Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/H5mJmqMtW1sOD_2akTl0eUePj-I.roa
File: H5mJmqMtW1sOD_2akTl0eUePj-I.roa (raw, json)
Hash identifier: DelzeD/kCJW4O3rEaAAIaefQnGvufLY+KGvOsnI1Zt0=
Subject key identifier: 1F:99:89:9A:A3:2D:5B:5B:0E:0F:FD:9A:91:39:74:79:47:8F:8F:E2
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0184E88069606B9BB97822B8F13698335F86
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/H5mJmqMtW1sOD_2akTl0eUePj-I.roa
Signing time: Tue 06 Dec 2022 17:34:00 +0000
ROA not before: Tue 06 Dec 2022 17:34:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51659
IP address blocks: 193.233.16.0/24 maxlen: 24
193.233.19.0/24 maxlen: 24
193.233.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e8:80:69:60:6b:9b:b9:78:22:b8:f1:36:98:33:5f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Dec 6 17:34:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f99899aa32d5b5b0e0ffd9a91397479478f8fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:40:48:ca:5d:e1:45:44:8f:d6:4c:70:22:75:
1e:12:ef:94:e6:32:95:f9:36:a1:73:c5:12:b5:db:
d2:15:b0:36:25:86:e6:14:e5:1d:8b:40:2d:da:d6:
05:bb:a2:48:25:45:94:39:53:ac:e4:d8:5a:81:3e:
60:18:49:d1:54:9d:de:e8:89:d0:f4:94:af:84:d5:
a2:97:db:1a:a3:54:72:7c:1e:8c:65:0c:e2:84:ac:
b6:5a:1e:0b:73:82:5a:5d:40:1b:5e:0c:eb:39:b4:
04:fd:a4:1b:48:a1:19:42:46:a4:4a:fb:f6:4a:0e:
ee:78:60:2a:9a:9d:bb:c1:81:05:c1:8e:26:32:ad:
49:72:45:6e:b7:90:b0:ed:b3:7b:ec:b7:1b:3e:d9:
39:7c:ec:36:58:9d:ba:12:70:1d:45:68:68:13:22:
1e:8d:51:bd:80:b9:c2:38:98:5b:24:47:21:80:51:
b7:66:01:36:29:49:e0:c5:23:7b:6b:dd:af:57:fa:
29:af:8c:cf:0e:36:b9:e9:36:09:40:71:d4:99:c4:
f8:3a:ca:b8:6b:be:a8:af:b5:0d:17:a3:be:13:28:
0c:7b:ad:ff:ec:a8:8c:1a:30:21:11:ba:ff:a4:e0:
df:1c:ca:a8:51:20:57:0c:43:f0:fc:ee:13:94:f6:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:99:89:9A:A3:2D:5B:5B:0E:0F:FD:9A:91:39:74:79:47:8F:8F:E2
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/H5mJmqMtW1sOD_2akTl0eUePj-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.16.0/24
193.233.19.0/24
193.233.84.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:76:aa:05:82:69:47:81:43:0a:da:62:9f:83:a1:3a:72:3b:
b9:ae:88:fc:27:eb:ed:0a:25:37:0b:b9:ae:85:40:60:e8:55:
5b:93:e7:0a:ea:18:57:17:c1:75:09:6b:b6:98:8d:d9:58:cc:
d5:6f:ae:37:5f:15:b3:ce:6f:e8:74:01:65:0a:14:d4:be:fc:
2a:40:74:66:2e:aa:a6:51:91:82:0e:bb:84:73:7a:80:00:08:
34:01:b8:ed:95:45:65:d0:bb:01:25:b4:92:82:70:56:bd:5e:
2b:64:d4:53:61:58:40:41:48:2d:56:13:9c:1c:59:54:5f:b4:
c1:47:be:b2:56:00:fb:31:f3:51:48:bd:79:84:9b:ff:63:ed:
a9:23:e8:14:f5:fc:0d:b7:b5:b1:38:a1:68:c6:66:7b:40:cb:
27:15:d9:fd:58:c4:a4:64:d3:eb:08:ba:d0:2b:74:38:90:b1:
29:a5:6e:0f:da:de:f8:3a:f2:66:df:b8:2d:ac:b3:33:d3:9e:
f6:aa:b5:70:60:aa:dc:a6:b3:e0:b8:0e:8e:90:ad:bd:da:05:
39:65:62:b6:ed:c5:5b:9e:0b:09:25:0d:c5:85:f3:cb:6d:aa:
12:11:71:f7:f7:3e:f5:0f:ee:cd:bb:77:4a:ab:5c:61:f7:8f:
b9:65:1c:69
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYTogGlga5u5eCK48TaYM1+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjIxMjA2MTczNDAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjk5ODk5YWEzMmQ1YjViMGUwZmZkOWE5MTM5NzQ3OTQ3OGY4ZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EBIyl3hRUSP1kxwInUeEu+U5jKV
+Tahc8UStdvSFbA2JYbmFOUdi0At2tYFu6JIJUWUOVOs5NhagT5gGEnRVJ3e6InQ
9JSvhNWil9sao1RyfB6MZQzihKy2Wh4Lc4JaXUAbXgzrObQE/aQbSKEZQkakSvv2
Sg7ueGAqmp27wYEFwY4mMq1JckVut5Cw7bN77LcbPtk5fOw2WJ26EnAdRWhoEyIe
jVG9gLnCOJhbJEchgFG3ZgE2KUngxSN7a92vV/opr4zPDja56TYJQHHUmcT4Osq4
a76or7UNF6O+EygMe63/7KiMGjAhEbr/pODfHMqoUSBXDEPw/O4TlPYjbwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFB+ZiZqjLVtbDg/9mpE5dHlHj4/iMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvSDVtSm1xTXRXMXNPRF8yYWtUbDBlVWVQai1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwekQAwQA
wekTAwQCwelUMA0GCSqGSIb3DQEBCwUAA4IBAQCPdqoFgmlHgUMK2mKfg6E6cju5
roj8J+vtCiU3C7muhUBg6FVbk+cK6hhXF8F1CWu2mI3ZWMzVb643XxWzzm/odAFl
ChTUvvwqQHRmLqqmUZGCDruEc3qAAAg0AbjtlUVl0LsBJbSSgnBWvV4rZNRTYVhA
QUgtVhOcHFlUX7TBR76yVgD7MfNRSL15hJv/Y+2pI+gU9fwNt7WxOKFoxmZ7QMsn
Fdn9WMSkZNPrCLrQK3Q4kLEppW4P2t74OvJm37gtrLMz0572qrVwYKrcprPguA6O
kK292gU5ZWK27cVbngsJJQ3FhfPLbaoSEXH39z71D+7Nu3dKq1xh94+5ZRxp
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:30 2023 by rpki-client on console-ams.rpki-client.org