Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/OIvvGv3zGDQjGQ21J6uTsc0sdFk.roa
File: OIvvGv3zGDQjGQ21J6uTsc0sdFk.roa (raw, json)
Hash identifier: OQ/b5vetYnOpM9asOg9x3aciZCTXu3cOMpEKTGxKXTE=
Subject key identifier: 38:8B:EF:1A:FD:F3:18:34:23:19:0D:B5:27:AB:93:B1:CD:2C:74:59
Certificate issuer: /CN=58e408c857c7f825ff77bc91eca7ffc921ad4dff
Certificate serial: 0185577F592F3DFF586A6F692D5407BE3B39
Authority key identifier: 58:E4:08:C8:57:C7:F8:25:FF:77:BC:91:EC:A7:FF:C9:21:AD:4D:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/OIvvGv3zGDQjGQ21J6uTsc0sdFk.roa
Signing time: Wed 28 Dec 2022 06:50:41 +0000
ROA not before: Wed 28 Dec 2022 06:50:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207092
IP address blocks: 185.193.15.0/24 maxlen: 24
185.193.12.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:57:7f:59:2f:3d:ff:58:6a:6f:69:2d:54:07:be:3b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e408c857c7f825ff77bc91eca7ffc921ad4dff
Validity
Not Before: Dec 28 06:50:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=388bef1afdf3183423190db527ab93b1cd2c7459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:65:32:51:d7:fd:9c:fc:f5:80:9d:80:38:de:
c0:dd:fd:cc:4f:38:d1:82:3a:4a:fb:23:82:32:a4:
11:13:e0:f2:87:a7:4d:ec:09:0e:ff:b6:3a:d6:56:
67:fc:54:e3:4f:ea:8d:c7:54:e9:68:ca:6e:b8:4c:
a9:ec:ed:f2:52:a4:e5:c3:57:26:1c:3c:31:ae:26:
79:0a:40:87:6b:33:15:66:7d:27:f6:e4:41:5d:c5:
31:d2:44:99:2b:87:d8:43:2d:21:70:e0:53:dd:e1:
4e:ad:34:1d:07:59:0d:65:1e:b2:eb:89:56:4a:40:
c9:91:f2:f3:cd:49:96:a8:e1:7a:82:09:0f:d6:b5:
ff:4a:78:31:f7:a4:40:e4:c7:f7:30:88:fd:ce:14:
d2:a5:49:c3:d7:ea:0d:54:09:ad:2e:d6:e0:fe:e3:
98:46:97:32:c8:64:31:ce:8f:38:bf:ca:5b:75:9e:
6b:2e:ea:75:96:ab:2c:26:f3:6d:f9:3f:80:c0:d8:
a5:ed:bc:b6:07:82:1e:91:98:95:a0:63:a3:2c:b6:
73:b5:74:f3:95:18:b0:5c:ec:03:24:c3:ad:85:a9:
5b:18:33:80:b7:3b:c8:32:cc:20:f0:02:cc:3e:c2:
a1:63:e3:5b:8d:49:70:41:88:45:f3:69:cc:0e:cf:
62:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8B:EF:1A:FD:F3:18:34:23:19:0D:B5:27:AB:93:B1:CD:2C:74:59
X509v3 Authority Key Identifier:
keyid:58:E4:08:C8:57:C7:F8:25:FF:77:BC:91:EC:A7:FF:C9:21:AD:4D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/OIvvGv3zGDQjGQ21J6uTsc0sdFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9da366-fb0a-43a7-83ba-c983b1fed79e/1/WOQIyFfH-CX_d7yR7Kf_ySGtTf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.12.0/23
185.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
14:96:30:57:e4:73:2f:d0:95:dd:16:4c:5c:7b:4f:76:43:d8:
c6:db:e9:eb:fc:f6:c4:15:63:bb:c2:4d:93:3c:7e:a2:22:65:
d1:3a:cf:83:c0:8c:8c:4b:39:d2:5a:02:63:a3:4d:9f:4d:18:
a4:c7:f4:d0:67:de:32:61:cd:9a:71:86:8c:6c:ba:1b:b1:23:
55:35:1f:6c:cc:e9:76:b0:60:7d:27:33:0c:d5:78:b6:41:9e:
fe:1b:44:94:ea:27:bb:7e:13:ce:dc:fa:1d:c6:d5:12:ee:0a:
e8:4c:7c:62:6d:69:7c:1c:2f:34:ed:fa:b9:5b:54:4f:0e:45:
9a:af:68:83:e4:3d:05:72:75:bf:d5:b9:dd:99:8f:12:5b:32:
aa:20:d4:c7:41:6e:da:93:a1:67:33:be:ea:12:b0:24:35:d4:
8a:bf:0e:57:fb:9e:c7:27:84:dd:df:84:73:f4:88:05:73:7e:
9b:de:9a:24:53:c3:51:95:30:c2:cf:06:d6:33:cb:43:62:18:
75:e9:0a:fd:21:59:53:60:85:c9:00:19:40:35:5a:73:74:27:
e1:cd:76:05:c2:5a:bc:4c:af:10:8e:4d:df:9f:a0:75:68:bc:
b5:8f:87:d5:47:5d:02:bc:93:39:92:bc:ee:e5:84:d0:2a:5d:
d4:e9:2b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:28 2024 by rpki-client on console-ams.rpki-client.org