Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bxALExqKq6van2xbvbuggPige7Y.roa
File: bxALExqKq6van2xbvbuggPige7Y.roa (raw, json)
Hash identifier: dnVcTvogfX026iwv0MGwmJ1R93sXFoX4TCUBShm4Yfg=
Subject key identifier: 6F:10:0B:13:1A:8A:AB:AB:DA:9F:6C:5B:BD:BB:A0:80:F8:A0:7B:B6
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0181FC2C4BF9695C9624929027456DFD3A80
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bxALExqKq6van2xbvbuggPige7Y.roa
Signing time: Thu 14 Jul 2022 10:06:10 +0000
ROA not before: Thu 14 Jul 2022 10:06:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 193.233.179.0/24 maxlen: 24
193.233.178.0/24 maxlen: 24
193.233.182.0/24 maxlen: 24
193.233.183.0/24 maxlen: 24
193.233.180.0/24 maxlen: 24
193.233.181.0/24 maxlen: 24
193.233.186.0/24 maxlen: 24
193.233.184.0/24 maxlen: 24
193.233.185.0/24 maxlen: 24
193.233.189.0/24 maxlen: 24
193.233.190.0/24 maxlen: 24
193.233.187.0/24 maxlen: 24
193.233.188.0/24 maxlen: 24
193.233.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fc:2c:4b:f9:69:5c:96:24:92:90:27:45:6d:fd:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jul 14 10:06:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f100b131a8aababda9f6c5bbdbba080f8a07bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:32:bf:6f:e3:8e:6f:b7:83:a0:47:1b:51:95:
54:d6:d0:d3:2d:e9:7b:8c:e2:ed:85:c6:0d:7d:a0:
cf:04:2b:ad:96:4c:f5:df:ff:08:7d:3a:d0:42:dc:
8c:1b:40:58:5d:86:cf:df:d1:d1:cf:ac:c4:fd:a6:
03:35:7c:58:e3:1e:66:e6:c2:22:94:79:47:c4:f0:
a4:10:3e:47:ea:f3:f7:b0:50:7c:67:7a:02:97:d4:
aa:ff:a7:25:82:53:42:18:ac:87:98:ae:72:b3:51:
a7:84:f6:66:69:13:28:62:d3:1c:aa:0d:a3:56:75:
6a:2f:94:56:01:f8:1f:72:81:18:11:14:ce:4f:3e:
e7:ec:b5:dc:c8:7e:04:a9:ae:46:0e:19:cd:8a:14:
22:6d:81:40:f0:3f:80:15:0a:62:f8:ee:ed:eb:4f:
f7:5c:00:da:a9:de:0c:ba:0f:a9:3e:e2:cc:8e:ee:
ec:c8:fa:0b:72:4a:ec:ae:a9:2d:0a:15:7e:e7:a5:
3d:ce:7a:3d:49:46:e8:09:f3:f2:ff:3a:fa:19:75:
aa:66:a5:aa:d1:eb:bc:08:06:a5:e0:96:36:19:ab:
3f:3e:de:03:bc:ce:93:c9:39:e8:ab:4c:cf:18:fc:
65:27:1e:11:be:1d:1b:c9:1a:09:b8:70:a8:c0:06:
50:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:10:0B:13:1A:8A:AB:AB:DA:9F:6C:5B:BD:BB:A0:80:F8:A0:7B:B6
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bxALExqKq6van2xbvbuggPige7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.178.0-193.233.191.255
Signature Algorithm: sha256WithRSAEncryption
02:66:be:11:a4:4b:c5:5a:13:0b:0d:1e:27:ba:d7:c2:6a:b3:
3c:3f:f7:57:ae:04:4b:66:82:9c:fa:14:22:4d:2f:f4:88:18:
ff:18:58:18:b8:0e:75:20:2f:5b:49:74:88:cc:87:77:26:18:
25:74:26:95:25:fd:3e:65:f4:38:16:93:c9:4c:7e:32:2d:5f:
62:24:58:b7:c3:63:86:df:71:88:e1:53:2b:39:9f:f8:4e:8c:
47:ae:15:30:a1:06:a9:11:6b:b4:3a:8f:94:e0:1f:38:1c:a3:
28:34:b3:2f:54:36:4d:bc:64:94:72:5e:c0:63:a5:d9:cc:f7:
35:7a:c4:ff:94:d9:95:ef:96:85:74:38:22:f1:f3:24:11:d7:
46:1d:0a:19:4f:5a:19:9a:19:ea:7c:e5:f9:11:1b:bf:61:f2:
fb:ab:ca:8e:be:65:d0:62:b4:e7:cb:7e:9d:5b:a1:ca:a7:e2:
5f:4b:10:37:85:14:3e:9b:a6:1b:c8:2a:cd:16:bd:5e:f5:47:
eb:4a:f9:6e:bd:c1:cb:d1:bb:73:a4:ff:1f:08:53:48:5a:4c:
54:2e:c6:66:3b:b6:41:15:de:2b:21:ea:c1:ec:ac:29:8c:06:
d0:d0:b0:57:be:da:7d:49:56:f6:4e:5a:76:b0:a3:6b:eb:49:
56:95:e5:66
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYH8LEv5aVyWJJKQJ0Vt/TqAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjIwNzE0MTAwNjEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjEwMGIxMzFhOGFhYmFiZGE5ZjZjNWJiZGJiYTA4MGY4YTA3YmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zK/b+OOb7eDoEcbUZVU1tDTLel7
jOLthcYNfaDPBCutlkz13/8IfTrQQtyMG0BYXYbP39HRz6zE/aYDNXxY4x5m5sIi
lHlHxPCkED5H6vP3sFB8Z3oCl9Sq/6clglNCGKyHmK5ys1GnhPZmaRMoYtMcqg2j
VnVqL5RWAfgfcoEYERTOTz7n7LXcyH4Eqa5GDhnNihQibYFA8D+AFQpi+O7t60/3
XADaqd4Mug+pPuLMju7syPoLckrsrqktChV+56U9zno9SUboCfPy/zr6GXWqZqWq
0eu8CAal4JY2Gas/Pt4DvM6TyTnoq0zPGPxlJx4Rvh0byRoJuHCowAZQMQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFG8QCxMaiqur2p9sW727oID4oHu2MB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvYnhBTEV4cUtxNnZhbjJ4YnZidWdnUGlnZTdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHB6bID
BAbB6YAwDQYJKoZIhvcNAQELBQADggEBAAJmvhGkS8VaEwsNHie618Jqszw/91eu
BEtmgpz6FCJNL/SIGP8YWBi4DnUgL1tJdIjMh3cmGCV0JpUl/T5l9DgWk8lMfjIt
X2IkWLfDY4bfcYjhUys5n/hOjEeuFTChBqkRa7Q6j5TgHzgcoyg0sy9UNk28ZJRy
XsBjpdnM9zV6xP+U2ZXvloV0OCLx8yQR10YdChlPWhmaGep85fkRG79h8vuryo6+
ZdBitOfLfp1bocqn4l9LEDeFFD6bphvIKs0WvV71R+tK+W69wcvRu3Ok/x8IU0ha
TFQuxmY7tkEV3ish6sHsrCmMBtDQsFe+2n1JVvZOWnawo2vrSVaV5WY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:31 2023 by rpki-client on console-ams.rpki-client.org