Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/eudIokiDgenwVIxoHC6iQDwUc5k.roa
File: eudIokiDgenwVIxoHC6iQDwUc5k.roa (raw, json)
Hash identifier: Exokbbh0VTQMm0kQPIQJU1Zy375YmRe5RkG4YiA//D0=
Subject key identifier: 7A:E7:48:A2:48:83:81:E9:F0:54:8C:68:1C:2E:A2:40:3C:14:73:99
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 04FCD7AE
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/eudIokiDgenwVIxoHC6iQDwUc5k.roa
Signing time: Fri 11 Mar 2022 14:39:30 +0000
ROA not before: Fri 11 Mar 2022 14:39:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 193.233.128.0/22 maxlen: 22
193.233.220.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83679150 (0x4fcd7ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Mar 11 14:39:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ae748a2488381e9f0548c681c2ea2403c147399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:02:9d:7d:83:69:28:ab:24:38:b3:9a:8f:3a:
17:10:05:92:0e:09:82:3b:5b:aa:67:64:f6:c3:51:
0a:5a:6c:8b:56:b9:c0:04:cf:39:87:7c:ac:94:c3:
e3:0b:dc:48:e3:98:00:1c:c1:8a:83:2a:a8:7c:37:
0b:90:a0:54:58:19:c0:09:52:5e:b6:20:ea:09:6e:
a6:a4:da:cd:f5:3d:ba:84:53:6c:a9:47:99:97:3f:
17:13:55:3f:66:c4:56:41:6c:e1:81:83:a9:8e:ee:
b0:37:7d:e7:32:8e:13:87:7c:49:ac:f8:7b:64:f3:
d5:82:af:16:21:f3:12:86:04:b5:72:1a:bf:c8:19:
71:e4:79:c9:72:e1:f9:b4:2c:78:d9:5f:c7:88:30:
1c:4d:b8:08:d4:7c:03:2a:0d:70:43:ee:43:6a:ce:
fa:95:50:b2:0f:7b:77:81:77:09:f9:58:a8:ae:82:
32:d8:0d:96:b1:7e:14:b1:be:cf:24:9c:5b:cf:76:
4e:b3:bc:ea:44:f6:33:44:39:a7:54:c8:af:87:ab:
7d:4c:c0:df:bd:ac:cf:24:c9:a7:3d:38:54:fc:3d:
f8:fa:63:31:3c:aa:88:67:6d:25:8e:9f:ba:9f:f0:
3b:63:3a:a6:7b:16:08:df:ae:7c:73:f8:00:46:2c:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E7:48:A2:48:83:81:E9:F0:54:8C:68:1C:2E:A2:40:3C:14:73:99
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/eudIokiDgenwVIxoHC6iQDwUc5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.128.0/22
193.233.220.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:bf:24:17:d4:73:71:6a:9e:16:8b:5e:e5:74:73:5c:63:9c:
c5:0a:45:da:0f:03:98:c4:ba:9f:20:a1:d0:ee:db:67:18:72:
c3:48:3d:ea:30:c4:e3:d8:91:a0:01:b6:33:4a:9e:94:28:d2:
11:e7:65:3c:26:cc:e2:53:b3:66:04:76:0f:95:7c:9b:c7:04:
07:b7:1e:8e:4d:83:c1:69:d0:b0:7c:69:89:22:fd:ef:4f:95:
67:6b:d4:5f:27:e5:4b:3c:bc:9d:59:01:2f:d6:db:c0:92:b9:
4a:3a:b3:51:59:1d:27:b5:16:99:e5:f1:57:4e:f8:1e:5b:c1:
22:14:ef:d5:04:ba:9b:01:0a:12:fb:02:92:87:b1:35:65:98:
e8:a0:1c:a3:48:d9:7f:ad:40:69:95:8b:68:20:e7:27:77:a4:
dd:3c:22:73:e4:f3:c7:30:38:ae:76:44:13:71:f4:66:5d:52:
93:f5:1a:2b:1c:f9:e9:45:e7:68:3c:0b:8a:cf:a5:83:ae:db:
11:2f:a2:e7:81:60:63:be:a4:c2:03:79:4f:05:a3:10:15:c9:
41:0b:5e:ac:c0:a7:91:a6:27:e9:bd:8e:34:23:5a:fd:26:d2:
56:0c:ef:a7:60:ba:43:4b:fe:0d:75:9d:df:94:76:ef:34:ee:
0a:fc:68:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:38 2023 by rpki-client on console-fra.rpki-client.org