Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ULNWmT-gAfkVGJyYG_Vn6ZtT-no.roa
File: ULNWmT-gAfkVGJyYG_Vn6ZtT-no.roa (raw, json)
Hash identifier: xf+YSEPl4j8DjA/CSVungUeiCmSTfH7vG2Av8QPRmbs=
Subject key identifier: 50:B3:56:99:3F:A0:01:F9:15:18:9C:98:1B:F5:67:E9:9B:53:FA:7A
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018338D7333954151F63B32830FCE0FF0824
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ULNWmT-gAfkVGJyYG_Vn6ZtT-no.roa
Signing time: Tue 13 Sep 2022 21:52:50 +0000
ROA not before: Tue 13 Sep 2022 21:52:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26548
IP address blocks: 193.233.228.0/22 maxlen: 22
193.233.136.0/22 maxlen: 22
193.233.140.0/22 maxlen: 22
193.233.82.0/23 maxlen: 23
193.233.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:38:d7:33:39:54:15:1f:63:b3:28:30:fc:e0:ff:08:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Sep 13 21:52:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50b356993fa001f915189c981bf567e99b53fa7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:a0:c5:a9:b7:5f:9d:69:a1:a7:b2:9b:cc:
ef:88:79:17:7c:ec:0d:ba:1a:c9:83:1a:94:0a:23:
5c:73:50:45:41:dc:d9:5c:c3:4d:bd:bc:59:cd:84:
4d:e9:e7:d9:be:20:f3:fc:fd:61:68:5e:99:5f:c2:
d2:fb:67:18:d6:34:d2:5f:33:1e:1f:fe:1b:64:c2:
68:4d:10:e1:9f:89:e4:60:20:4f:1f:96:b2:e3:61:
ac:db:c4:8e:0b:c9:b8:c6:28:44:5b:85:23:16:21:
f3:44:87:46:a5:ab:7e:7d:27:f5:cd:39:9c:68:ea:
25:bd:bb:cf:66:e1:7c:c3:a4:7b:b7:1e:ff:83:9f:
68:13:7c:4a:76:cc:35:f2:2e:cb:ac:2b:d1:30:ec:
6d:70:7c:26:c6:1b:3a:f7:00:32:d5:ca:73:ea:b9:
49:1a:06:4d:91:f6:07:8d:18:15:76:f6:be:66:da:
b6:8b:d2:46:39:71:d4:61:e4:74:1d:13:bb:e0:1b:
ad:ad:42:79:57:6c:0b:17:bc:1e:d0:97:c6:78:9a:
00:d9:47:3e:a9:c8:61:39:26:76:3e:fc:4f:c5:34:
b1:5d:ef:1a:29:4e:1c:77:f9:26:cb:34:5a:d0:7e:
bc:d3:49:9d:01:a4:c5:a9:ae:ec:98:9f:af:5a:c2:
10:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B3:56:99:3F:A0:01:F9:15:18:9C:98:1B:F5:67:E9:9B:53:FA:7A
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ULNWmT-gAfkVGJyYG_Vn6ZtT-no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.82.0/23
193.233.136.0/21
193.233.208.0/22
193.233.228.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:d0:72:12:40:3b:fe:01:c2:4a:93:f0:0a:00:17:11:40:91:
ea:fe:28:40:08:d0:89:89:60:d8:24:cc:ef:39:43:d8:2e:1a:
46:c4:e0:f1:d3:28:29:fe:c4:89:5b:ea:38:83:5b:ff:a3:4a:
df:52:84:6c:08:ad:ac:c7:fe:48:d6:25:72:47:f9:4f:d3:fc:
b1:b7:92:e1:50:e1:a4:d5:53:9d:48:c3:04:af:e0:c8:6c:12:
d2:72:eb:ac:c8:bb:cc:fe:05:52:8c:05:f6:f1:d3:64:e2:9f:
b3:d5:36:c3:3d:88:d9:e3:0a:79:6a:00:72:d3:6d:d9:a3:17:
fe:74:f3:46:01:55:6c:12:68:ae:3e:3d:8c:4f:05:42:9e:82:
3c:5a:cd:1b:ad:93:68:6c:54:8f:ae:20:8f:9d:76:9a:b0:b1:
5c:44:3f:f2:e1:de:5e:67:88:61:49:62:de:fc:be:27:8e:f0:
1f:28:2e:27:08:59:8e:db:bf:bb:5e:d0:59:eb:ba:e9:27:ab:
3b:b0:0f:40:a5:11:16:66:1c:5a:74:b5:c3:4a:3c:92:b0:f3:
cc:9b:cc:b6:06:40:d3:f2:c0:be:d5:87:07:a9:97:9d:93:3f:
36:36:27:36:af:48:de:0a:bf:97:69:34:0d:30:2e:10:45:ef:
74:3d:e6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:30 2023 by rpki-client on console-ams.rpki-client.org