Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/UkEiSCM8uMaLbFGsZSDbCiNEeTQ.roa
File: UkEiSCM8uMaLbFGsZSDbCiNEeTQ.roa (raw, json)
Hash identifier: rJHtyDovi0DwAPJAPH+tLUKmlJjTMFiNRfBjyEzSckk=
Subject key identifier: 52:41:22:48:23:3C:B8:C6:8B:6C:51:AC:65:20:DB:0A:23:44:79:34
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 05F1F960
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/UkEiSCM8uMaLbFGsZSDbCiNEeTQ.roa
Signing time: Thu 16 Jun 2022 12:17:52 +0000
ROA not before: Thu 16 Jun 2022 12:17:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 193.233.179.0/24 maxlen: 24
193.233.177.0/24 maxlen: 24
193.233.178.0/24 maxlen: 24
193.233.182.0/24 maxlen: 24
193.233.183.0/24 maxlen: 24
193.233.180.0/24 maxlen: 24
193.233.186.0/24 maxlen: 24
193.233.184.0/24 maxlen: 24
193.233.189.0/24 maxlen: 24
193.233.190.0/24 maxlen: 24
193.233.187.0/24 maxlen: 24
193.233.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99744096 (0x5f1f960)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jun 16 12:17:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52412248233cb8c68b6c51ac6520db0a23447934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:fb:ae:8d:75:b0:7d:d9:c0:0b:8c:a5:b9:
6a:74:80:9d:a0:49:66:c7:cf:83:dd:c6:e0:21:aa:
31:51:f2:f3:ca:09:7b:06:17:23:a6:b3:47:66:8e:
f0:1e:6b:3c:2e:11:35:a9:91:52:cc:9d:da:40:5a:
57:bd:71:9b:68:61:3b:14:ab:d4:64:3c:80:19:88:
a0:15:6b:d8:30:59:fd:73:8d:ee:03:be:99:ab:85:
66:a7:d2:b1:9e:6c:bf:bd:21:be:21:8f:72:36:33:
33:12:9f:e5:7a:82:85:7b:36:39:3e:59:fd:80:0b:
4e:e0:69:98:c2:6b:67:d7:a8:9b:a1:f3:f7:1e:ca:
6e:e9:d7:53:4b:76:00:9a:c7:ce:54:c4:cf:e6:21:
cd:d4:bd:b8:65:cc:22:5f:fd:68:a1:3c:97:a6:8c:
15:2e:7b:5e:c7:58:91:a7:bb:a2:89:aa:39:f5:4d:
99:5f:a7:31:20:72:4e:e6:f1:d8:7e:87:69:e1:17:
03:bf:75:cb:42:4e:5a:18:2a:97:d2:b7:f6:f9:53:
8f:a7:67:db:dd:28:90:98:b8:95:c1:68:fb:6c:d3:
30:76:65:7e:d8:e9:da:99:d2:8d:9f:05:83:f4:33:
fa:32:e4:8c:b3:0f:e1:0c:99:5b:ba:6a:f0:0e:a3:
c3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:41:22:48:23:3C:B8:C6:8B:6C:51:AC:65:20:DB:0A:23:44:79:34
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/UkEiSCM8uMaLbFGsZSDbCiNEeTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.177.0-193.233.180.255
193.233.182.0-193.233.184.255
193.233.186.0-193.233.190.255
Signature Algorithm: sha256WithRSAEncryption
66:7a:65:8b:a2:59:af:93:92:14:53:ec:75:f1:7a:b1:b1:e1:
e3:ae:a3:fc:17:92:14:43:a9:7f:db:04:df:39:ab:d8:e7:00:
c4:be:9a:b2:a1:42:37:e0:d8:47:c0:62:a0:b9:17:4d:fe:df:
a8:46:f1:90:39:20:a8:a2:02:0b:ab:6c:83:29:27:91:72:06:
3c:eb:c6:c4:64:b1:a4:73:2d:23:b3:a4:08:ba:ea:58:12:e6:
88:f0:bf:cb:82:e8:bc:02:39:1f:64:28:df:5a:f5:3e:d5:e1:
44:72:02:e0:a6:7b:a3:06:06:0c:a0:af:e4:bf:76:8b:19:ff:
f6:5d:5e:b2:d1:41:3d:ad:e4:2c:5e:97:b8:a7:f5:c9:60:80:
df:23:0d:c3:c3:4b:fc:20:07:d6:47:24:41:26:b7:66:e7:00:
13:96:2f:b1:39:58:21:60:ff:70:05:6b:72:6b:5e:b8:ba:08:
af:b5:9e:f3:03:34:1c:23:bf:cd:fd:67:64:45:ca:ef:8a:11:
e7:1e:6a:89:6b:77:a1:b0:89:f0:16:eb:6a:b8:37:a1:6f:36:
bc:98:16:da:61:3a:b2:03:31:94:60:7f:96:43:90:94:fb:86:
55:e5:7e:53:e7:89:2d:10:80:16:87:d2:57:9d:a6:2b:d6:8d:
53:01:c2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:38 2023 by rpki-client on console-fra.rpki-client.org