Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/_jdcBefsyIbSmYuanV77oXhjGBU.roa
File: _jdcBefsyIbSmYuanV77oXhjGBU.roa (raw, json)
Hash identifier: 1oQqhAKRQeyp8r7SPNZ8U4jM3iwn8dvgXe7XX7aSSBE=
Subject key identifier: FE:37:5C:05:E7:EC:C8:86:D2:99:8B:9A:9D:5E:FB:A1:78:63:18:15
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 049C7E6F
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/_jdcBefsyIbSmYuanV77oXhjGBU.roa
Signing time: Thu 03 Feb 2022 17:32:40 +0000
ROA not before: Thu 03 Feb 2022 17:32:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207967
IP address blocks: 193.233.120.0/22 maxlen: 22
193.233.124.0/23 maxlen: 23
193.233.126.0/23 maxlen: 23
193.233.96.0/22 maxlen: 22
193.233.104.0/22 maxlen: 22
193.233.112.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77364847 (0x49c7e6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 3 17:32:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe375c05e7ecc886d2998b9a9d5efba178631815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:5d:ed:4f:e3:5b:95:49:f6:aa:ef:e0:fb:
8d:b4:5c:8e:5a:33:d5:a8:1e:d4:d9:9b:be:e0:5c:
c7:8b:ec:8f:dc:04:63:4a:95:d6:0b:28:fa:88:cd:
6a:16:c2:a7:d2:f1:62:89:61:ec:b9:e8:99:a7:14:
39:6c:74:8c:18:2d:78:db:c8:29:ef:b1:21:ae:fa:
3c:dd:ad:4d:d8:a9:d0:f4:7b:e6:bb:8e:1c:ce:99:
ad:59:30:71:b9:8b:fa:0a:f2:d5:59:94:56:09:dd:
2b:96:ff:f6:5a:29:b5:d5:17:61:80:79:34:96:82:
dd:20:42:4b:e7:51:62:6e:0d:af:6d:71:36:0d:c9:
a7:5d:c0:e2:32:75:f4:5e:fc:52:e5:f4:09:fb:2c:
97:57:2c:92:c6:8a:d0:43:34:22:6c:6e:a5:2f:6d:
eb:96:2b:c9:31:d6:f3:2a:ac:3f:dd:0f:54:5a:78:
07:c7:1a:01:9a:f0:95:0f:58:da:75:35:ad:63:e9:
c5:b9:cc:ba:52:7c:af:2b:5c:06:3c:88:07:9b:e7:
9d:f2:88:7e:5a:8a:af:f1:4c:0a:3c:43:a0:f9:a7:
90:0b:1d:7f:cc:b4:4a:73:5b:0f:2c:c8:77:9a:4c:
fa:c1:da:b4:f5:ee:46:6b:51:9b:80:12:ca:63:86:
5c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:37:5C:05:E7:EC:C8:86:D2:99:8B:9A:9D:5E:FB:A1:78:63:18:15
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/_jdcBefsyIbSmYuanV77oXhjGBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.96.0/22
193.233.104.0/22
193.233.112.0/22
193.233.120.0/21
Signature Algorithm: sha256WithRSAEncryption
81:03:2f:f6:c2:9f:a7:f0:db:58:c6:1f:be:3e:7c:71:a8:fc:
d5:18:04:1e:ee:95:e3:05:0f:2c:4a:12:fa:d7:f4:ab:09:ac:
d4:c7:01:15:73:ff:79:90:da:59:25:7a:3b:87:be:a1:b2:c5:
d5:eb:58:10:64:38:95:58:9a:5e:64:58:c4:0f:72:31:97:42:
