Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/OBu12b9DO4URubq5uQYTNP7ict0.roa
File: OBu12b9DO4URubq5uQYTNP7ict0.roa (raw, json)
Hash identifier: 5NqGbQTrDp4Hu4Gg7Yp8K5Y610wuXA9BTZMdcRIDbbM=
Subject key identifier: 38:1B:B5:D9:BF:43:3B:85:11:B9:BA:B9:B9:06:13:34:FE:E2:72:DD
Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Certificate serial: 01855903884DFF721757BE739356D560F570
Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/OBu12b9DO4URubq5uQYTNP7ict0.roa
Signing time: Wed 28 Dec 2022 13:54:41 +0000
ROA not before: Wed 28 Dec 2022 13:54:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 193.193.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:59:03:88:4d:ff:72:17:57:be:73:93:56:d5:60:f5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8
Validity
Not Before: Dec 28 13:54:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=381bb5d9bf433b8511b9bab9b9061334fee272dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ba:42:d7:2d:8c:90:fa:e4:d4:c2:9e:f1:f6:
39:22:30:ec:21:70:95:91:c5:dd:6a:9a:a0:dc:c9:
e1:5e:fd:ea:59:1e:77:8b:37:07:4c:ae:dc:94:6f:
ff:86:d0:2f:d9:39:f2:17:d1:cb:d5:f8:fc:3d:07:
45:59:76:6c:ea:3c:e2:0a:62:6e:a6:05:63:cd:a3:
0b:92:48:3d:f9:10:41:66:97:79:cd:16:82:2c:bf:
1b:73:8a:57:32:fb:58:c4:5c:5a:d8:ef:32:c7:69:
74:9f:a9:5b:95:46:46:7c:b1:1d:53:dc:c1:46:0e:
27:97:2e:ff:de:6b:83:3d:2b:31:b4:2f:8f:4c:8d:
ad:0c:a6:9b:0e:c0:b5:20:3e:54:96:fd:ea:d0:88:
07:34:e8:65:53:4c:c8:f6:99:1a:08:61:e5:ac:7b:
74:cb:d9:7c:e9:66:62:32:7a:2a:f5:83:1f:98:5a:
39:92:0e:33:b7:d0:43:fe:ad:eb:2d:3f:6b:5c:1c:
93:1f:15:42:13:a4:58:ce:73:d2:dd:46:f8:dc:88:
f4:7a:89:7b:bc:43:fe:f0:a5:b0:29:c2:85:c0:90:
a6:c1:72:0e:eb:6b:c6:c7:86:5a:80:28:71:a9:4a:
99:9e:78:d5:a0:fe:be:bc:f6:ee:3d:74:08:4a:04:
ee:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1B:B5:D9:BF:43:3B:85:11:B9:BA:B9:B9:06:13:34:FE:E2:72:DD
X509v3 Authority Key Identifier:
keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/OBu12b9DO4URubq5uQYTNP7ict0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.193.188.0/24
Signature Algorithm: sha256WithRSAEncryption
40:6b:3c:ce:12:67:f5:d1:b7:f7:1f:c8:98:e8:d7:5e:fb:6b:
80:08:12:57:ba:ea:24:d5:51:05:d3:48:77:77:98:bd:cd:a1:
2d:38:f8:fa:6e:97:87:56:7c:e5:38:c2:c5:8f:64:87:14:b6:
48:c9:de:5c:82:1a:dd:e3:00:75:e5:5c:17:9f:08:5d:2f:37:
5b:4b:a0:91:bc:09:ce:2a:5f:2c:ef:6a:ed:fb:e1:d3:ed:a4:
4a:ea:c4:75:1b:f7:7e:cd:05:a4:24:b2:e4:7b:ad:1b:e2:dc:
3a:d0:1c:d3:be:cc:a5:31:6e:56:0b:1b:ce:25:cf:0c:38:39:
3f:15:2f:66:8e:39:72:0b:5c:cd:78:80:86:d1:66:38:9e:c1:
22:ff:a0:02:9f:43:b0:08:18:22:5e:d2:bf:1c:92:88:0e:f0:
a0:42:08:e9:49:96:bf:80:20:17:0e:58:5b:7a:97:c8:94:1a:
eb:e1:59:af:a1:6b:8b:89:ba:f0:52:7b:ef:d0:c6:c7:01:d0:
10:83:a9:39:8e:cd:b0:d3:eb:2a:ea:86:c9:36:76:d1:a5:8f:
92:eb:72:80:f6:0d:c6:ec:3a:cb:06:8f:98:44:45:b8:dc:e3:
f2:fb:85:b4:b0:47:54:2b:09:3d:f0:f8:75:be:d0:a1:91:c9:
0e:b0:a5:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVZA4hN/3IXV75zk1bVYPVwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZTZkNTI4NzRhMGM4ZWRiZWE5YzgxYzQyMDY3NmI2MTRl
YTI5YzgwHhcNMjIxMjI4MTM1NDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODFiYjVkOWJmNDMzYjg1MTFiOWJhYjliOTA2MTMzNGZlZTI3MmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7pC1y2MkPrk1MKe8fY5IjDsIXCV
kcXdapqg3MnhXv3qWR53izcHTK7clG//htAv2TnyF9HL1fj8PQdFWXZs6jziCmJu
pgVjzaMLkkg9+RBBZpd5zRaCLL8bc4pXMvtYxFxa2O8yx2l0n6lblUZGfLEdU9zB
Rg4nly7/3muDPSsxtC+PTI2tDKabDsC1ID5Ulv3q0IgHNOhlU0zI9pkaCGHlrHt0
y9l86WZiMnoq9YMfmFo5kg4zt9BD/q3rLT9rXByTHxVCE6RYznPS3Ub43Ij0eol7
vEP+8KWwKcKFwJCmwXIO62vGx4ZagChxqUqZnnjVoP6+vPbuPXQISgTu7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDgbtdm/QzuFEbm6ubkGEzT+4nLdMB8GA1UdIwQY
MBaAFAvm1Sh0oMjtvqnIHEIGdrYU6inIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yZGY2YWYtZWRjMy00OThlLWE1ZmQt
MDkzMDNlNDE4ZTdkLzEvT0J1MTJiOURPNFVSdWJxNXVRWVROUDdpY3QwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yZGY2YWYtZWRjMy00OThlLWE1ZmQtMDkzMDNlNDE4ZTdk
LzEvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcG8MA0G
CSqGSIb3DQEBCwUAA4IBAQBAazzOEmf10bf3H8iY6Nde+2uACBJXuuok1VEF00h3
d5i9zaEtOPj6bpeHVnzlOMLFj2SHFLZIyd5cghrd4wB15VwXnwhdLzdbS6CRvAnO
Kl8s72rt++HT7aRK6sR1G/d+zQWkJLLke60b4tw60BzTvsylMW5WCxvOJc8MODk/
FS9mjjlyC1zNeICG0WY4nsEi/6ACn0OwCBgiXtK/HJKIDvCgQgjpSZa/gCAXDlhb
epfIlBrr4VmvoWuLibrwUnvv0MbHAdAQg6k5js2w0+sq6obJNnbRpY+S63KA9g3G
7DrLBo+YREW43OPy+4W0sEdUKwk98Ph1vtChkckOsKUO
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:54 2023 by rpki-client on console-ams.rpki-client.org