Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6rEF8FkMHKVJwtF2v21zslGA3OE.roa
File: 6rEF8FkMHKVJwtF2v21zslGA3OE.roa (raw, json)
Hash identifier: DXVXbcRkVMvNWiz/mBHCrzYWFjh1kayBe0hky6neCGI=
Subject key identifier: EA:B1:05:F0:59:0C:1C:A5:49:C2:D1:76:BF:6D:73:B2:51:80:DC:E1
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 04971AFE
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6rEF8FkMHKVJwtF2v21zslGA3OE.roa
Signing time: Tue 01 Feb 2022 17:24:35 +0000
ROA not before: Tue 01 Feb 2022 17:24:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207967
IP address blocks: 193.233.120.0/22 maxlen: 22
193.233.124.0/23 maxlen: 23
193.233.126.0/23 maxlen: 23
193.233.96.0/22 maxlen: 22
193.233.100.0/22 maxlen: 22
193.233.104.0/22 maxlen: 22
193.233.112.0/22 maxlen: 22
193.233.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77011710 (0x4971afe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 1 17:24:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eab105f0590c1ca549c2d176bf6d73b25180dce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e9:28:9a:4e:e1:11:66:68:05:41:4c:f5:19:
b2:48:a4:5d:8c:23:a9:3b:03:85:f5:f7:64:e3:3d:
89:3b:77:60:4c:f4:87:ca:7a:52:5d:69:46:de:b4:
d7:76:d0:9e:6c:65:0c:a8:21:6f:bd:77:a2:36:94:
19:99:4f:51:7b:07:dc:55:45:6e:08:62:a7:d6:87:
1d:f3:ee:3a:52:21:35:13:83:ac:41:08:42:c2:e2:
20:29:33:16:bb:ed:39:a4:f8:bb:94:6a:77:fe:48:
cc:e6:1b:96:08:f6:0b:34:51:c9:6e:cc:2f:09:21:
10:76:e4:5f:fc:40:5d:e4:c8:0d:26:92:40:28:06:
5b:8e:2d:94:cd:57:5b:0e:ca:f6:9a:e5:bf:6e:99:
b8:53:84:99:18:53:f8:a1:42:59:7a:e6:9a:ad:d3:
9c:46:dc:05:78:d8:66:5a:46:bc:0b:e2:66:a7:60:
73:2c:1d:45:f5:b2:e9:99:1d:b4:83:e1:90:67:57:
a0:c6:7e:24:63:ab:a6:70:66:a4:2d:59:86:53:5d:
a0:8e:3c:8b:a3:ec:ea:00:f0:fb:f8:15:99:e1:81:
71:27:e1:88:dd:7a:e3:db:fc:df:d2:ec:d1:17:a7:
47:f8:d0:76:67:d8:70:fe:40:c1:2a:4b:94:41:75:
f4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B1:05:F0:59:0C:1C:A5:49:C2:D1:76:BF:6D:73:B2:51:80:DC:E1
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6rEF8FkMHKVJwtF2v21zslGA3OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.96.0-193.233.115.255
193.233.120.0/21
Signature Algorithm: sha256WithRSAEncryption
47:f7:86:c8:56:1a:d5:bb:cd:bb:e8:c4:5a:ab:f1:4a:d7:c2:
d2:d9:24:fd:e1:22:e5:7f:7f:99:9f:69:ac:49:b8:b1:b0:2b:
9b:1d:b8:ab:cc:14:b1:f2:58:d8:77:7f:85:ca:0b:cc:30:6e:
