Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/BoulPoLRmArI5OVYT3TJgK86LlY.roa
File: BoulPoLRmArI5OVYT3TJgK86LlY.roa (raw, json)
Hash identifier: WvgoY+xTc+CfrDy7Q/f5ov7joTzE2Hg6gFD8UfARsJM=
Subject key identifier: 06:8B:A5:3E:82:D1:98:0A:C8:E4:E5:58:4F:74:C9:80:AF:3A:2E:56
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 04345C0D
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/BoulPoLRmArI5OVYT3TJgK86LlY.roa
Signing time: Sat 01 Jan 2022 12:05:01 +0000
ROA not before: Sat 01 Jan 2022 12:05:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203337
IP address blocks: 193.233.158.0/24 maxlen: 24
193.233.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70540301 (0x4345c0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 12:05:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=068ba53e82d1980ac8e4e5584f74c980af3a2e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:65:f9:4c:3d:df:ff:d9:54:9d:fe:6c:9f:01:
f3:d9:ac:18:ec:31:65:81:90:4d:97:0f:29:23:70:
92:df:65:ef:15:b7:4b:c1:c9:f4:e4:65:aa:62:52:
17:d1:5f:db:c9:af:d2:6b:9f:f3:43:8b:d6:7b:f8:
ec:6b:a1:3d:2d:8f:6f:b8:69:a8:d9:de:4e:04:14:
7f:71:ae:c9:c4:f3:92:d5:c8:a2:b3:38:10:b2:b4:
b3:cd:ca:a1:64:00:23:1e:9d:54:cd:dc:82:04:da:
04:2c:ba:68:4d:a1:3f:1b:9f:82:45:ea:e7:ad:de:
11:ca:03:ff:ee:07:67:2b:76:99:e4:7b:08:ad:2b:
78:57:81:a8:6c:01:71:5a:9a:3f:05:b7:ec:24:f4:
ff:26:fe:17:48:75:e4:c3:aa:0a:c2:e4:a1:26:90:
5a:0f:d8:c2:bb:5c:ad:3c:36:7e:4e:30:71:74:1d:
95:c3:5b:83:6c:25:01:1a:d1:76:bc:28:77:cb:63:
d7:83:bf:09:78:e9:62:4e:03:6e:d0:69:8b:56:0d:
72:7c:95:5c:11:4f:44:fb:04:fc:78:52:ae:4e:80:
41:86:25:d9:b8:35:bc:89:24:0e:f0:b7:81:97:75:
70:4a:63:55:25:f9:eb:a8:0b:1c:df:8c:f4:e7:a6:
94:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8B:A5:3E:82:D1:98:0A:C8:E4:E5:58:4F:74:C9:80:AF:3A:2E:56
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/BoulPoLRmArI5OVYT3TJgK86LlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.157.0-193.233.158.255
Signature Algorithm: sha256WithRSAEncryption
29:32:ef:30:10:ff:74:a0:97:eb:45:0a:67:05:be:7f:03:57:
5c:e9:ff:f2:0a:c4:a7:e4:8c:0f:88:b9:b7:be:d7:0e:a6:ac:
ac:b5:06:61:36:68:2f:23:57:fd:6f:a6:10:01:d2:77:7a:46:
35:60:cd:5c:b6:b0:c6:ec:9f:2e:4a:ce:95:ba:fe:e1:4d:04:
7a:5f:36:7e:05:fb:23:b8:c4:e9:4f:b3:81:09:43:59:b3:97:
b9:c9:55:69:b2:6f:f8:66:ad:f0:d1:21:d8:4d:d9:02:4a:75:
da:6c:e3:28:ea:88:48:f8:48:b3:2c:06:45:22:21:0a:43:24:
3a:26:90:00:81:88:6c:06:16:4a:43:bd:05:26:8b:e8:a8:e5:
f0:1a:43:18:d2:36:95:bd:69:ac:f0:d4:f2:05:e4:60:16:2a:
04:7d:1e:a5:a3:7f:46:13:04:19:67:45:c6:ad:47:31:1a:44:
56:35:d3:e7:dc:66:9e:a7:d8:c8:1b:f2:94:ac:21:c9:09:5c:
25:9a:35:ac:56:1a:a4:47:fb:ed:e6:5a:49:d0:8a:db:d8:41:
e7:c5:b9:8c:98:eb:d6:d9:c1:c1:62:41:53:d1:e8:04:ef:b2:
e0:05:0f:41:96:c4:27:4c:b8:6d:f9:16:b2:14:99:e2:ac:cb:
82:4e:36:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:37 2023 by rpki-client on console-fra.rpki-client.org