e9:f0:9d:fc:30:b1:2e:b6:2e:9b:b6:68:8f:e5:fa:79:0d:23:
6a:6e:86:02:5a:eb:72:23:8f:f9:0c:5d:82:97:f7:e3:bf:f9:
20:04:81:9e:fe:67:bf:5e:22:6a:14:7b:33:0c:4d:0d:29:09:
3f:5c:06:68:5e:6b:af:2d:87:f9:ea:98:b7:70:36:f4:87:d0:
3a:71:02:a1:0c:5b:16:e1:30:8a:2e:46:ab:bb:4e:ad:1d:64:
d4:68:7c:eb:0b:41:b0:fd:35:a6:f6:ee:2d:07:ad:76:7e:53:
e3:a9:07:14:26:b7:30:c1:ed:5c:36:99:4f:6d:59:57:ce:77:
d4:78:07:0b:d3:23:52:05:a9:96:ad:3b:ee:bc:ae:79:bb:5b:
15:f9:cf:2b:3e:e4:14:d6:6d:5f:b1:e6:3c:2a:5b:63:5e:d3:
07:9e:ec:f0:54:e5:f9:da:cd:3b:d0:47:6c:a5:3b:0d:1d:2b:
6b:cc:26:12
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEBJx+bzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NmQ2NDhiZGJhOTY1NDYxYjFlOGMxMWI5ZGQ0MzZjNjEzODI4NzNjMB4XDTIyMDIw
MzE3MzI0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmUzNzVjMDVlN2Vj
Yzg4NmQyOTk4YjlhOWQ1ZWZiYTE3ODYzMTgxNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL8rXe1P41uVSfaq7+D7jbRcjloz1age1NmbvuBcx4vsj9wE
Y0qV1gso+ojNahbCp9LxYolh7LnomacUOWx0jBgteNvIKe+xIa76PN2tTdip0PR7
5ruOHM6ZrVkwcbmL+gry1VmUVgndK5b/9loptdUXYYB5NJaC3SBCS+dRYm4Nr21x
Ng3Jp13A4jJ19F78UuX0Cfssl1csksaK0EM0ImxupS9t65YryTHW8yqsP90PVFp4
B8caAZrwlQ9Y2nU1rWPpxbnMulJ8rytcBjyIB5vnnfKIflqKr/FMCjxDoPmnkAsd
f8y0SnNbDyzId5pM+sHatPXuRmtRm4ASymOGXLUCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBT+N1wF5+zIhtKZi5qdXvuheGMYFTAfBgNVHSMEGDAWgBSG1ki9upZUYbHo
wRud1DbGE4KHPDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2h0Wkl2YnFXVkdHeDZNRWJuZFEyeGhPQ2h6dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGMvYWM1OGVhLWM0NTktNDhjYS1iODJiLTRkZWM0ZGFmZWU0OS8x
L19qZGNCZWZzeUliU21ZdWFuVjc3b1hoakdCVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMv
YWM1OGVhLWM0NTktNDhjYS1iODJiLTRkZWM0ZGFmZWU0OS8xL2h0Wkl2YnFXVkdH
eDZNRWJuZFEyeGhPQ2h6dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAsHpYAMEAsHpaAMEAsHpcAMEA8Hp
eDANBgkqhkiG9w0BAQsFAAOCAQEAgQMv9sKfp/DbWMYfvj58caj81RgEHu6V4wUP
LEoS+tf0qwms1McBFXP/eZDaWSV6O4e+obLF1etYEGQ4lViaXmRYxA9yMZdC6fCd
/DCxLrYum7Zoj+X6eQ0jam6GAlrrciOP+Qxdgpf347/5IASBnv5nv14iahR7MwxN
DSkJP1wGaF5rry2H+eqYt3A29IfQOnECoQxbFuEwii5Gq7tOrR1k1Gh86wtBsP01
pvbuLQetdn5T46kHFCa3MMHtXDaZT21ZV8531HgHC9MjUgWplq077ryuebtbFfnP
Kz7kFNZtX7HmPCpbY17TB57s8FTl+drNO9BHbKU7DR0ra8wmEg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:30 2023 by rpki-client on console-ams.rpki-client.org