpqh/k=
Subject key identifier: D2:FC:5B:63:F5:A3:8A:76:56:0B:8F:72:04:4B:BC:FE:69:8B:F2:A2
Certificate issuer: /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Certificate serial: 08C051E0
Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/0vxbY_WjinZWC49yBEu8_mmL8qI.roa
Signing time: Sat 01 Jan 2022 11:57:03 +0000
ROA not before: Sat 01 Jan 2022 11:57:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206334
IP address blocks: 185.189.93.0/24 maxlen: 24
185.189.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146821600 (0x8c051e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Validity
Not Before: Jan 1 11:57:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2fc5b63f5a38a76560b8f72044bbcfe698bf2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:06:18:36:30:46:86:8f:89:7a:52:d6:97:43:
d6:50:03:b1:8b:e1:ff:a7:d8:ce:76:0c:f8:d1:2c:
47:1b:e8:b6:bc:72:40:1f:d8:9b:66:e9:ba:fc:d3:
ec:16:a2:35:06:94:59:a3:e7:3b:2c:4b:90:c2:72:
32:c5:d7:ad:66:e8:f7:3c:a5:23:52:81:73:a8:8c:
13:37:bc:c5:e1:e0:46:f3:64:f8:ab:77:db:c8:ba:
ba:56:86:4a:72:3e:48:85:77:9b:28:9b:b5:ac:25:
d5:a3:c1:0e:11:de:62:8e:15:17:16:1a:66:bc:79:
9f:77:46:fe:c8:d9:dc:bf:c6:e1:e9:d1:46:66:88:
06:d7:61:d3:53:75:64:e1:99:26:b9:a4:c3:38:1d:
7b:a9:c9:a9:8e:39:ff:60:4d:0a:31:ae:ac:a9:32:
0b:56:33:49:dd:e0:dd:15:6d:6c:c6:b2:4d:35:46:
20:67:b2:fc:e7:b8:df:78:b6:89:fd:89:ba:ae:4a:
bd:1d:60:aa:49:3d:b8:b7:c5:f3:52:c0:6b:1c:f8:
7d:7d:0b:b0:9f:66:4c:b4:1c:1c:61:af:d7:85:4e:
b5:34:61:06:f5:49:7b:0c:d1:be:82:7c:50:62:18:
45:a6:08:e7:e2:b3:ce:18:d9:80:03:1f:cd:ad:72:
c4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FC:5B:63:F5:A3:8A:76:56:0B:8F:72:04:4B:BC:FE:69:8B:F2:A2
X509v3 Authority Key Identifier:
keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/0vxbY_WjinZWC49yBEu8_mmL8qI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.92.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:51:1c:2d:c7:f7:4e:53:72:97:f2:ae:57:5b:a5:04:ad:41:
69:d9:91:fa:9a:4e:a4:01:1a:9d:2b:19:35:75:0e:ce:64:70:
ae:27:02:f4:59:f1:8d:d5:5c:d6:01:7a:dc:6c:2b:58:d0:a4:
2b:12:38:cd:51:26:c9:7f:3e:97:1e:df:44:de:88:da:26:6d:
fd:23:cc:43:a7:88:9c:03:a5:1f:e8:df:6d:57:3d:6c:08:e3:
d8:42:7b:15:35:ce:62:04:a7:87:43:70:28:46:b9:a1:0b:da:
db:d7:44:c5:a1:c8:01:51:26:18:a3:35:29:e0:0e:d9:09:cb:
93:06:99:e2:96:4a:ba:0d:dd:69:eb:e3:d7:af:94:0f:5b:74:
eb:be:66:d6:0e:eb:ee:ae:b8:9c:40:43:c2:75:40:3d:28:e1:
59:78:14:cd:57:af:a5:83:ff:24:62:b5:26:e5:03:72:e9:98:
10:49:20:5f:db:1b:6a:d2:6e:3f:ab:5a:30:12:8b:26:3e:4e:
bd:c0:53:82:b8:53:d0:62:17:b5:d4:4b:76:82:0d:d3:84:98:
85:32:31:5d:ab:2e:3c:25:e1:2b:b7:45:cd:7d:38:f4:34:90:
23:38:b6:b0:ef:cf:6e:61:74:46:00:66:63:ca:89:9d:77:c3:
b0:e5:c8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:26 2023 by rpki-client on console-fra.rpki-client.org