Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/lo_gMDLX1pm6h4NP3dG0bLBz9iA.roa
File: lo_gMDLX1pm6h4NP3dG0bLBz9iA.roa (raw, json)
Hash identifier: RR1xVNVtWBAmycQCXTMR1bOWmud3FOKf/JxHzbygfuo=
Subject key identifier: 96:8F:E0:30:32:D7:D6:99:BA:87:83:4F:DD:D1:B4:6C:B0:73:F6:20
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 050628B7
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/lo_gMDLX1pm6h4NP3dG0bLBz9iA.roa
Signing time: Mon 14 Mar 2022 15:22:18 +0000
ROA not before: Mon 14 Mar 2022 15:22:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 193.233.198.0/23 maxlen: 23
193.233.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84289719 (0x50628b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Mar 14 15:22:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=968fe03032d7d699ba87834fddd1b46cb073f620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:30:39:f6:03:b3:21:8a:95:5e:44:b3:43:
b1:04:33:fa:1e:69:72:9b:11:f4:03:46:27:89:44:
a8:97:22:b5:9d:87:96:61:fa:e0:f3:87:21:1d:af:
b6:21:cb:0b:70:dd:fa:72:2d:2f:97:30:65:a8:9e:
b2:ff:d9:6b:3d:07:0b:c8:95:1f:47:30:7e:06:b6:
e7:94:17:2f:a2:4d:af:65:d4:ac:2c:b9:63:bc:6e:
12:4a:19:b1:dc:91:2a:dd:31:92:6d:c8:b8:e6:b5:
cc:35:aa:88:dc:55:5a:c0:e0:b7:9b:ac:39:da:54:
a4:cb:b0:42:f9:c7:90:81:d6:7c:95:f9:98:7c:99:
33:21:02:0f:73:96:96:89:ee:77:b0:8f:2e:63:b2:
97:b3:05:d4:fd:b8:c5:8f:d5:c2:ff:0e:cc:82:96:
51:fb:f9:bf:79:a1:15:c5:31:cb:53:c7:82:0d:cb:
cf:1b:d7:04:4b:57:6c:34:0e:a1:8f:63:1f:56:8b:
d4:b1:03:aa:f6:0c:26:e3:3e:3e:e9:4d:31:7d:54:
ea:36:d6:b2:64:76:b5:55:e8:9e:c0:ea:f5:fa:04:
23:f7:0f:5a:37:72:b8:f9:40:25:9a:63:a2:63:4e:
46:1a:28:9f:39:5d:29:2e:4d:79:d7:8f:1c:9e:05:
dd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8F:E0:30:32:D7:D6:99:BA:87:83:4F:DD:D1:B4:6C:B0:73:F6:20
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/lo_gMDLX1pm6h4NP3dG0bLBz9iA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.198.0/23
193.233.201.0/24
Signature Algorithm: sha256WithRSAEncryption
20:de:04:75:03:6a:ea:b8:d0:e5:89:63:5b:cd:df:af:9f:e6:
86:14:e8:9f:6b:6a:80:8e:24:59:f3:68:ff:94:81:8d:b5:36:
c4:b0:d7:fd:5c:92:a6:84:6a:ca:b8:a8:c6:36:54:ac:f1:32:
05:f8:02:f6:39:bd:2b:eb:70:be:c6:57:97:0f:97:1b:f8:07:
94:b0:92:8c:d3:9c:9a:f8:6d:bb:c5:c2:ac:fa:47:28:5a:48:
a8:39:36:28:cc:51:b7:94:7a:0b:c2:d5:b3:d6:7d:f1:4e:59:
28:e8:0e:41:16:8a:b9:2e:b9:18:d5:7d:6c:80:96:a1:e4:1f:
b3:6c:9a:65:1c:0d:8f:b1:2b:c9:08:d7:d2:b4:23:23:77:40:
b0:f4:7e:ab:47:51:76:7c:22:ef:c2:76:1b:b1:3b:3d:13:de:
88:a7:a8:f6:e6:a4:df:da:0c:ea:19:a5:4a:0b:fa:10:36:b9:
7c:d3:84:7e:df:21:d5:69:ef:a2:96:04:6b:cc:ae:4b:b3:7b:
d5:a1:ae:24:78:bd:e3:13:e5:a5:43:fb:d2:42:82:48:ea:65:
39:ef:9b:3d:6a:ed:13:fb:d9:53:6e:fa:0f:21:e0:07:ac:0b:
3c:99:2f:7b:92:ac:aa:e4:69:dd:32:fd:85:3c:43:54:6c:9f:
8a:5e:d4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:31 2023 by rpki-client on console-ams.rpki-client.org