Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Q5-oJJOwIgulym6p5HCpXk0RlAQ.roa
File: Q5-oJJOwIgulym6p5HCpXk0RlAQ.roa (raw, json)
Hash identifier: 5EOBg1KO9Yh3EnrOwVLxlbauEAe8/TJT7ZYNFfGKKpE=
Subject key identifier: 43:9F:A8:24:93:B0:22:0B:A5:CA:6E:A9:E4:70:A9:5E:4D:11:94:04
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0436284F
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Q5-oJJOwIgulym6p5HCpXk0RlAQ.roa
Signing time: Sat 01 Jan 2022 12:05:02 +0000
ROA not before: Sat 01 Jan 2022 12:05:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204833
IP address blocks: 193.233.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70658127 (0x436284f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 12:05:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=439fa82493b0220ba5ca6ea9e470a95e4d119404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:19:97:09:b2:92:06:50:bd:ab:8c:8f:f7:
88:75:44:a5:be:a3:ed:8f:e7:30:6c:a2:1e:98:31:
03:f2:cc:d8:a0:29:48:bb:ce:76:8a:7e:7d:c1:d3:
fd:73:be:11:27:bd:76:64:24:90:80:c5:22:3b:44:
16:87:5a:ad:da:05:75:91:ad:0c:de:d5:12:c6:6d:
02:81:ac:8b:e8:bd:60:b9:c9:8f:c4:a4:6a:9f:1f:
3d:84:8e:d5:4b:32:fc:66:67:e7:ff:77:e6:4f:4f:
07:82:77:e4:30:6e:1b:2c:a8:7e:db:80:8a:a3:c8:
81:57:3e:59:9b:b1:b9:85:68:1d:75:43:f0:af:04:
79:67:0d:55:d0:0f:42:1c:98:1f:e2:9d:e5:dd:57:
88:24:ee:a8:40:ff:36:fb:5f:0a:cf:43:3c:1d:67:
41:9f:db:d2:f9:36:35:0d:23:43:04:ea:95:20:b1:
09:fa:4e:0e:3e:41:6c:26:bd:d0:f3:bf:da:64:ce:
be:2a:32:49:d6:23:7b:d0:3e:1e:9c:24:8a:81:a5:
fd:c2:3f:28:29:c8:75:b7:ed:0b:5f:ad:84:5e:92:
4f:f2:f6:c4:a5:00:c1:33:3a:18:ca:b9:f7:8f:df:
57:06:96:d0:1f:8a:aa:93:9a:88:af:2e:25:9a:f8:
78:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9F:A8:24:93:B0:22:0B:A5:CA:6E:A9:E4:70:A9:5E:4D:11:94:04
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Q5-oJJOwIgulym6p5HCpXk0RlAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.6.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:14:fe:f1:83:41:4f:f4:d5:a9:ca:f7:4e:99:d2:17:e3:02:
5b:25:c9:9d:b2:12:03:d9:4f:60:3a:0a:81:2d:4b:ec:29:c6:
50:f7:8b:3d:1a:7e:62:05:3d:35:a3:8d:df:58:76:f3:cb:9d:
3f:99:4d:9c:f1:c8:39:d0:5c:3d:28:85:5a:57:1a:c6:34:10:
b1:0d:94:cc:07:c3:ec:3d:62:43:81:82:12:1f:59:ac:d3:40:
26:2e:a3:45:cc:89:b0:56:10:35:73:61:2c:9d:59:01:da:0c:
95:f2:a8:2e:e1:da:1d:eb:65:a9:31:3e:48:9a:d8:0b:5e:88:
d2:cc:d5:54:68:03:15:cd:2f:a7:19:91:25:df:5f:0a:0d:ca:
a1:0b:bc:10:d6:13:9c:7b:ec:52:81:87:75:94:c0:3e:60:c0:
1c:32:2d:b9:7e:27:59:73:3d:51:26:50:0d:b1:97:48:0e:ed:
31:68:8d:fd:e1:96:6d:c7:28:da:1a:65:8a:47:62:81:40:50:
df:31:d0:d0:06:f3:aa:91:2a:93:3e:42:b9:ab:7b:16:d5:2d:
b3:0a:90:9f:e9:82:f3:fc:26:e7:19:a1:1f:b4:5e:9c:37:7b:
05:14:ba:de:a8:0b:a8:09:c6:02:a3:d7:94:ed:b7:4a:4f:28:
8a:0c:1c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:38 2023 by rpki-client on console-fra.rpki-client.org