Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/fuwYiiILXV166ohmMPFhIOIU15o.roa
File: fuwYiiILXV166ohmMPFhIOIU15o.roa (raw, json)
Hash identifier: yUXYhhQ3Mh6lEmmMos7IxL3yCEQKC34L1/5SPpe7uME=
Subject key identifier: 7E:EC:18:8A:22:0B:5D:5D:7A:EA:88:66:30:F1:61:20:E2:14:D7:9A
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0183B3CF2ABCA76CB2AB316A13C821E0532F
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/fuwYiiILXV166ohmMPFhIOIU15o.roa
Signing time: Fri 07 Oct 2022 18:57:21 +0000
ROA not before: Fri 07 Oct 2022 18:57:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 193.233.242.0/24 maxlen: 24
193.233.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b3:cf:2a:bc:a7:6c:b2:ab:31:6a:13:c8:21:e0:53:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Oct 7 18:57:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7eec188a220b5d5d7aea886630f16120e214d79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ca:ce:fb:40:d8:cf:48:5f:41:2f:2d:57:85:
65:c2:72:dd:4a:f5:9c:1d:a8:bf:64:d1:5c:9b:b9:
62:02:cb:dc:5b:b7:95:c0:80:0e:9a:b6:41:b7:9b:
57:eb:d8:31:45:ab:26:9c:71:b3:de:86:df:f2:8e:
f2:00:68:d6:5f:fc:90:a2:e8:49:e6:8b:ea:5d:7b:
e4:04:5e:e6:ff:70:c1:90:95:92:8b:e4:ca:07:48:
02:71:e5:79:4a:36:39:9a:7a:ec:06:21:e6:3c:95:
2c:25:8d:f1:54:45:04:8a:f5:41:3b:86:c8:49:7c:
f3:5d:68:a6:fc:87:9a:77:cb:1e:20:e0:ca:bf:0b:
2a:2d:61:0e:72:40:bb:fc:0e:c9:35:e0:8a:07:a1:
d1:99:89:1b:9f:e6:df:27:16:23:e4:84:cd:a6:c4:
2e:92:16:d1:aa:fb:5f:0d:d9:79:af:f7:f0:bf:cb:
e2:65:cc:76:02:23:5a:6a:90:8b:9d:62:e8:67:cb:
3d:71:e6:06:ec:18:bf:1d:03:bf:8b:69:8c:63:21:
cb:6c:bf:7f:24:1e:c7:02:2d:ca:6f:42:a9:08:1b:
79:c9:d4:b5:8c:0f:f3:6c:4f:32:78:6d:85:05:d9:
66:4f:1e:48:d2:ba:5d:59:7d:5d:f2:40:d8:96:23:
6f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EC:18:8A:22:0B:5D:5D:7A:EA:88:66:30:F1:61:20:E2:14:D7:9A
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/fuwYiiILXV166ohmMPFhIOIU15o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.61.0/24
193.233.242.0/24
Signature Algorithm: sha256WithRSAEncryption
12:be:5f:51:4e:a3:d0:d3:e9:b0:ac:42:ae:14:93:35:87:ca:
87:3d:1c:49:ae:70:af:b5:ac:2a:aa:b6:85:3e:ae:6e:d8:51:
b8:d4:c4:8b:62:d2:75:fc:47:c2:c1:4a:58:82:02:0a:1d:3e:
ce:57:2c:64:23:b7:83:47:97:09:81:ba:85:70:c2:f1:a1:e1:
64:ed:86:ac:33:84:b8:69:e9:31:e4:01:3c:ff:95:80:85:1b:
17:b9:7d:b9:b8:73:60:80:a3:8f:88:e0:99:1b:11:a1:f1:d8:
2c:4f:02:06:35:45:77:f3:87:8d:55:13:a3:44:65:40:a8:8a:
20:ea:9f:9c:80:8f:13:24:a5:26:d6:a7:e0:05:61:18:4b:08:
61:2b:b1:b9:db:f6:47:c2:d8:3c:af:d5:b9:3b:2d:90:c9:cb:
ba:10:a6:86:0b:f8:4b:50:10:8c:0d:8a:ab:15:6b:de:10:d6:
a9:e2:0a:75:6f:f5:30:cd:cf:d6:2b:6e:6b:48:04:32:38:9f:
dd:60:89:20:c4:8f:14:f3:36:cd:06:45:a6:e1:fe:eb:1a:4a:
2a:27:f5:d5:a8:06:7a:60:35:05:d1:1f:ce:04:3a:7e:18:89:
37:07:8a:ee:21:d4:57:7c:4d:53:71:55:f7:ac:ca:af:19:1b:
4b:a7:64:48
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYOzzyq8p2yyqzFqE8gh4FMvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjIxMDA3MTg1NzIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWVjMTg4YTIyMGI1ZDVkN2FlYTg4NjYzMGYxNjEyMGUyMTRkNzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsrO+0DYz0hfQS8tV4VlwnLdSvWc
Hai/ZNFcm7liAsvcW7eVwIAOmrZBt5tX69gxRasmnHGz3obf8o7yAGjWX/yQouhJ
5ovqXXvkBF7m/3DBkJWSi+TKB0gCceV5SjY5mnrsBiHmPJUsJY3xVEUEivVBO4bI
SXzzXWim/Iead8seIODKvwsqLWEOckC7/A7JNeCKB6HRmYkbn+bfJxYj5ITNpsQu
khbRqvtfDdl5r/fwv8viZcx2AiNaapCLnWLoZ8s9ceYG7Bi/HQO/i2mMYyHLbL9/
JB7HAi3Kb0KpCBt5ydS1jA/zbE8yeG2FBdlmTx5I0rpdWX1d8kDYliNv+QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH7sGIoiC11deuqIZjDxYSDiFNeaMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvZnV3WWlpSUxYVjE2Nm9obU1QRmhJT0lVMTVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwek9AwQA
wenyMA0GCSqGSIb3DQEBCwUAA4IBAQASvl9RTqPQ0+mwrEKuFJM1h8qHPRxJrnCv
tawqqraFPq5u2FG41MSLYtJ1/EfCwUpYggIKHT7OVyxkI7eDR5cJgbqFcMLxoeFk
7YasM4S4aekx5AE8/5WAhRsXuX25uHNggKOPiOCZGxGh8dgsTwIGNUV384eNVROj
RGVAqIog6p+cgI8TJKUm1qfgBWEYSwhhK7G52/ZHwtg8r9W5Oy2Qycu6EKaGC/hL
UBCMDYqrFWveENap4gp1b/Uwzc/WK25rSAQyOJ/dYIkgxI8U8zbNBkWm4f7rGkoq
J/XVqAZ6YDUF0R/OBDp+GIk3B4ruIdRXfE1TcVX3rMqvGRtLp2RI
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:31 2023 by rpki-client on console-ams.rpki-client.org