Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/jxGbjgZBejormvASSX1w7NFqlbI.roa
File: jxGbjgZBejormvASSX1w7NFqlbI.roa (raw, json)
Hash identifier: s33+vtvJ5m6xY9QFeVPCMg4DUwo2KyoFh722paVWBV4=
Subject key identifier: 8F:11:9B:8E:06:41:7A:3A:2B:9A:F0:12:49:7D:70:EC:D1:6A:95:B2
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018300297F2E16E2B3F859BD94099771D9F8
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/jxGbjgZBejormvASSX1w7NFqlbI.roa
Signing time: Fri 02 Sep 2022 21:44:22 +0000
ROA not before: Fri 02 Sep 2022 21:44:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51659
IP address blocks: 193.233.84.0/22 maxlen: 22
193.233.92.0/22 maxlen: 22
193.233.16.0/24 maxlen: 24
193.233.22.0/24 maxlen: 24
193.233.23.0/24 maxlen: 24
193.233.21.0/24 maxlen: 24
193.233.19.0/24 maxlen: 24
193.233.20.0/24 maxlen: 24
193.233.240.0/22 maxlen: 22
193.233.18.0/24 maxlen: 24
193.233.252.0/22 maxlen: 22
193.233.61.0/24 maxlen: 24
193.233.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:00:29:7f:2e:16:e2:b3:f8:59:bd:94:09:97:71:d9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Sep 2 21:44:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f119b8e06417a3a2b9af012497d70ecd16a95b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ec:48:4c:90:0a:2b:07:2d:4f:ca:6d:e9:28:
4a:33:9f:7c:e4:b6:42:22:f5:ba:03:dc:13:c4:30:
42:1e:05:33:6c:04:99:91:9d:9f:d1:2c:07:0f:c1:
5a:ec:30:c8:25:79:0a:33:6f:c5:34:57:2e:54:e5:
cb:69:9b:5b:9f:ae:0a:51:32:f0:d2:46:8b:5e:18:
59:c7:81:ad:71:3f:7b:b1:d9:4f:11:97:d1:4e:f5:
22:34:7c:ca:4f:15:42:95:5b:5b:f2:38:b0:6e:e9:
b0:b1:00:49:a5:39:1e:c6:d6:b2:47:92:cb:35:9e:
27:25:4f:ac:51:f1:fb:fb:f1:07:d5:24:53:e6:8a:
8e:01:d3:4b:36:5f:a3:cc:0f:75:89:7a:af:fa:92:
7e:f6:b9:a2:32:b3:c6:4b:12:00:d5:a0:77:9e:42:
ad:a4:d0:52:70:c8:2e:91:ca:a8:ed:37:86:26:77:
f1:d3:ed:13:3b:c2:9b:bc:1f:a1:93:4c:f9:53:c0:
85:87:a8:6c:11:05:80:76:75:27:af:af:f1:f8:0d:
51:2e:cb:14:9c:9d:d5:e7:a1:79:04:47:70:1b:b3:
b4:92:4f:cf:dc:b8:3c:60:e4:2a:a3:1f:c4:0f:00:
2c:11:2d:29:82:5b:15:e2:f9:56:57:44:4a:3f:f5:
33:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:11:9B:8E:06:41:7A:3A:2B:9A:F0:12:49:7D:70:EC:D1:6A:95:B2
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/jxGbjgZBejormvASSX1w7NFqlbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.16.0/24
193.233.18.0-193.233.23.255
193.233.61.0/24
193.233.84.0/22
193.233.92.0/22
193.233.192.0/22
193.233.240.0/22
193.233.252.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:f8:10:aa:44:3e:92:52:9d:90:77:5f:65:82:5c:c9:96:ef:
24:e6:55:ff:94:25:38:77:14:28:0c:25:29:d3:29:a0:32:83:
5c:8d:fb:ce:ea:f3:3c:07:5e:d8:ef:fc:db:b3:0c:9e:5b:c0:
e3:81:5c:bf:55:a4:8c:5a:d1:c8:e6:b1:1f:1a:14:33:aa:b5:
c1:2a:d3:1b:fb:82:b1:98:40:4e:00:7c:d0:9b:5d:dc:fd:e6:
45:5d:a2:98:d1:75:77:b9:3f:2a:56:8e:bc:d3:5d:b3:70:de:
eb:0f:a9:8f:02:05:d4:4f:87:6d:95:6d:46:1a:fe:86:a7:cf:
20:dc:9d:5a:35:27:d5:52:6a:4f:91:6a:3e:a6:c5:c1:ee:aa:
23:2d:f2:c4:2a:d4:20:b2:91:88:6e:b1:b0:75:8d:71:8d:37:
43:97:22:80:0b:ef:5a:be:46:f4:39:77:0c:43:0c:be:da:f3:
ea:87:b6:22:f1:ae:12:e7:6d:51:67:97:2d:93:b5:47:5b:40:
57:52:76:80:24:cb:89:2b:93:86:72:1c:7a:d7:55:84:62:e0:
31:06:d8:75:f2:fe:88:bc:fb:32:3c:c4:4b:10:fc:4f:76:df:
8f:c3:9d:c7:59:e3:66:78:3b:d4:fc:a2:c6:60:77:ae:b0:1a:
57:c6:9d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:38 2023 by rpki-client on console-fra.rpki-client.org