Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/4pcjCo9UN3UerCP06h6QtqKxxTM.roa
File: 4pcjCo9UN3UerCP06h6QtqKxxTM.roa (raw, json)
Hash identifier: HW7YZA7BoTA3jssyXlJCrYRzNAcfIPFrozSk6JzOqtY=
Subject key identifier: E2:97:23:0A:8F:54:37:75:1E:AC:23:F4:EA:1E:90:B6:A2:B1:C5:33
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0429B11C
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/4pcjCo9UN3UerCP06h6QtqKxxTM.roa
Signing time: Sat 01 Jan 2022 12:04:56 +0000
ROA not before: Sat 01 Jan 2022 12:04:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48430
IP address blocks: 193.233.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69841180 (0x429b11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 12:04:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e297230a8f5437751eac23f4ea1e90b6a2b1c533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:9c:4c:e5:af:86:a8:50:6a:f2:35:73:fe:
6d:64:0e:7b:e7:e7:5b:97:15:a8:7e:c9:d5:23:c9:
51:39:9e:1f:84:ea:ef:b9:f9:36:5a:5a:cf:ab:d8:
3b:e7:cc:04:4c:43:3e:0a:f0:55:2f:91:ee:d5:d9:
0b:0b:74:5e:d0:6e:88:42:15:c9:e0:58:5c:49:c8:
cf:6c:2f:96:9c:aa:13:7b:10:1a:59:e6:d4:fd:b9:
ee:79:a9:a7:3a:3f:f1:16:f0:55:6a:36:23:23:1c:
1c:81:27:f9:73:64:f0:7f:53:9b:7c:f3:40:78:48:
3f:a6:74:e9:8d:a9:2d:65:f7:73:a0:d6:63:9f:3b:
04:88:8c:e2:40:2b:e1:62:3b:e0:d6:2d:d0:d7:8f:
e0:6b:97:5d:af:d1:b3:bb:74:4c:83:b4:b5:a6:e4:
00:20:50:62:f5:2a:5b:56:16:b6:ad:b4:65:15:05:
39:8e:8b:42:83:33:2b:32:43:6d:35:d2:d9:e6:5d:
16:7c:28:be:14:10:0a:09:53:d5:0d:d6:d0:00:6a:
f8:2a:2c:c5:9e:45:a2:5e:dc:68:94:7a:53:69:55:
0a:9a:78:90:3a:c3:0e:b1:c8:e2:78:a1:48:e9:c1:
b3:12:98:ca:f3:1d:a2:a6:19:69:e4:e4:95:36:c0:
af:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:97:23:0A:8F:54:37:75:1E:AC:23:F4:EA:1E:90:B6:A2:B1:C5:33
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/4pcjCo9UN3UerCP06h6QtqKxxTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.47.0/24
Signature Algorithm: sha256WithRSAEncryption
99:6c:b9:85:97:13:cb:ea:dd:df:64:42:c5:04:f6:88:05:6e:
aa:f8:b7:aa:1b:55:61:f9:52:34:f7:70:d7:2a:d7:f2:1d:ea:
a0:48:46:65:65:c9:ff:90:f4:5c:82:f1:eb:4a:5a:be:ca:5e:
d6:68:ba:fb:c2:5f:db:ff:74:63:92:ca:84:44:b3:de:9f:83:
93:50:e1:42:c4:19:86:b7:ed:e0:09:8d:7d:9f:16:f6:fa:cc:
95:6c:d6:54:18:da:c1:80:2a:2b:ab:9b:e9:d4:49:eb:ab:bb:
f0:b6:82:7f:c8:a8:e0:46:28:4b:87:e6:cf:53:99:10:25:75:
37:30:32:f8:18:0a:4a:a1:9a:4c:98:52:1e:5c:e1:48:fb:7e:
56:4f:af:cb:a6:fa:98:25:50:72:d4:34:7d:71:69:6c:63:88:
51:44:53:87:4c:c3:f9:b8:a3:1e:f1:7f:bc:77:b9:c7:cc:d1:
41:59:35:3e:43:42:40:d1:71:03:a8:bd:b5:47:58:9c:41:ee:
9b:c7:c4:d4:48:2c:36:e5:bf:7d:44:e0:45:68:d2:b1:76:7b:
ed:ab:5e:eb:d4:c8:1e:f9:ee:e6:92:0f:39:3d:6a:48:d9:9d:
de:08:0e:d2:32:05:68:40:80:ea:72:8c:34:15:92:e9:9a:39:
00:8a:72:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:30 2023 by rpki-client on console-ams.rpki-client.org