Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/15PrpSithgjvqoySrqVID4MyliM.roa
File: 15PrpSithgjvqoySrqVID4MyliM.roa (raw, json)
Hash identifier: QawCItUvEXvKGFmWsOjzuundZjUsEUg+G1443VzJElA=
Subject key identifier: D7:93:EB:A5:28:AD:86:08:EF:AA:8C:92:AE:A5:48:0F:83:32:96:23
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0428DFB2
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/15PrpSithgjvqoySrqVID4MyliM.roa
Signing time: Sat 01 Jan 2022 12:04:55 +0000
ROA not before: Sat 01 Jan 2022 12:04:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 45027
IP address blocks: 193.233.62.0/24 maxlen: 24
193.233.170.0/24 maxlen: 24
193.233.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69787570 (0x428dfb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 12:04:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d793eba528ad8608efaa8c92aea5480f83329623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:af:22:0d:0a:05:72:3f:6c:ef:72:a0:eb:
4d:68:a1:2a:b2:b1:88:22:70:00:ce:2f:03:1b:58:
c2:2c:03:26:32:76:9e:af:33:7d:f9:a4:2c:81:33:
05:23:b7:61:ac:8e:fd:5b:48:6a:75:47:5a:88:17:
41:7e:5f:4b:8d:e6:4c:dc:c8:6c:27:1e:b8:e6:c3:
81:ca:91:13:d3:15:0f:5e:a5:84:51:77:5e:a1:be:
b7:fb:4b:16:0f:ce:51:0d:57:95:33:51:bb:6b:8f:
33:44:83:22:e9:c8:92:95:69:16:49:51:e4:e3:23:
41:2a:80:52:b0:3a:ab:9f:34:7e:be:b6:e5:84:72:
62:ba:e7:fb:9e:e7:50:d7:8a:bd:6c:f0:ed:97:c6:
ec:bb:e0:02:03:4e:4c:fa:38:3f:38:19:b8:ce:77:
99:2b:76:63:c2:ec:0d:11:bd:82:94:fd:f7:18:27:
e9:70:b5:81:f3:61:1b:62:1a:01:48:bd:08:14:4d:
75:da:ff:6d:b4:e8:f1:56:13:ad:d3:1b:f2:d1:b3:
e7:6f:13:62:a5:33:6f:04:c5:29:69:3c:01:51:d6:
3d:b8:b1:69:19:19:33:51:00:fa:34:03:66:53:40:
dc:17:48:7b:ae:3c:ec:2b:b4:8a:8c:06:6e:c0:ac:
89:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:93:EB:A5:28:AD:86:08:EF:AA:8C:92:AE:A5:48:0F:83:32:96:23
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/15PrpSithgjvqoySrqVID4MyliM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.60.0/24
193.233.62.0/24
193.233.170.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ac:e8:32:7a:79:66:8d:73:82:cf:bf:e1:c8:be:06:32:3b:
08:1a:f8:cb:65:13:60:da:64:92:ff:84:4d:69:7b:06:bb:44:
0c:f4:fb:22:47:0e:a9:6a:63:60:e8:27:b2:d9:90:6d:aa:f4:
2c:fd:29:b3:2b:f2:77:ad:ea:44:24:28:97:03:af:d3:ed:49:
d0:97:2b:50:e1:c8:2f:63:77:4b:d1:3f:44:f5:43:8b:01:ba:
b7:3a:d9:36:c9:77:33:18:a8:ea:c8:3e:ec:aa:b3:50:8a:ec:
43:68:b6:db:04:91:ed:2c:1e:2d:f3:0d:22:87:e7:34:e4:1d:
8d:c0:4b:32:11:c6:96:84:d9:95:47:10:24:ca:4e:ec:05:26:
8e:89:a4:9c:9d:1b:0b:fc:16:94:d2:2d:ef:01:d2:b0:b3:fc:
ed:87:c3:d8:39:a9:21:be:12:dd:d6:7f:36:3f:a8:65:68:d1:
2e:f3:da:23:89:e8:c7:16:b8:f9:a8:65:66:d4:d6:8a:80:07:
b8:86:83:88:e1:45:ff:12:52:2a:95:8d:f7:f6:5b:aa:eb:3b:
63:58:b6:53:6f:b8:e6:a2:ca:45:94:77:df:9c:dc:a6:dc:a2:
45:91:92:43:cf:65:3f:41:0f:c2:19:87:19:8b:c0:09:85:06:
a3:0c:9a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:37 2023 by rpki-client on console-fra.rpki-client.org