Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ih6f8ozsJ-c5-ktH2z3KXymJNuw.roa
File: ih6f8ozsJ-c5-ktH2z3KXymJNuw.roa (raw, json)
Hash identifier: aPVdZD+IaDfso3+dVbpAmHszbB87U60acYSA+HBVwfE=
Subject key identifier: 8A:1E:9F:F2:8C:EC:27:E7:39:FA:4B:47:DB:3D:CA:5F:29:89:36:EC
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 04200CD7
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ih6f8ozsJ-c5-ktH2z3KXymJNuw.roa
Signing time: Sat 01 Jan 2022 12:04:52 +0000
ROA not before: Sat 01 Jan 2022 12:04:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 193.233.198.0/23 maxlen: 23
193.233.202.0/23 maxlen: 23
193.233.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69209303 (0x4200cd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 12:04:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a1e9ff28cec27e739fa4b47db3dca5f298936ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:a8:42:a2:66:04:ea:ec:ea:a1:f1:0d:02:
bc:20:f5:d6:00:07:98:d0:3f:cc:99:94:f2:7f:fd:
f6:1f:57:f3:d8:e3:b9:a7:ed:1e:76:f2:00:cc:1d:
82:f6:e2:ed:ab:26:4c:34:0a:01:32:b7:29:dc:7c:
86:82:16:4c:fd:92:38:e7:7e:43:0b:8a:05:00:ac:
b0:14:86:e3:41:1d:81:a4:98:47:aa:48:b1:4b:9e:
44:bb:4e:60:b9:1f:ed:a7:e1:59:77:77:a4:2f:2e:
bf:58:64:03:ce:83:e8:d6:88:93:2b:41:b3:47:f5:
84:91:80:5e:9d:9c:59:bd:6d:25:78:be:c1:3d:de:
2f:b5:74:93:83:d9:af:26:24:ef:ef:e3:38:54:66:
16:64:73:d8:30:84:e5:41:23:07:5c:7d:bc:1b:6b:
68:f0:6d:52:6f:f0:f6:64:e6:db:ba:39:61:55:57:
75:4c:9e:9f:bf:85:b9:b6:87:e8:72:d0:4a:d6:c0:
ba:f3:cc:f9:eb:5c:2f:84:b8:9b:70:d8:b2:84:6d:
40:b3:05:1b:ec:71:87:ac:69:e5:3e:6b:96:8d:ce:
be:17:12:16:30:89:66:1e:66:69:d2:1b:11:50:8e:
6c:4c:ae:01:31:7f:50:f5:e5:df:82:29:13:20:38:
15:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1E:9F:F2:8C:EC:27:E7:39:FA:4B:47:DB:3D:CA:5F:29:89:36:EC
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ih6f8ozsJ-c5-ktH2z3KXymJNuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.198.0/23
193.233.201.0-193.233.203.255
Signature Algorithm: sha256WithRSAEncryption
9c:af:f7:2c:f4:5a:bf:fe:0a:05:5b:05:91:1f:3f:69:16:c2:
e5:cd:35:2d:8b:b9:66:0f:e3:fc:37:9a:fd:af:f5:55:5b:a5:
57:33:b3:94:ad:8b:3b:b8:e8:fa:80:ec:29:f5:8c:e5:34:be:
6f:01:17:98:2c:29:6e:56:c8:bd:43:da:a2:26:cd:29:f1:a9:
68:20:06:4b:27:37:fe:4d:d3:3f:08:01:11:f0:b4:eb:d6:63:
54:7e:7c:76:fd:5f:6e:7b:c1:17:5c:4c:07:7c:92:c6:c0:6a:
00:d9:ba:e7:54:4f:14:39:62:90:b6:83:63:b1:4d:f9:40:6c:
a0:15:10:65:32:60:98:e1:63:d6:24:17:f2:5d:3a:95:b3:31:
f6:05:18:1a:97:d1:af:56:07:5f:f2:9e:99:45:66:d8:33:fc:
2d:b2:e0:79:8e:ac:79:27:a2:de:e0:eb:72:b2:8b:19:07:d3:
b9:f4:22:2b:95:5f:d7:89:2e:ca:1e:84:d2:e5:61:2c:44:dc:
17:13:48:03:43:82:cb:8b:b0:d1:d1:99:01:2c:81:aa:64:b9:
b4:fd:0e:9d:6b:f6:c7:4b:8e:41:68:ff:b2:59:de:f4:4b:46:
7f:29:16:46:a5:55:16:a6:34:e4:83:27:66:d4:a4:af:89:8b:
4f:bb:37:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:31 2023 by rpki-client on console-ams.rpki-client.org