Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/f_qctXtVFDte2WybEeA3ukD1aWY.roa
File: f_qctXtVFDte2WybEeA3ukD1aWY.roa (raw, json)
Hash identifier: r5xG25uV0eMtPptZKXl+WTtd+QnPVzQPGJbhEVLqJj8=
Subject key identifier: 7F:FA:9C:B5:7B:55:14:3B:5E:D9:6C:9B:11:E0:37:BA:40:F5:69:66
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0185406C5E9CC783F61195567AA34EE8D8BF
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/f_qctXtVFDte2WybEeA3ukD1aWY.roa
Signing time: Fri 23 Dec 2022 19:18:41 +0000
ROA not before: Fri 23 Dec 2022 19:18:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14576
IP address blocks: 193.233.228.0/22 maxlen: 22
193.233.136.0/22 maxlen: 22
193.233.140.0/22 maxlen: 22
193.233.82.0/23 maxlen: 23
193.233.210.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:40:6c:5e:9c:c7:83:f6:11:95:56:7a:a3:4e:e8:d8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Dec 23 19:18:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ffa9cb57b55143b5ed96c9b11e037ba40f56966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bb:88:b5:74:15:9d:1a:41:f1:be:6b:3d:f6:
6f:28:9e:a8:6d:d6:db:57:cf:55:8c:89:75:7e:6f:
3d:1a:74:a2:ed:ea:4d:80:50:93:3d:cf:28:11:91:
8e:d3:b4:4d:30:92:c3:41:49:48:ce:2a:cb:a5:c5:
72:7c:3d:e5:39:d9:cc:ab:f1:6d:d9:ec:a0:d2:b7:
95:ec:77:f8:3b:40:42:4b:29:dc:13:05:81:27:43:
37:95:1d:92:d7:9e:da:f0:27:c4:0f:26:d0:0b:d7:
10:e5:d0:ed:2b:c9:b2:60:ce:91:7d:e5:69:60:b2:
15:80:1d:c7:c8:17:8b:35:9a:ff:ed:e9:27:8f:3b:
9f:49:18:d6:cc:15:20:df:25:02:b5:c6:10:99:49:
f5:3a:54:29:4a:f2:05:3c:fa:ca:ca:ae:5d:7a:45:
69:9d:e2:7c:e8:ec:9e:81:76:58:60:4f:2f:e9:09:
7b:70:6f:52:c8:2a:ab:34:59:98:f8:a9:dd:1c:20:
7f:de:67:4a:10:85:2c:08:2b:87:22:0f:8b:8b:d3:
53:20:8f:18:d2:e4:0f:80:92:d6:e7:b4:75:5d:0c:
70:4d:4e:fc:aa:f5:30:c0:fa:3b:6c:83:5f:14:a6:
fb:99:f6:3f:dd:a7:c7:02:8b:0a:b3:e3:c4:fc:d0:
df:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FA:9C:B5:7B:55:14:3B:5E:D9:6C:9B:11:E0:37:BA:40:F5:69:66
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/f_qctXtVFDte2WybEeA3ukD1aWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.82.0/23
193.233.136.0/21
193.233.210.0/23
193.233.228.0/22
Signature Algorithm: sha256WithRSAEncryption
54:57:08:b1:32:27:98:5e:fc:84:23:4a:c5:33:fe:41:3f:66:
dd:b4:0e:93:78:7b:09:2f:26:de:a2:30:9d:79:b4:cc:fb:90:
1c:2f:6d:96:57:1c:4b:0f:aa:24:07:19:cb:13:7b:87:49:39:
92:d2:3f:42:c8:ad:78:2a:26:46:5c:7a:8e:67:df:60:d6:6e:
a7:14:84:aa:66:b6:aa:7e:d4:c6:1e:2f:cb:11:93:dd:7b:26:
c3:c1:d7:43:62:05:19:33:88:ac:bb:2a:e9:62:c7:5d:4b:05:
4d:c6:e7:13:f0:b8:47:90:4b:8e:55:ad:f1:79:74:aa:37:dc:
ce:bd:b7:95:b2:b7:58:71:cc:66:b8:77:10:1a:39:c2:24:88:
37:c9:13:ec:b2:d1:92:53:9b:68:42:ce:d5:a2:81:36:08:49:
35:b2:7d:13:a6:08:37:10:4b:98:b8:bc:3b:70:4c:84:1d:a7:
38:30:ab:0b:ce:5d:c0:81:1e:a3:0f:cb:14:14:da:c2:b4:f2:
c7:b8:b2:71:dc:73:22:e3:a8:94:92:2b:17:62:35:db:b4:d2:
3a:bb:12:c7:29:68:48:db:a3:70:91:3b:a1:c2:3d:bc:89:2e:
70:f9:1e:13:79:6d:56:a4:1a:82:e0:07:dc:80:63:cc:f2:b5:
ba:cb:cb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:31 2023 by rpki-client on console-ams.rpki-client.org