Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/27Gesu_NLP1JkCFL-nEM5M9L9-c.roa
File: 27Gesu_NLP1JkCFL-nEM5M9L9-c.roa (raw, json)
Hash identifier: gHgotXSIsqg7tZIi4Gs+WwZgVT7JsJP3UmE6TqNaz50=
Subject key identifier: DB:B1:9E:B2:EF:CD:2C:FD:49:90:21:4B:FA:71:0C:E4:CF:4B:F7:E7
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0183554ECA71F12BDED6876FF22A8592FEA6
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/27Gesu_NLP1JkCFL-nEM5M9L9-c.roa
Signing time: Mon 19 Sep 2022 10:32:50 +0000
ROA not before: Mon 19 Sep 2022 10:32:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26548
IP address blocks: 193.233.228.0/22 maxlen: 22
193.233.136.0/22 maxlen: 22
193.233.140.0/22 maxlen: 22
193.233.82.0/23 maxlen: 23
193.233.208.0/23 maxlen: 23
193.233.210.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:55:4e:ca:71:f1:2b:de:d6:87:6f:f2:2a:85:92:fe:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Sep 19 10:32:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbb19eb2efcd2cfd4990214bfa710ce4cf4bf7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:f6:82:15:1e:c7:75:6c:37:e6:57:47:cd:
fe:e7:a3:59:af:19:ba:7b:a6:81:0e:b7:67:86:bd:
9b:c9:59:1f:3b:3e:bd:d9:64:c3:bc:d0:98:87:3a:
81:11:19:35:77:73:09:17:a6:e5:94:b8:24:a7:ce:
6b:7d:9c:b5:2a:b5:61:f0:5a:90:15:fa:82:9d:8c:
7c:58:aa:ed:20:09:ca:ba:54:b1:21:08:1f:20:1d:
19:73:77:83:7c:0b:b4:27:c9:f6:e2:fb:4b:2a:a7:
6e:f4:c8:e3:7a:c7:af:11:4e:6d:b0:49:f4:49:bd:
cc:33:49:54:89:b4:85:a4:df:cc:cc:6f:66:7a:b4:
8a:fb:92:3a:69:e6:bc:04:90:40:a4:4d:3e:24:50:
d8:f4:76:7c:50:e3:be:7e:66:eb:25:94:1f:f6:26:
32:b9:65:61:f7:fa:bb:41:b6:b4:f9:d6:35:58:dc:
ca:c7:29:30:c7:06:ad:fa:21:e6:e9:0a:a0:40:31:
92:54:18:6b:b2:68:1e:06:9c:9b:2a:16:09:51:89:
05:5b:6b:f5:b1:15:6d:28:39:2c:fd:9a:18:f3:01:
00:a5:96:73:6d:68:bd:96:2b:64:39:75:19:39:e6:
42:08:62:4d:48:b5:62:20:d0:6f:b8:33:a5:09:ba:
b4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B1:9E:B2:EF:CD:2C:FD:49:90:21:4B:FA:71:0C:E4:CF:4B:F7:E7
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/27Gesu_NLP1JkCFL-nEM5M9L9-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.82.0/23
193.233.136.0/21
193.233.208.0/22
193.233.228.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:f1:5a:fb:d5:35:3c:3c:1f:6f:ab:2f:46:ee:9e:1e:57:de:
94:74:04:23:2b:75:1c:f5:58:c5:46:e7:61:45:7d:77:a7:be:
6d:ec:4a:99:19:dd:32:3d:75:35:fb:91:36:79:dc:fa:88:52:
ea:a3:7d:6d:28:5c:66:92:48:c7:36:f1:8a:d6:2b:58:e9:53:
c9:71:82:77:17:b8:2c:d7:f1:07:b9:26:1c:02:21:f6:88:4c:
10:8d:0c:20:89:d7:2b:c0:8a:c0:b3:17:c0:f2:b4:88:da:e8:
97:88:f4:2f:ae:25:22:7b:1c:0b:20:70:8c:77:1f:d3:6b:f9:
c7:16:e1:63:b0:10:70:47:14:8c:52:03:46:58:f2:3c:11:84:
2d:2e:04:83:ed:d3:cf:32:01:be:2f:97:8b:aa:f5:aa:21:9f:
53:14:a2:c2:fb:38:54:ce:e1:99:30:f1:7c:1b:4b:68:33:42:
84:58:33:17:fa:45:64:2f:3e:1b:25:f3:a7:d1:db:57:f3:7a:
a0:fd:eb:cf:4f:3d:5d:ce:6a:d8:54:83:b8:4b:a2:2f:39:ab:
88:fd:8c:2a:bd:fa:6f:5b:e1:67:3b:4d:2c:05:b5:b7:83:2f:
da:02:b2:ab:92:b2:e9:7f:8e:16:85:98:de:06:c4:96:e1:21:
54:37:8b:a1
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYNVTspx8Sve1odv8iqFkv6mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjIwOTE5MTAzMjUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmIxOWViMmVmY2QyY2ZkNDk5MDIxNGJmYTcxMGNlNGNmNGJmN2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGX2ghUex3VsN+ZXR83+56NZrxm6
e6aBDrdnhr2byVkfOz692WTDvNCYhzqBERk1d3MJF6bllLgkp85rfZy1KrVh8FqQ
FfqCnYx8WKrtIAnKulSxIQgfIB0Zc3eDfAu0J8n24vtLKqdu9MjjesevEU5tsEn0
Sb3MM0lUibSFpN/MzG9merSK+5I6aea8BJBApE0+JFDY9HZ8UOO+fmbrJZQf9iYy
uWVh9/q7Qba0+dY1WNzKxykwxwat+iHm6QqgQDGSVBhrsmgeBpybKhYJUYkFW2v1
sRVtKDks/ZoY8wEApZZzbWi9litkOXUZOeZCCGJNSLViINBvuDOlCbq0mQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNuxnrLvzSz9SZAhS/pxDOTPS/fnMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvMjdHZXN1X05MUDFKa0NGTC1uRU01TTlMOS1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBwelSAwQD
wemIAwQCwenQAwQCwenkMA0GCSqGSIb3DQEBCwUAA4IBAQBt8Vr71TU8PB9vqy9G
7p4eV96UdAQjK3Uc9VjFRudhRX13p75t7EqZGd0yPXU1+5E2edz6iFLqo31tKFxm
kkjHNvGK1itY6VPJcYJ3F7gs1/EHuSYcAiH2iEwQjQwgidcrwIrAsxfA8rSI2uiX
iPQvriUiexwLIHCMdx/Ta/nHFuFjsBBwRxSMUgNGWPI8EYQtLgSD7dPPMgG+L5eL
qvWqIZ9TFKLC+zhUzuGZMPF8G0toM0KEWDMX+kVkLz4bJfOn0dtX83qg/evPTz1d
zmrYVIO4S6IvOauI/YwqvfpvW+FnO00sBbW3gy/aArKrkrLpf44WhZjeBsSW4SFU
N4uh
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:30 2023 by rpki-client on console-ams.rpki-client.org