Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/g-_FN725aMrJmg22FZb99yT3VYc.roa
File: g-_FN725aMrJmg22FZb99yT3VYc.roa (raw, json)
Hash identifier: 8QAycO9lk9dDkVml2+MHg/hbXzqVKLT4EA/djQAOXR8=
Subject key identifier: 83:EF:C5:37:BD:B9:68:CA:C9:9A:0D:B6:15:96:FD:F7:24:F7:55:87
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018216D3EBCE9B2C577C2DD13AF05231080E
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/g-_FN725aMrJmg22FZb99yT3VYc.roa
Signing time: Tue 19 Jul 2022 14:19:23 +0000
ROA not before: Tue 19 Jul 2022 14:19:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 193.233.132.0/22 maxlen: 22
193.233.236.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:16:d3:eb:ce:9b:2c:57:7c:2d:d1:3a:f0:52:31:08:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jul 19 14:19:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83efc537bdb968cac99a0db61596fdf724f75587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:de:a6:4d:c9:9d:3a:80:fc:79:40:e1:50:c8:
fb:17:36:eb:bd:2a:de:e5:62:6a:fb:02:0b:a8:73:
de:0e:f4:77:c4:0d:09:c5:09:86:45:54:c0:03:78:
f7:14:32:9a:ec:d3:cd:3a:86:33:18:85:13:48:09:
23:43:5b:f1:ab:c5:02:7b:e8:bb:01:a5:2e:32:28:
18:be:7b:86:15:ef:fc:3f:f7:b1:33:ee:25:09:af:
a7:d7:94:6a:ae:1f:3f:cc:3b:80:26:6a:34:8a:d3:
d2:41:fc:84:58:b4:07:74:22:8b:b9:55:6e:55:8a:
4c:26:b4:9e:34:53:2b:32:be:e0:0d:71:95:60:16:
c1:75:f5:8b:4c:f8:f7:05:f9:76:40:eb:89:6a:c2:
da:01:e4:9a:80:ef:9d:0a:47:ee:9d:7d:4f:1b:79:
09:34:1f:74:f6:bc:7c:69:52:35:4f:51:49:7e:47:
5f:d7:71:6d:08:81:fc:35:e6:8f:c7:92:35:b9:ee:
95:cd:ec:2a:32:c1:87:7e:e0:17:31:b3:8a:3b:7a:
a1:a6:0d:15:19:59:23:3d:ba:e2:d7:92:e0:9f:19:
3f:50:9f:ec:2f:cc:ff:f2:9c:f3:97:8b:0a:13:e9:
18:5e:1c:76:f2:1d:5e:e7:86:1e:cd:02:33:bd:70:
d7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EF:C5:37:BD:B9:68:CA:C9:9A:0D:B6:15:96:FD:F7:24:F7:55:87
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/g-_FN725aMrJmg22FZb99yT3VYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.132.0/22
193.233.236.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:ca:db:47:4c:1f:3f:c6:da:c7:fd:52:66:15:ae:b0:bc:d2:
fa:1a:e0:fa:25:ee:aa:3c:16:9f:87:35:96:01:89:0f:53:08:
53:63:2a:8a:67:60:f8:79:3a:8f:67:0a:ef:ed:7e:bc:ae:fe:
5b:54:18:42:71:18:69:93:72:d7:8d:dc:d4:f7:97:c7:80:75:
a3:85:be:ef:c7:55:57:c1:e7:1f:b3:1f:7f:e1:b4:ff:dc:21:
fd:a4:de:e9:54:cb:22:45:93:76:43:83:3e:8a:7c:e8:68:33:
e7:e0:16:7a:6a:ba:75:3e:32:28:1a:0c:8f:cb:47:0c:61:78:
a1:2f:a7:40:e9:16:46:94:29:e3:59:d2:17:61:c9:52:de:32:
c1:74:33:6a:55:38:0f:19:21:9f:96:4a:62:3c:8a:f0:9b:da:
59:69:f5:87:40:45:04:31:bb:49:1b:9c:16:84:dd:29:92:21:
22:92:2a:4a:d8:c1:94:4a:4f:9e:f2:b2:fb:df:4a:1b:ba:ac:
96:23:e9:75:6d:eb:99:8b:ca:76:d0:2d:86:a0:fc:66:99:1b:
e9:4a:ea:46:8e:62:be:cd:34:bb:58:a9:f5:32:19:dd:d2:94:
e4:fa:cf:a8:92:a6:17:71:48:77:bd:54:78:9d:5d:0a:93:0f:
ac:bc:9a:57
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYIW0+vOmyxXfC3ROvBSMQgOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjIwNzE5MTQxOTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2VmYzUzN2JkYjk2OGNhYzk5YTBkYjYxNTk2ZmRmNzI0Zjc1NTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi96mTcmdOoD8eUDhUMj7FzbrvSre
5WJq+wILqHPeDvR3xA0JxQmGRVTAA3j3FDKa7NPNOoYzGIUTSAkjQ1vxq8UCe+i7
AaUuMigYvnuGFe/8P/exM+4lCa+n15Rqrh8/zDuAJmo0itPSQfyEWLQHdCKLuVVu
VYpMJrSeNFMrMr7gDXGVYBbBdfWLTPj3Bfl2QOuJasLaAeSagO+dCkfunX1PG3kJ
NB909rx8aVI1T1FJfkdf13FtCIH8NeaPx5I1ue6VzewqMsGHfuAXMbOKO3qhpg0V
GVkjPbri15Lgnxk/UJ/sL8z/8pzzl4sKE+kYXhx28h1e54YezQIzvXDXYwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIPvxTe9uWjKyZoNthWW/fck91WHMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvZy1fRk43MjVhTXJKbWcyMkZaYjk5eVQzVlljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwemEAwQC
wensMA0GCSqGSIb3DQEBCwUAA4IBAQBayttHTB8/xtrH/VJmFa6wvNL6GuD6Je6q
PBafhzWWAYkPUwhTYyqKZ2D4eTqPZwrv7X68rv5bVBhCcRhpk3LXjdzU95fHgHWj
hb7vx1VXwecfsx9/4bT/3CH9pN7pVMsiRZN2Q4M+inzoaDPn4BZ6arp1PjIoGgyP
y0cMYXihL6dA6RZGlCnjWdIXYclS3jLBdDNqVTgPGSGflkpiPIrwm9pZafWHQEUE
MbtJG5wWhN0pkiEikipK2MGUSk+e8rL730obuqyWI+l1beuZi8p20C2GoPxmmRvp
SupGjmK+zTS7WKn1Mhnd0pTk+s+okqYXcUh3vVR4nV0Kkw+svJpX
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:31 2023 by rpki-client on console-ams.rpki-client.org