Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/EIr0Vcn7u8bkd5Y6DTzvVMfUGrA.roa
File: EIr0Vcn7u8bkd5Y6DTzvVMfUGrA.roa (raw, json)
Hash identifier: f8OKjrnJkKUezx1AiT+TUMJmRdCEEKFbK5F5k/KoKn4=
Subject key identifier: 10:8A:F4:55:C9:FB:BB:C6:E4:77:96:3A:0D:3C:EF:54:C7:D4:1A:B0
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018410CA1E06FCA00880E7DD5CBB42976019
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/EIr0Vcn7u8bkd5Y6DTzvVMfUGrA.roa
Signing time: Tue 25 Oct 2022 20:16:32 +0000
ROA not before: Tue 25 Oct 2022 20:16:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 193.233.85.0/24 maxlen: 24
193.233.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:10:ca:1e:06:fc:a0:08:80:e7:dd:5c:bb:42:97:60:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Oct 25 20:16:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=108af455c9fbbbc6e477963a0d3cef54c7d41ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:ce:b4:69:7c:f8:1f:73:f3:9f:49:2f:8d:
bc:39:35:3e:ad:60:34:2d:1d:f2:44:84:4e:34:3d:
5c:0b:16:71:95:54:24:d2:e3:a2:70:c6:38:13:27:
b1:b6:66:bc:52:3e:2b:7d:22:82:f6:3f:4c:b7:84:
44:43:52:55:36:a8:6f:33:14:1e:7d:23:bd:79:c2:
f9:d5:ac:ec:eb:07:2c:4d:96:7d:38:04:78:6b:ff:
9e:c5:46:e7:03:f3:bc:63:df:09:ab:6e:37:73:b8:
2c:ba:81:67:11:98:e1:c3:e1:4d:4a:2f:9a:8e:6f:
86:e5:7e:3b:3f:4f:7e:11:18:e2:78:19:1e:32:c7:
b2:b6:b1:2b:f0:2f:99:ac:bd:5b:6f:81:e3:89:d9:
a1:3b:9d:59:8e:80:d8:35:8b:81:14:77:2c:66:38:
43:46:38:3c:2e:58:21:d6:b5:00:d8:c2:e8:fb:20:
71:e4:29:e6:ac:b2:74:3b:84:00:47:dd:87:22:20:
95:46:f0:c2:b6:bf:94:1b:d0:30:e8:44:e7:b0:1b:
70:e0:01:af:4f:e6:33:dc:87:8f:b8:d6:b2:15:d2:
4a:11:12:b9:71:8f:9c:8e:72:5c:c9:b6:7d:1b:e7:
17:5e:94:41:ae:77:53:4b:ad:79:1a:dc:57:04:d0:
77:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8A:F4:55:C9:FB:BB:C6:E4:77:96:3A:0D:3C:EF:54:C7:D4:1A:B0
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/EIr0Vcn7u8bkd5Y6DTzvVMfUGrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.85.0/24
193.233.95.0/24
Signature Algorithm: sha256WithRSAEncryption
91:bd:b7:01:6e:05:d8:36:16:6f:27:01:b9:5c:2c:32:e3:08:
15:eb:c1:6d:b8:05:7b:b7:a3:9e:62:3b:12:7e:8a:08:eb:a2:
1a:0f:d0:59:1c:31:cb:36:31:09:92:4b:06:66:1e:98:65:2b:
78:c7:e6:05:54:c0:37:2e:21:90:7b:b2:f8:e0:20:94:50:2b:
56:89:f8:e8:10:30:56:bd:7c:d4:24:45:87:cf:8b:cf:15:33:
a3:96:79:4c:f9:01:12:de:e4:96:f3:4e:8c:db:5f:56:5d:82:
38:f6:43:fb:ed:c4:8b:c9:0a:b4:72:5d:6c:73:b8:49:15:5e:
fe:0b:b5:bd:31:0e:ae:dc:e5:1c:43:53:3a:f5:49:9d:5c:28:
86:f9:72:96:7b:a6:9c:57:59:2c:bb:58:85:3c:f7:1a:dd:3b:
25:e1:8b:aa:1e:26:1e:76:5b:52:59:b6:54:74:84:84:6a:5b:
61:9f:73:1d:95:20:da:8c:bc:ba:d7:c1:84:b4:f9:56:db:14:
c4:87:e1:8d:03:6d:17:44:24:07:9e:7a:f2:70:40:dd:6a:74:
7d:9e:52:9c:01:e1:39:9e:8d:9d:20:6b:28:19:c8:cf:2f:a5:
e3:dc:26:79:75:3e:eb:58:75:84:46:7e:ff:d7:89:1f:4e:63:
e5:8d:00:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:30 2023 by rpki-client on console-ams.rpki-client.org