Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/lTmgR7st7F34Fth5q1D6Wr5Z7-Y.roa
File: lTmgR7st7F34Fth5q1D6Wr5Z7-Y.roa (raw, json)
Hash identifier: LFKLxVXxW5dIntpUy/mg9r0eriTBRC0lVnuB66ekKd0=
Subject key identifier: 95:39:A0:47:BB:2D:EC:5D:F8:16:D8:79:AB:50:FA:5A:BE:59:EF:E6
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 042A9C9A
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/lTmgR7st7F34Fth5q1D6Wr5Z7-Y.roa
Signing time: Sat 01 Jan 2022 12:04:56 +0000
ROA not before: Sat 01 Jan 2022 12:04:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49392
IP address blocks: 193.233.232.0/22 maxlen: 22
193.233.85.0/24 maxlen: 24
193.233.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69901466 (0x42a9c9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 12:04:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9539a047bb2dec5df816d879ab50fa5abe59efe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:ff:2e:51:3c:b2:e1:eb:91:e2:09:69:5a:
00:ac:55:a8:43:0f:6a:0d:ba:77:43:35:7a:22:96:
10:03:1e:55:d5:2c:95:45:30:fa:29:c6:23:99:71:
04:99:9e:76:79:ea:98:0c:2f:04:73:71:38:ce:60:
e5:4a:cf:79:1a:b7:52:ce:4d:08:88:cb:f8:b3:ed:
84:26:6a:d3:f8:81:c0:33:15:eb:54:fe:84:5b:0f:
28:53:ef:8f:a6:96:0f:38:3f:2c:10:76:b1:0b:6d:
53:d9:4d:0c:9a:5d:00:0f:45:b9:d4:62:f5:8e:2f:
45:16:45:09:b6:68:ee:13:e3:41:14:6e:15:6c:94:
b5:f0:09:b3:66:06:36:06:99:ea:47:86:a2:6f:c6:
4f:76:b3:86:86:ec:00:68:1b:ca:06:f7:fc:a4:6b:
db:cf:76:e8:59:4c:fd:2f:34:b6:45:8e:f9:c7:13:
99:ef:90:a8:db:c4:a5:05:9d:d2:fe:72:25:5b:63:
79:1a:48:ff:3b:c0:f1:15:ba:e0:d8:68:5c:80:d8:
8a:d9:f1:cd:d8:02:33:63:20:74:2b:e4:24:2d:bc:
bd:ec:44:9d:45:ce:f7:22:f8:90:3c:8e:7a:df:b9:
5e:8b:70:59:ac:3f:70:41:d2:48:d4:aa:ee:07:96:
d2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:39:A0:47:BB:2D:EC:5D:F8:16:D8:79:AB:50:FA:5A:BE:59:EF:E6
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/lTmgR7st7F34Fth5q1D6Wr5Z7-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.85.0/24
193.233.212.0/22
193.233.232.0/22
Signature Algorithm: sha256WithRSAEncryption
46:a6:18:f8:aa:53:d8:c3:c4:25:a6:3e:ea:ba:7f:5a:b5:fb:
89:eb:10:ef:3b:bf:a5:e2:ea:84:44:3f:85:42:68:4f:db:96:
82:86:67:0a:5d:ef:ac:1f:e2:5d:76:b1:e2:bd:77:68:34:05:
0c:2a:12:1a:66:ff:72:e2:3d:49:60:26:ab:33:f2:51:25:64:
64:f7:a6:63:87:1e:72:ec:1c:97:4e:85:8a:a2:f0:71:c6:37:
d2:5b:49:d8:47:ea:b0:04:02:7b:79:8e:39:90:4f:e9:d2:b3:
80:24:23:34:f6:98:4c:40:fe:73:65:a7:00:05:40:7a:7d:18:
c5:63:c9:65:18:6c:e8:2a:02:1e:fc:b8:31:f7:18:b1:e7:bb:
c7:e4:9a:0c:22:9a:d8:74:c5:13:08:ec:0f:29:b2:2b:dd:0b:
1b:87:78:79:d8:a0:ee:71:f2:69:24:06:6d:da:67:60:85:72:
c9:32:f1:e4:36:c8:7a:5f:80:ce:3a:4a:ef:47:1f:20:79:27:
fe:33:2d:79:ff:99:97:9e:4b:a9:9a:6e:25:64:2c:4d:44:13:
ab:04:4e:3c:10:95:36:ef:f0:9e:09:b0:28:00:6c:67:13:61:
f4:d6:9a:31:72:d9:3c:0a:cb:18:3d:a9:ca:f4:dd:4b:d3:81:
3f:ea:84:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:31 2023 by rpki-client on console-ams.rpki-client.org