3e:7f:f5:8c:5c:26:a5:85:8d:19:4c:5a:d1:aa:5e:a6:c8:f1:
d5:3d:1d:25:ec:4c:5c:d0:f8:0d:d6:bb:b9:d7:a8:e7:a0:bc:
67:f9:af:1c:81:b5:3b:27:a1:a5:58:c6:48:01:0a:43:d3:82:
87:f2:ab:25:3f:cc:b6:f1:1a:cc:d1:ad:ef:93:22:27:80:8f:
8c:7c:18:0d:bd:f7:a6:16:7b:15:2f:78:c3:d8:79:79:61:68:
44:06:13:75:9c:9d:7f:14:7a:d7:76:35:11:7a:69:d0:1a:bc:
96:c0:eb:d1:87:9c:f2:ef:70:db:22:46:7e:4c:60:30:ed:3b:
c3:f2:29:af:d3:83:45:b6:c2:cf:35:d4:3e:25:80:3a:a8:8f:
8c:8f:89:c4:85:85:29:f7:90:2c:d8:04:6a:5c:5f:f1:1c:ab:
b4:41:05:ee:57:97:d1:a6:b2:13:c0:47:f0:ff:3e:0e:45:eb:
e9:71:51:14:ad:c6:22:13:9c:12:2e:50:ae:93:56:e5:f0:b4:
7a:57:3d:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEBJca/jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NmQ2NDhiZGJhOTY1NDYxYjFlOGMxMWI5ZGQ0MzZjNjEzODI4NzNjMB4XDTIyMDIw
MTE3MjQzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWFiMTA1ZjA1OTBj
MWNhNTQ5YzJkMTc2YmY2ZDczYjI1MTgwZGNlMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMfpKJpO4RFmaAVBTPUZskikXYwjqTsDhfX3ZOM9iTt3YEz0
h8p6Ul1pRt6013bQnmxlDKghb713ojaUGZlPUXsH3FVFbghip9aHHfPuOlIhNROD
rEEIQsLiICkzFrvtOaT4u5Rqd/5IzOYblgj2CzRRyW7MLwkhEHbkX/xAXeTIDSaS
QCgGW44tlM1XWw7K9prlv26ZuFOEmRhT+KFCWXrmmq3TnEbcBXjYZlpGvAviZqdg
cywdRfWy6ZkdtIPhkGdXoMZ+JGOrpnBmpC1ZhlNdoI48i6Ps6gDw+/gVmeGBcSfh
iN1649v839Ls0RenR/jQdmfYcP5AwSpLlEF19FkCAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBTqsQXwWQwcpUnC0Xa/bXOyUYDc4TAfBgNVHSMEGDAWgBSG1ki9upZUYbHo
wRud1DbGE4KHPDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2h0Wkl2YnFXVkdHeDZNRWJuZFEyeGhPQ2h6dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGMvYWM1OGVhLWM0NTktNDhjYS1iODJiLTRkZWM0ZGFmZWU0OS8x
LzZyRUY4RmtNSEtWSnd0RjJ2MjF6c2xHQTNPRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMv
YWM1OGVhLWM0NTktNDhjYS1iODJiLTRkZWM0ZGFmZWU0OS8xL2h0Wkl2YnFXVkdH
eDZNRWJuZFEyeGhPQ2h6dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQFwelgAwQCwelwAwQDwel4MA0G
CSqGSIb3DQEBCwUAA4IBAQBH94bIVhrVu8276MRaq/FK18LS2ST94SLlf3+Zn2ms
SbixsCubHbirzBSx8ljYd3+FygvMMG4+f/WMXCalhY0ZTFrRql6myPHVPR0l7Exc
0PgN1ru516jnoLxn+a8cgbU7J6GlWMZIAQpD04KH8qslP8y28RrM0a3vkyIngI+M
fBgNvfemFnsVL3jD2Hl5YWhEBhN1nJ1/FHrXdjURemnQGryWwOvRh5zy73DbIkZ+
TGAw7TvD8imv04NFtsLPNdQ+JYA6qI+Mj4nEhYUp95As2ARqXF/xHKu0QQXuV5fR
prITwEfw/z4ORevpcVEUrcYiE5wSLlCuk1bl8LR6Vz1T
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:37 2023 by rpki-client on console-fra.rpki-client.org