Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/cE55CVlBUdJl4AOHp7ylVMqxdeA.roa
File: cE55CVlBUdJl4AOHp7ylVMqxdeA.roa (raw, json)
Hash identifier: CvwrPcAGY7LgvYJ2awVDIay4CPMRqo13oVQ3Jjd0zms=
Subject key identifier: 70:4E:79:09:59:41:51:D2:65:E0:03:87:A7:BC:A5:54:CA:B1:75:E0
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0184BE37FE5265E59E06114D0C6CD337778A
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/cE55CVlBUdJl4AOHp7ylVMqxdeA.roa
Signing time: Mon 28 Nov 2022 12:30:51 +0000
ROA not before: Mon 28 Nov 2022 12:30:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.233.108.0/23 maxlen: 24
193.233.110.0/23 maxlen: 24
193.233.118.0/23 maxlen: 24
193.233.116.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:be:37:fe:52:65:e5:9e:06:11:4d:0c:6c:d3:37:77:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Nov 28 12:30:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=704e7909594151d265e00387a7bca554cab175e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:11:a7:06:13:74:8e:58:53:2b:ab:8a:55:
11:47:78:f5:cf:95:ed:1d:c4:0d:85:3c:d0:84:4f:
76:d4:aa:9a:fa:ba:cf:68:c2:76:67:44:37:67:44:
64:56:7d:c5:dd:73:78:f9:05:9a:c9:36:fd:d7:cf:
72:5a:95:eb:cd:21:40:97:0d:d9:16:a8:81:a9:3c:
45:0e:d3:eb:4d:f9:10:90:00:7e:f6:a3:b9:84:17:
9b:cf:bf:81:4d:71:db:24:40:ff:a4:d2:20:18:ae:
6f:3d:7b:ec:7b:22:42:73:c2:e6:c4:be:bf:7a:d7:
d7:c5:46:90:4a:35:eb:31:1c:02:39:f0:ff:9f:64:
da:3a:68:d9:11:b0:ab:fe:36:dc:6f:13:02:5d:18:
8c:72:57:93:c8:11:bc:e8:cd:25:ab:62:40:a3:5b:
6b:9c:68:16:05:ee:d9:b4:a0:e1:8e:05:13:0a:57:
64:e6:58:b8:ea:a0:33:f7:4a:f3:1c:d8:f8:44:5d:
25:ca:68:20:fc:1e:85:3e:73:68:68:e1:07:df:d5:
5d:7c:de:df:95:90:44:a6:78:24:18:59:f5:56:53:
c7:9c:ad:4e:69:9f:b1:d6:ea:c9:97:b6:d5:fb:15:
36:11:1b:2c:ad:2a:37:eb:e4:f6:0a:45:f7:97:6b:
d3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4E:79:09:59:41:51:D2:65:E0:03:87:A7:BC:A5:54:CA:B1:75:E0
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/cE55CVlBUdJl4AOHp7ylVMqxdeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.108.0/22
193.233.116.0/22
Signature Algorithm: sha256WithRSAEncryption
36:b6:9c:b2:e5:6b:67:b7:65:43:58:51:5c:36:21:90:82:fa:
1c:71:1e:48:c8:7b:30:6f:4e:98:00:77:d3:8b:ff:b6:47:ac:
dc:d4:6c:e8:b2:5a:34:92:44:08:60:58:c4:3a:e5:4c:6a:d3:
69:4c:a0:a5:d7:d4:bf:bb:e6:43:2c:3c:06:1c:64:64:b5:40:
ee:e3:2b:a8:1d:f4:56:9c:1f:12:45:78:06:17:c0:7d:98:e8:
99:01:2a:41:f8:7f:0d:a6:25:54:60:5d:93:92:7d:a1:79:28:
b7:2a:3e:2b:96:3b:ca:27:e5:b1:6c:63:ee:35:5e:e1:cb:0b:
6f:11:2c:e1:50:8b:af:25:4e:aa:85:0c:f2:9b:fb:1e:29:27:
f4:c7:d6:80:33:49:00:83:a4:ca:36:67:d5:79:84:83:ee:6b:
27:85:04:4b:b4:7e:38:ec:2a:7c:34:52:86:3e:53:60:d8:3d:
cf:4a:ac:ac:2c:6a:8e:cb:88:4f:e3:34:fa:24:1c:96:29:9b:
eb:ae:20:b8:95:b4:d0:f0:02:bf:58:fc:6d:48:cd:8a:4a:43:
0c:f8:89:3f:c9:64:1f:c1:e9:97:b4:7b:8b:80:73:3d:73:51:
2a:9c:d4:d2:14:c9:70:51:43:64:a5:76:2f:28:ff:fe:09:e9:
a3:47:8b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:38 2023 by rpki-client on console-fra.rpki-client.org