Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/dLmfVupvR8ii6HNl_OEv1FvZyRc.roa
File: dLmfVupvR8ii6HNl_OEv1FvZyRc.roa (raw, json)
Hash identifier: iyJ9WSHmAof3GxLC7wrduHD4t3y+ygtEaVW4BRSoyDo=
Subject key identifier: 74:B9:9F:56:EA:6F:47:C8:A2:E8:73:65:FC:E1:2F:D4:5B:D9:C9:17
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 04A75468
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/dLmfVupvR8ii6HNl_OEv1FvZyRc.roa
Signing time: Mon 07 Feb 2022 17:49:37 +0000
ROA not before: Mon 07 Feb 2022 17:49:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51659
IP address blocks: 193.233.84.0/22 maxlen: 22
193.233.92.0/22 maxlen: 22
193.233.17.0/24 maxlen: 24
193.233.16.0/24 maxlen: 24
193.233.22.0/24 maxlen: 24
193.233.23.0/24 maxlen: 24
193.233.21.0/24 maxlen: 24
193.233.19.0/24 maxlen: 24
193.233.20.0/24 maxlen: 24
193.233.240.0/22 maxlen: 22
193.233.18.0/24 maxlen: 24
193.233.252.0/22 maxlen: 22
193.233.61.0/24 maxlen: 24
193.233.192.0/22 maxlen: 22
193.233.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78074984 (0x4a75468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 7 17:49:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74b99f56ea6f47c8a2e87365fce12fd45bd9c917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c1:e2:4e:38:1a:b2:1d:e5:11:27:e3:c5:46:
2c:e1:45:98:f1:3d:4e:3a:f7:a0:b1:4f:38:2f:aa:
84:03:ac:91:0d:42:5c:0f:79:91:be:9b:57:dd:86:
3d:71:c1:c2:bf:6b:6a:69:f2:f7:ee:97:7c:54:98:
23:28:66:ba:ed:df:ad:03:b5:dd:79:89:8a:53:6d:
9c:6b:6d:9b:53:33:17:59:a4:fc:6d:a0:2f:0d:5b:
36:98:cf:0d:57:68:14:97:db:d0:b8:7a:ac:70:d0:
cb:09:38:33:bc:12:0a:a9:8c:9f:03:d0:9b:52:07:
85:3d:0e:8b:25:6d:a4:b7:f6:33:ec:b3:f4:eb:01:
c8:e4:b5:fa:d7:c2:69:d8:7e:52:a6:9a:d0:09:e8:
5f:4a:fa:74:cd:07:cf:84:2f:07:d9:68:90:b2:b9:
ba:f8:6c:7a:80:0c:f3:eb:b5:7f:38:9d:a2:3c:f9:
58:b6:63:9d:63:de:b9:b9:f6:e0:7b:88:97:27:73:
59:3c:f5:0d:12:ad:e1:a3:44:c9:f7:42:a8:f8:96:
e7:fe:08:47:7a:ce:de:4f:0f:e7:c6:2e:38:cf:60:
ec:81:43:f4:c5:cd:3c:c3:ed:25:a5:9c:3f:41:39:
61:13:cc:c2:e2:92:b5:05:6b:07:0c:97:2c:c0:8c:
97:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B9:9F:56:EA:6F:47:C8:A2:E8:73:65:FC:E1:2F:D4:5B:D9:C9:17
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/dLmfVupvR8ii6HNl_OEv1FvZyRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.16.0/21
193.233.61.0/24
193.233.84.0/22
193.233.92.0/22
193.233.192.0/22
193.233.224.0/22
193.233.240.0/22
193.233.252.0/22
Signature Algorithm: sha256WithRSAEncryption
53:cb:14:54:fb:42:ab:42:ae:3a:75:12:8a:9f:33:52:20:e7:
71:21:ab:a3:0f:75:c6:c5:c5:56:f5:fb:bb:71:c4:84:d7:44:
d7:41:11:d6:6e:4e:11:f6:a5:cb:7f:f1:ef:03:f5:41:bf:01:
ea:94:f8:3f:6c:8d:d0:7d:0d:aa:50:53:c6:a2:81:dc:d2:04:
90:91:c7:4a:fd:77:33:2d:33:3e:6f:fb:cc:4f:a4:3b:82:cc:
11:aa:fd:a3:49:8b:23:56:d4:57:cd:69:9d:94:e0:ee:f9:44:
06:2b:1f:48:c2:c9:80:82:b0:28:c4:62:4c:6b:85:95:b6:d7:
a6:dd:25:6b:8a:77:35:75:f5:3f:cc:29:ac:65:b0:d4:05:52:
9f:43:07:03:f8:26:39:4b:75:8c:b7:3d:57:e2:61:43:42:0c:
51:b5:f6:1c:e1:17:a2:54:80:c7:9c:04:43:60:96:5b:ab:b4:
c2:50:54:d2:80:c9:90:6a:87:99:78:ac:fa:a8:ea:d0:a6:0b:
85:da:5d:aa:82:9e:d9:20:e7:c5:37:12:d7:97:5c:e9:06:90:
3c:fb:63:a1:35:8b:59:a9:d1:a5:5c:a7:63:69:3b:f5:82:94:
2a:85:8b:be:66:2c:c2:fd:c0:6c:67:c4:d0:b9:6b:8a:69:5c:
b2:19:c9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:31 2023 by rpki-client on console-ams.rpki-client.org