Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/3uJQTT6Al30lToY3j6j2IqpgDwQ.roa
File: 3uJQTT6Al30lToY3j6j2IqpgDwQ.roa (raw, json)
Hash identifier: 0pNNRq91bLCiHAngnfnZLgavjyFlAuK4okIRuBKuXBo=
Subject key identifier: DE:E2:50:4D:3E:80:97:7D:25:4E:86:37:8F:A8:F6:22:AA:60:0F:04
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01854E1FC13DD275D2489AB07BB79FE0DF82
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/3uJQTT6Al30lToY3j6j2IqpgDwQ.roa
Signing time: Mon 26 Dec 2022 11:09:41 +0000
ROA not before: Mon 26 Dec 2022 11:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207713
IP address blocks: 193.233.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4e:1f:c1:3d:d2:75:d2:48:9a:b0:7b:b7:9f:e0:df:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Dec 26 11:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dee2504d3e80977d254e86378fa8f622aa600f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:96:c1:01:45:b0:1c:78:b2:76:d2:0a:c2:
2d:14:66:3c:24:3d:1f:6d:bd:d8:da:99:c2:e4:04:
9e:af:d0:ed:56:37:08:40:37:ed:45:68:b6:ed:aa:
4b:98:29:a1:b0:47:87:89:3d:83:77:9b:31:8a:5e:
e3:dc:14:58:93:5d:ec:05:4f:90:88:85:55:de:12:
41:b1:aa:f8:9a:85:ac:1f:c3:34:af:ec:00:00:5e:
66:e2:78:ca:b0:f2:f5:11:ad:3c:07:b5:c2:44:79:
3e:2c:d2:97:77:31:4f:16:2b:1b:2f:8e:71:83:da:
9f:c1:df:d8:ab:4f:79:a2:1e:dc:a8:f5:3f:b9:f3:
3d:c6:b1:90:fa:a3:e5:77:ce:9d:4d:0b:55:45:73:
ea:0c:54:b8:69:03:92:50:4a:51:62:29:8b:02:2c:
8f:9c:f0:90:8c:8f:dc:d2:30:3c:a3:0f:93:4f:5b:
97:57:a5:4c:8d:33:e2:fe:c2:c6:de:c5:a6:f4:f5:
02:14:bb:96:9b:81:f0:18:f2:f1:7f:fb:8e:d2:4b:
e1:02:45:be:fa:89:eb:47:b9:66:99:da:cd:c4:84:
d9:df:22:7a:9e:36:0f:4b:69:c6:02:0f:f1:5c:36:
c8:3a:33:b5:21:ef:ae:36:22:5f:2d:77:63:cf:b4:
e6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E2:50:4D:3E:80:97:7D:25:4E:86:37:8F:A8:F6:22:AA:60:0F:04
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/3uJQTT6Al30lToY3j6j2IqpgDwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.49.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d4:6a:61:90:5f:f8:c5:74:34:12:89:2e:e0:81:58:f5:96:
b7:63:48:92:ed:4b:14:dd:16:98:92:92:a0:c3:0e:9c:86:5a:
97:1e:d1:d1:9d:48:9f:32:24:2b:fb:f7:b9:8e:ab:3e:24:48:
5b:83:f5:46:d3:1c:30:ab:25:96:83:05:df:07:e9:e4:21:9c:
1b:53:9a:a0:f2:a9:4a:6b:ff:6f:96:fd:a1:4b:bc:38:04:4f:
40:32:98:01:84:c0:45:d6:b7:e9:f8:5b:44:3d:b2:88:cd:21:
11:69:cf:bb:04:91:3f:b5:af:28:bd:71:f4:d2:86:87:98:91:
8a:8c:ec:af:ba:f5:98:0c:9a:44:bb:31:9e:80:0c:f2:31:f5:
93:bf:cc:c8:69:8b:1c:9b:76:60:ac:12:33:fa:66:5c:cf:da:
00:c4:94:37:9c:4b:8a:6a:d1:a1:48:36:29:95:bb:46:d9:ca:
67:f7:ff:d9:fd:8f:79:2f:d1:5f:42:d2:b2:fe:04:6d:cf:18:
be:c7:4e:3e:d1:53:c8:91:39:34:fa:98:89:52:ce:4f:c4:9d:
93:e3:7a:51:6f:b3:95:9d:da:bc:1b:db:26:f6:d5:1e:e6:8b:
38:11:40:55:56:c4:c8:07:66:f4:b5:46:b7:9e:aa:51:39:41:
4b:ff:06:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:32 2024 by rpki-client on console-ams.rpki-client.org