Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/OLh8wqpyeYxmJuMThGXYmjWSnls.roa
File: OLh8wqpyeYxmJuMThGXYmjWSnls.roa (raw, json)
Hash identifier: mrpqJjCxdGcwVajc9KYW1ZjozSOotFb069CXj6TgmCo=
Subject key identifier: 38:B8:7C:C2:AA:72:79:8C:66:26:E3:13:84:65:D8:9A:35:92:9E:5B
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0434F79A
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/OLh8wqpyeYxmJuMThGXYmjWSnls.roa
Signing time: Sat 01 Jan 2022 12:05:02 +0000
ROA not before: Sat 01 Jan 2022 12:05:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203344
IP address blocks: 193.233.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70580122 (0x434f79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 12:05:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38b87cc2aa72798c6626e3138465d89a35929e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:f2:43:3f:17:82:d3:f7:6f:fd:e7:de:5f:
7f:e3:21:89:78:28:d3:90:3e:2e:46:47:03:47:3f:
22:f0:23:cf:1b:2f:4d:52:fe:0e:65:fd:58:44:97:
e4:54:66:53:9b:25:66:9d:47:9b:de:3e:8c:fd:37:
fe:e3:60:2b:5c:f9:27:9e:7d:ee:2b:3e:2e:0e:6e:
dd:fa:33:33:cc:ce:7c:f2:62:31:b8:64:d1:84:b1:
e0:36:23:24:64:9d:19:52:2b:ac:fc:f4:92:30:39:
b5:4f:fc:d3:57:fa:05:bc:e8:d5:93:f9:bc:c6:dc:
25:bf:72:71:44:86:ad:3f:ba:ab:b6:a1:ae:7b:36:
bc:f7:9e:7d:44:74:23:be:5d:f3:93:2c:3a:4b:94:
a8:fb:f7:2c:d2:8d:90:fe:fc:48:4f:9f:3d:87:76:
0f:e5:7d:84:d4:20:f6:6a:0a:1b:d6:83:07:87:50:
16:7e:1c:16:47:1e:23:91:61:f3:60:79:04:4a:15:
14:68:74:82:1f:bb:f9:57:a8:96:6b:97:ed:4b:92:
ad:04:db:15:b8:d2:44:f1:6d:81:06:0d:a0:e9:b7:
e7:ed:8e:f4:a0:f0:9f:60:e0:dc:70:55:88:74:b2:
9c:1e:1b:d1:bc:fa:e7:a8:b3:7f:7e:e7:97:03:b2:
6f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B8:7C:C2:AA:72:79:8C:66:26:E3:13:84:65:D8:9A:35:92:9E:5B
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/OLh8wqpyeYxmJuMThGXYmjWSnls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.153.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b0:5c:98:42:3f:f2:2c:ac:41:3b:40:ca:d4:b1:2e:98:1d:
86:92:48:a5:2f:f7:36:37:ba:67:23:ab:3c:8a:cd:af:87:da:
76:c3:86:3b:a0:6b:f2:fa:2c:90:6e:68:31:9d:83:9d:ce:17:
65:04:68:80:a2:c8:55:91:8a:56:6c:76:e0:ed:c1:4c:e5:be:
88:9b:49:42:31:b4:f4:42:9d:7e:de:b2:4a:7f:7e:31:95:12:
1d:c8:e7:c6:38:74:f3:33:47:14:1d:6e:f8:b2:ec:b0:a6:ee:
b5:c8:9a:2b:97:13:88:c6:8a:e9:f0:1a:a0:7f:27:30:82:83:
f0:50:f7:21:47:24:3d:10:05:63:5c:a0:44:c8:5e:d4:50:2b:
cd:8c:c8:63:3e:1d:e3:6f:a0:cf:62:d1:83:bb:f8:4f:13:ac:
56:47:6a:3e:e2:f3:3e:9a:ba:11:e9:f5:2b:a8:23:de:07:8d:
1f:0b:b8:d8:58:7f:f5:e3:df:b4:c8:16:ea:99:93:2d:22:cb:
a9:53:36:7e:fb:f8:75:bd:69:62:3f:47:67:6d:08:ce:6d:85:
f7:69:83:86:9b:c8:00:e2:a4:77:0d:a7:47:74:e6:88:5c:54:
26:fc:24:9a:02:cf:df:1e:1f:cd:3d:7a:d4:bc:df:d4:a4:02:
e6:14:29:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:30 2023 by rpki-client on console-ams.rpki-client.org