Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/RYNe2lDYnPW1Ydh6QD-jo47CjTc.roa
File: RYNe2lDYnPW1Ydh6QD-jo47CjTc.roa (raw, json)
Hash identifier: oLtO5cTBC4m8O9JSZAaGYxbUb3NhGj1Fkvms2RpVZ8U=
Subject key identifier: 45:83:5E:DA:50:D8:9C:F5:B5:61:D8:7A:40:3F:A3:A3:8E:C2:8D:37
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 04A63B75
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/RYNe2lDYnPW1Ydh6QD-jo47CjTc.roa
Signing time: Mon 07 Feb 2022 17:48:17 +0000
ROA not before: Mon 07 Feb 2022 17:48:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 193.233.232.0/22 maxlen: 22
193.233.48.0/23 maxlen: 23
193.233.85.0/24 maxlen: 24
193.233.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78003061 (0x4a63b75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 7 17:48:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45835eda50d89cf5b561d87a403fa3a38ec28d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:bf:12:03:39:bf:cd:f3:b1:df:8d:64:2f:
9c:91:19:b2:3a:b8:43:86:8e:a0:70:7e:94:00:3c:
67:f8:13:f6:ed:28:2e:36:f3:0b:95:50:d7:57:8d:
17:b4:d7:bf:2b:40:5b:a0:ca:28:6d:c9:07:cd:b6:
f3:5e:a0:22:f2:70:f3:53:9e:5d:7b:3d:da:e3:f4:
c8:ec:36:79:56:d6:df:e2:01:a7:a7:c5:83:ce:d6:
41:1a:3f:45:5a:5d:67:e0:e0:ad:60:21:a9:c5:f9:
58:67:f9:13:db:4c:42:6b:fa:3b:1c:cc:65:f4:8f:
60:ad:1c:79:93:d2:0b:fe:77:38:33:c6:80:07:f8:
81:28:4d:bf:52:03:a7:51:bc:3a:dd:ff:10:0a:98:
ae:18:c3:3c:8d:94:e5:43:9f:e8:fe:07:29:0f:c8:
fb:a7:81:a3:f0:d4:1e:23:f6:bf:12:11:a1:7b:67:
a4:f7:72:73:fc:bb:2a:34:3c:c2:e7:49:1d:c9:39:
05:7b:5a:b5:0e:e5:43:f7:37:93:d5:ac:30:0c:4c:
68:7e:13:4b:cd:eb:25:f8:ab:65:04:5d:3c:f5:f3:
78:7c:ff:bc:25:4c:37:5c:bd:83:6c:cb:b9:d9:31:
f2:cd:d1:6a:6a:48:e4:1f:94:e4:26:b2:a1:3d:80:
1d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:83:5E:DA:50:D8:9C:F5:B5:61:D8:7A:40:3F:A3:A3:8E:C2:8D:37
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/RYNe2lDYnPW1Ydh6QD-jo47CjTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.48.0/23
193.233.85.0/24
193.233.212.0/22
193.233.232.0/22
Signature Algorithm: sha256WithRSAEncryption
74:3c:bc:2a:a8:42:e8:57:3d:0c:d2:46:60:d1:d8:ef:ba:b8:
a3:b1:a9:0c:7b:04:79:95:7e:24:9a:22:1c:d4:7f:fb:d3:81:
a8:c3:df:40:ea:96:1a:b5:66:db:78:7e:27:0b:46:6c:ba:b9:
1e:e8:8b:b4:a6:fc:25:d4:02:d9:a1:bd:f2:ce:3e:56:27:2f:
3b:b4:5f:ff:29:07:38:7f:c7:ba:6e:c0:af:76:53:a2:02:c0:
12:f1:6c:b4:78:ba:6b:b3:2b:d7:89:29:1f:ab:02:16:53:ed:
91:75:09:22:2a:d3:0d:31:eb:23:0c:7e:09:1c:11:8e:19:10:
fa:77:c0:4b:2c:6a:35:19:96:9a:06:39:c7:97:3d:fa:c8:69:
78:25:7a:c5:f6:04:26:e5:62:c3:bd:2d:ca:98:b6:7e:0f:0c:
88:0d:99:9d:7a:ca:c0:7e:b8:16:17:11:1c:ee:35:21:3c:f9:
02:97:4d:d0:ab:ab:33:2e:f8:ab:74:19:bf:73:21:8f:f4:d4:
66:3e:1d:d3:7d:99:23:ff:eb:4c:d3:24:35:38:58:ab:31:14:
62:5b:dc:59:2e:13:b0:43:24:f1:72:b7:4a:15:8c:37:fe:27:
77:6d:f8:64:f5:5f:c2:65:16:c1:6a:ae:55:bf:a2:02:6f:a0:
60:9d:d4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:30 2023 by rpki-client on console-ams.rpki-client.org