Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/7o9CQELbPIDt2cQ7hJ_BAoD7nKY.roa
File: 7o9CQELbPIDt2cQ7hJ_BAoD7nKY.roa (raw, json)
Hash identifier: EAuFPVf9N/QdGEyGOlVBBsnDW3BE0wuygU00XR/2eHQ=
Subject key identifier: EE:8F:42:40:42:DB:3C:80:ED:D9:C4:3B:84:9F:C1:02:80:FB:9C:A6
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0428BE7D
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/7o9CQELbPIDt2cQ7hJ_BAoD7nKY.roa
Signing time: Sat 01 Jan 2022 12:04:55 +0000
ROA not before: Sat 01 Jan 2022 12:04:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43444
IP address blocks: 193.233.128.0/22 maxlen: 22
193.233.220.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69779069 (0x428be7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 12:04:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee8f424042db3c80edd9c43b849fc10280fb9ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:39:65:bb:60:9a:f7:a9:b0:ef:37:a6:89:1a:
34:eb:2a:4e:61:f4:dc:1a:6b:bd:8a:91:9d:3b:97:
5e:66:ea:55:1b:fd:ae:51:4f:20:88:f6:0b:51:6a:
1f:10:86:12:90:be:05:7b:1f:f7:54:38:d4:43:7e:
b7:b7:d9:68:d5:39:a0:11:a5:14:a4:c8:78:c5:97:
46:29:23:70:5e:77:67:2d:9f:65:3f:ff:e4:e9:d7:
dc:fb:64:9d:ab:db:55:04:81:4f:49:6a:55:d7:7b:
a7:53:93:57:50:47:11:ad:68:31:03:e1:d2:d9:72:
cd:f6:86:7c:c6:13:9d:69:4d:ca:35:7a:ac:22:af:
ea:4b:36:d1:0f:62:1b:11:27:a5:6e:47:92:56:40:
93:bf:e0:ea:97:b0:ad:a0:19:96:c9:99:bb:40:48:
48:e1:13:a6:04:0e:d2:dc:34:f9:70:f2:a4:c1:21:
25:02:00:61:9a:c2:65:fd:98:47:7c:f6:ae:df:0a:
c1:28:40:1e:08:b0:d4:f8:19:14:00:ce:3e:d0:1a:
7d:bc:7d:ac:35:0b:03:0e:d2:7b:3e:10:f5:59:75:
fc:a9:1b:92:1d:6a:34:f5:10:b8:a0:62:14:85:f6:
6b:5c:3b:2a:42:fa:79:67:e8:ae:44:8f:f5:66:88:
3e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8F:42:40:42:DB:3C:80:ED:D9:C4:3B:84:9F:C1:02:80:FB:9C:A6
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/7o9CQELbPIDt2cQ7hJ_BAoD7nKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.128.0/22
193.233.220.0/23
Signature Algorithm: sha256WithRSAEncryption
45:39:c2:ce:d2:84:14:43:18:73:c6:24:17:3f:8e:22:29:12:
8d:2f:01:0c:7f:7b:e8:dd:f5:cf:dc:aa:f2:6d:4b:74:da:70:
84:d4:93:7f:19:a5:57:da:ff:cd:8a:08:77:74:bf:0d:8a:1c:
17:a2:6f:de:7a:b8:c4:5b:aa:4e:d6:fd:09:0f:03:99:bf:b9:
02:72:5c:6a:8c:6a:d1:43:61:74:d4:94:22:78:38:7a:57:91:
06:32:cc:5f:be:22:34:be:0a:a9:1a:8d:76:50:33:15:07:01:
4b:92:ec:af:2c:5f:12:92:e7:ff:0e:80:e1:30:a5:51:87:53:
97:0e:8c:21:ff:0c:5d:02:5e:c6:b5:e3:3a:4d:e9:0a:a0:df:
da:6b:19:80:c6:ab:9e:6c:c4:b8:9e:25:26:54:e5:42:30:9a:
ba:93:23:50:04:cd:58:e2:6e:b2:08:3a:75:fc:9c:dd:24:93:
3f:3e:20:45:1b:c3:ab:70:9f:cf:81:c5:5c:41:4c:68:04:b0:
2d:4f:44:7b:80:35:2a:1d:a9:9c:68:08:8d:3e:ac:32:11:0f:
e5:b6:d0:ae:4a:2a:df:e4:f3:49:7b:a9:96:13:6a:05:34:d3:
b0:74:18:3f:49:d7:88:4a:e5:b9:d6:66:82:fe:50:62:49:7c:
8a:13:ab:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:37 2023 by rpki-client on console-fra.rpki-client.org