Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/SLexR82pm8sQJnI2EA3rpfExyPA.roa
File: SLexR82pm8sQJnI2EA3rpfExyPA.roa (raw, json)
Hash identifier: LyhIATTIfK+cBw/MqMHuyJaERnVf87SLyfdijYDZOyQ=
Subject key identifier: 48:B7:B1:47:CD:A9:9B:CB:10:26:72:36:10:0D:EB:A5:F1:31:C8:F0
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 01851078E0EEA5DF52471682E63138804E3A
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/SLexR82pm8sQJnI2EA3rpfExyPA.roa
Signing time: Wed 14 Dec 2022 11:50:35 +0000
ROA not before: Wed 14 Dec 2022 11:50:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42398
IP address blocks: 185.193.58.0/24 maxlen: 24
185.193.57.0/24 maxlen: 24
185.193.56.0/24 maxlen: 24
185.193.56.0/22 maxlen: 22
185.193.59.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:10:78:e0:ee:a5:df:52:47:16:82:e6:31:38:80:4e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Dec 14 11:50:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48b7b147cda99bcb10267236100deba5f131c8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:94:69:90:29:98:c8:b2:d1:ba:08:a0:79:ae:
8c:26:40:d5:5e:11:b2:bc:e8:c8:24:e6:0f:1e:02:
b8:fd:20:83:a7:a7:55:0e:cb:16:b5:37:12:7c:36:
6c:a9:d7:09:64:f0:0f:14:8c:88:48:ce:dc:6e:f6:
8f:67:d8:44:e4:e5:15:22:38:30:37:75:95:45:58:
1f:0f:16:bb:f9:e6:fe:02:de:fd:33:d0:87:90:aa:
16:ea:28:8e:20:e2:03:71:d2:58:45:5b:27:72:14:
9c:70:15:0c:3e:25:59:94:b7:59:0a:92:6d:e7:f5:
e4:02:52:df:87:24:28:11:6b:60:0b:7f:aa:e6:05:
52:80:83:26:1b:24:e8:06:26:aa:8a:bf:ae:54:9b:
9c:74:bd:50:2d:dc:7d:15:13:26:ff:ca:b8:79:06:
b8:e1:e4:d9:e7:bf:e7:8c:0f:d6:4b:a0:53:a2:18:
c1:22:8d:14:1e:91:c7:d0:90:41:a9:7f:d2:d2:89:
38:3a:08:f7:d4:f6:70:1d:7c:8a:7d:73:a7:65:4f:
68:bf:15:a0:db:8e:a5:73:41:27:1d:27:3c:de:0c:
33:32:3a:2e:11:58:ce:3a:cd:cf:2f:e1:c7:be:5f:
b8:3a:65:b1:e5:24:35:5b:a4:54:c0:17:64:3f:a5:
61:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B7:B1:47:CD:A9:9B:CB:10:26:72:36:10:0D:EB:A5:F1:31:C8:F0
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/SLexR82pm8sQJnI2EA3rpfExyPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.56.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:ba:b5:3f:f1:43:0c:7f:be:7f:18:1b:dc:43:49:86:64:15:
5d:97:55:35:b3:1b:96:e8:d2:71:d6:25:44:19:a9:16:99:b9:
3c:90:be:c9:92:29:1c:ba:96:cb:45:47:95:cb:dc:2c:a5:65:
8c:9f:16:e7:ac:f2:60:38:7a:40:72:44:80:59:63:0f:ae:5f:
02:37:07:f4:58:31:38:55:ef:0c:51:17:1c:22:06:7a:ae:c5:
6c:10:e1:e7:0a:2c:2a:d0:e5:ed:b5:1a:ae:b6:0b:ed:04:07:
f0:54:eb:5f:e6:cd:7d:53:be:ca:27:a7:bf:8c:6e:d8:82:01:
3d:92:80:21:09:5e:2d:20:68:78:c5:44:3c:3b:86:84:ce:91:
c8:ce:7c:0f:47:a4:21:bb:4d:3f:7c:3e:1d:fc:d9:07:21:df:
32:14:d7:7f:9b:26:bc:e1:36:70:aa:59:5b:06:51:60:95:2d:
f6:6c:87:07:17:5c:7d:81:1c:01:89:f4:79:27:62:67:4a:8b:
0e:7e:9b:d1:68:3d:5e:13:94:69:98:29:28:02:62:2d:44:c6:
26:5f:29:cc:9f:15:f3:82:aa:76:f0:09:ba:0e:bc:ee:81:10:
00:52:45:67:38:ff:3d:e2:30:26:6c:c5:b8:cb:d5:77:49:f7:
c5:c0:d4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:16 2024 by rpki-client on console-ams.rpki-client.org