Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/gkfFftSAUPgW76Fd_f_eEMR5MBk.roa
File: gkfFftSAUPgW76Fd_f_eEMR5MBk.roa (raw, json)
Hash identifier: 8j4uGUmyJEiICHwdVmEQQbmNrvQFYm1BOUdEY6Dc6Lg=
Subject key identifier: 82:47:C5:7E:D4:80:50:F8:16:EF:A1:5D:FD:FF:DE:10:C4:79:30:19
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0182B59F0E16DD27BE228A31F076D1D64130
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/gkfFftSAUPgW76Fd_f_eEMR5MBk.roa
Signing time: Fri 19 Aug 2022 10:21:15 +0000
ROA not before: Fri 19 Aug 2022 10:21:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49453
IP address blocks: 193.233.248.0/24 maxlen: 24
193.233.251.0/24 maxlen: 24
193.233.250.0/24 maxlen: 24
193.233.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b5:9f:0e:16:dd:27:be:22:8a:31:f0:76:d1:d6:41:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Aug 19 10:21:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8247c57ed48050f816efa15dfdffde10c4793019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8a:90:e4:b6:0e:70:83:d9:b2:bd:7a:a1:41:
4a:e1:c6:da:40:da:7e:11:3e:9e:8c:a4:c8:da:3a:
f5:c7:59:37:9f:d4:ed:c4:9a:7e:5b:5c:ca:61:18:
b1:75:91:13:65:0a:7b:df:7c:4f:73:8e:7b:0f:0b:
ba:94:30:5f:31:35:f5:db:b4:9e:9b:8e:6e:54:c3:
38:e9:f4:b4:a7:80:ee:f2:77:91:2a:95:87:23:fb:
8d:44:8b:e0:55:8a:87:f8:70:6d:79:2c:f8:27:0a:
a8:22:54:06:81:d0:76:7a:e0:65:a8:59:82:7a:8f:
72:28:3f:ec:0b:42:0e:44:9c:11:13:6b:ae:ba:f7:
62:4b:0c:83:de:9e:0d:d7:f2:0b:e0:3e:b7:a6:5f:
ee:90:98:d5:61:f4:e9:3d:fc:b0:33:a4:bc:01:5d:
b7:94:6e:1a:55:f1:83:74:e5:65:25:eb:04:fa:d1:
6d:17:dc:31:1a:fe:2b:a6:f2:d0:02:61:23:37:09:
b9:7f:2b:bd:ed:76:62:b2:f7:dc:38:1f:9f:b3:40:
63:5d:e2:69:a3:e0:7a:3d:99:2e:40:1b:d6:fb:d7:
e9:f1:3f:a0:57:a5:fb:9c:04:47:a9:1c:19:18:40:
b8:0e:4d:39:b0:72:dd:5c:a3:31:d8:8f:89:6f:ec:
f8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:47:C5:7E:D4:80:50:F8:16:EF:A1:5D:FD:FF:DE:10:C4:79:30:19
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/gkfFftSAUPgW76Fd_f_eEMR5MBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.248.0/22
Signature Algorithm: sha256WithRSAEncryption
22:e4:c5:b7:b2:fe:ac:3a:9f:83:31:de:ff:23:40:2d:a3:b4:
d9:64:fb:8d:57:5e:2b:91:bf:0a:77:07:ee:b5:fa:7e:27:7b:
77:c2:40:96:93:c0:63:26:1f:28:c1:50:a1:78:4d:9b:37:a3:
67:2a:64:ba:87:fb:c7:c5:99:fa:ce:53:41:cd:e1:c7:c4:8e:
74:88:b2:85:e2:38:cc:47:f2:f9:0e:80:31:93:75:5d:87:8e:
e7:11:69:6e:58:75:e4:d7:31:fa:c6:00:fc:28:28:13:cb:6a:
2b:0a:df:2b:6d:09:33:15:6b:92:9c:91:73:e0:32:c9:05:07:
6e:ad:03:28:71:3c:a8:cd:a3:ee:9a:ff:62:1c:4d:cc:a3:2a:
78:f5:90:75:e1:52:a4:48:8c:39:80:6c:75:a4:18:c3:00:df:
08:c4:07:75:35:1f:83:b3:4e:0a:d2:b8:16:c9:5f:65:e3:56:
e4:3b:34:94:69:c2:42:7e:a6:90:4e:3d:65:e9:6f:05:f6:66:
10:89:46:1b:12:b4:f7:10:d6:96:5f:79:75:ae:5e:e0:f1:f2:
ff:f9:f6:8d:bf:7c:03:1e:59:25:0f:40:e2:bb:d0:df:ea:ef:
ad:f3:f1:ab:8a:0a:9e:bd:8d:09:ed:f9:0b:a2:5a:ff:03:ff:
1b:80:74:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:31 2023 by rpki-client on console-ams.rpki-client.org