Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Xm_0ttdDat0j80cUY7WZhSdGedE.roa
File: Xm_0ttdDat0j80cUY7WZhSdGedE.roa (raw, json)
Hash identifier: p6jme2p+K7KrXI1pp+RwQ6Dbe+Sf01kbC7EMpGIGWi4=
Subject key identifier: 5E:6F:F4:B6:D7:43:6A:DD:23:F3:47:14:63:B5:99:85:27:46:79:D1
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 05EA97A6
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Xm_0ttdDat0j80cUY7WZhSdGedE.roa
Signing time: Wed 15 Jun 2022 15:19:44 +0000
ROA not before: Wed 15 Jun 2022 15:19:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60912
IP address blocks: 193.233.185.0/24 maxlen: 24
193.233.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99260326 (0x5ea97a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jun 15 15:19:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e6ff4b6d7436add23f3471463b59985274679d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:1d:05:ee:f1:b0:df:95:df:77:be:10:59:47:
a6:cf:b1:59:ca:fe:7c:00:0b:b1:b8:7e:97:39:b4:
4f:cc:e7:ee:32:38:1c:75:d4:26:d3:70:80:15:c6:
25:10:b9:93:e8:19:4c:58:c2:ce:33:71:8b:07:ed:
fa:27:2f:49:4f:11:3d:6e:5b:a2:0e:55:87:f3:9f:
14:4b:5d:c6:3a:4f:c6:f9:ef:20:ef:de:e1:3f:6f:
2b:c4:2d:b5:fe:b2:5f:64:8b:bf:a9:0c:f1:1f:6b:
6a:f5:a3:7e:8d:f7:1d:9f:76:0b:1c:b5:0d:96:ca:
6e:62:22:b2:50:c7:b3:6b:c8:5d:fc:d8:d3:71:31:
21:ab:ea:61:d3:55:dc:ce:42:3a:bb:4f:24:1a:8b:
6a:1d:38:8f:43:c1:b3:6c:21:3e:c3:dc:e5:e3:10:
f7:d9:3e:09:6c:1a:14:e3:58:72:83:e3:c4:bc:2c:
c3:f1:6a:91:53:97:9e:76:56:4d:dc:20:79:69:5a:
cf:ff:70:df:64:b8:6c:9a:db:57:b2:c6:2d:a9:74:
e1:55:74:b3:e8:53:1a:63:5d:98:43:bb:35:aa:75:
98:3b:93:5f:85:ad:c6:78:ec:09:3c:4e:77:d3:30:
55:ae:2f:f2:8e:7a:00:ec:cb:6a:39:c5:ae:e6:1f:
0a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6F:F4:B6:D7:43:6A:DD:23:F3:47:14:63:B5:99:85:27:46:79:D1
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Xm_0ttdDat0j80cUY7WZhSdGedE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.185.0/24
193.233.191.0/24
Signature Algorithm: sha256WithRSAEncryption
97:10:37:fe:cd:77:f9:22:8a:f3:ea:af:d1:9d:16:5d:27:1b:
59:ed:9a:cd:7d:7a:e0:c8:c5:25:11:4b:43:4b:b7:6c:ad:53:
1d:93:61:78:80:7d:d7:f2:6a:97:23:2d:74:77:71:df:2a:5f:
20:c1:50:f7:54:42:70:0b:05:41:08:39:1d:36:91:1c:52:b6:
95:08:32:4e:3b:42:e9:46:06:51:d5:bc:4f:26:bf:8a:bb:28:
1b:5b:0d:d8:8c:86:a4:41:e9:d2:16:4a:77:20:56:ce:a2:b5:
82:da:db:a9:81:35:dd:22:f9:8a:b5:9c:59:dc:d0:f5:2d:38:
93:52:3b:77:0d:07:bc:19:99:46:43:57:c7:d8:16:7b:7c:b9:
85:d5:58:a5:33:e3:06:03:35:25:23:d5:d1:89:bf:8e:a8:1e:
ca:e3:6f:81:e8:a0:4e:82:c9:63:31:44:8e:08:96:67:ff:07:
6a:7b:e8:b2:1d:cb:c2:74:57:49:cc:04:d6:c0:58:bf:cd:4b:
e8:83:92:85:2f:69:67:f3:84:32:ab:1b:ab:e8:48:c8:d7:96:
83:cb:76:3a:7b:1b:0e:cf:6f:ec:73:9a:9a:65:39:a5:a7:d3:
e5:63:53:1f:fe:83:cb:ef:98:4c:d1:1d:dd:7f:ba:f6:be:b4:
ba:a4:57:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:30 2023 by rpki-client on console-ams.rpki-client.org