Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/VstQIWndl6_h0K417K_2EgGYOgk.roa
File: VstQIWndl6_h0K417K_2EgGYOgk.roa (raw, json)
Hash identifier: Xi+msxtTHQ/657V/nJF6YFW0NCSUxdvdq0R0Ek180cg=
Subject key identifier: 56:CB:50:21:69:DD:97:AF:E1:D0:AE:35:EC:AF:F6:12:01:98:3A:09
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018348A577E6A6BC7C1FCB47CF54A1314CF8
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/VstQIWndl6_h0K417K_2EgGYOgk.roa
Signing time: Fri 16 Sep 2022 23:32:27 +0000
ROA not before: Fri 16 Sep 2022 23:32:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 193.233.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:48:a5:77:e6:a6:bc:7c:1f:cb:47:cf:54:a1:31:4c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Sep 16 23:32:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56cb502169dd97afe1d0ae35ecaff61201983a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:35:60:8a:c7:22:22:a6:f8:c5:e5:ff:64:96:
c7:d5:47:c4:26:e7:e3:4b:32:c4:5e:fa:ae:21:99:
b2:ab:bc:de:34:bb:8f:87:27:ba:8c:4c:cb:d9:cf:
6f:6a:86:50:73:d7:6d:f0:23:f8:78:b8:b2:d9:94:
a1:54:78:ea:f9:45:a9:b9:44:05:7a:dd:12:cf:f0:
c3:e4:59:a4:b2:e1:10:3a:1d:fa:32:dc:24:5c:f6:
49:f6:5f:10:c2:14:69:78:e1:e7:12:14:8b:63:c9:
fd:47:83:da:34:cc:ba:cf:be:33:95:5a:a0:79:3f:
ed:74:78:22:3e:45:ba:e3:2d:8e:68:30:20:9b:1a:
aa:90:01:f2:9d:32:c3:b8:bd:ba:87:88:58:74:2c:
f3:7d:74:78:58:68:e9:83:be:a8:b2:0c:ee:4b:53:
0a:53:99:82:2e:16:e2:90:03:f6:7d:63:37:fc:84:
44:51:85:aa:f3:5f:89:2e:ec:ba:2d:d8:d6:9b:b5:
0f:94:7f:23:e4:cb:ee:67:a1:9d:a5:bc:ec:27:f1:
5f:de:f1:df:a6:42:95:26:4c:88:8e:5e:93:20:83:
35:c8:84:b9:3a:75:1c:d1:7b:0d:ff:14:4e:a8:f5:
75:f8:6b:76:a8:38:df:08:22:db:b1:dd:78:57:11:
3f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CB:50:21:69:DD:97:AF:E1:D0:AE:35:EC:AF:F6:12:01:98:3A:09
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/VstQIWndl6_h0K417K_2EgGYOgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.161.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:33:84:b9:4f:1f:ed:6e:e2:90:46:b4:69:e5:40:4d:9a:15:
8d:3d:fe:d7:f8:cc:ca:b1:1e:ad:f7:6a:2f:e3:d5:87:7d:dd:
f1:f3:8e:37:dc:2a:a4:b1:04:9d:8a:e7:3f:99:40:37:d9:bf:
20:94:96:08:42:e1:79:63:dd:99:00:99:e2:f8:d7:6d:88:f4:
d8:6c:9b:0a:e6:79:06:57:da:ef:8d:fe:fb:3e:7a:16:64:73:
d6:1c:79:40:6a:cd:ac:66:4b:9b:50:0c:5b:7e:7e:58:0c:74:
47:68:e7:b4:3d:b5:1d:c1:00:29:9b:66:b0:c5:a3:72:ff:b4:
aa:4c:db:19:b0:e1:8b:17:51:43:ae:47:c2:65:09:dc:86:94:
79:9c:fb:8b:14:87:c2:1b:8a:14:b0:7b:81:4a:5c:ce:50:ef:
1b:29:e2:74:15:18:b5:22:8a:a6:51:68:fd:f4:5b:10:57:ff:
3d:eb:19:ee:bf:dd:10:1b:b9:01:97:a5:0d:47:22:c3:46:77:
87:39:69:03:cd:b2:46:4b:00:ab:6c:21:16:1f:64:2d:33:86:
45:96:76:c2:49:36:54:b3:3c:8a:93:1c:4e:49:f0:d1:d1:f7:
23:42:ff:fb:34:49:fb:80:3c:72:bb:7e:cb:1f:21:e0:a1:5e:
d8:36:b9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:38 2023 by rpki-client on console-fra.rpki-client.org