Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/rCo2DVDa2JOMekew857E2QfimlM.roa
File: rCo2DVDa2JOMekew857E2QfimlM.roa (raw, json)
Hash identifier: uJQWtp15m3O6fu0NsGsb874Bh5JXR0dJ85Ea/UZ14CI=
Subject key identifier: AC:2A:36:0D:50:DA:D8:93:8C:7A:47:B0:F3:9E:C4:D9:07:E2:9A:53
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0183ADEF6F677AEF34C2151A607F31903CA6
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/rCo2DVDa2JOMekew857E2QfimlM.roa
Signing time: Thu 06 Oct 2022 15:34:53 +0000
ROA not before: Thu 06 Oct 2022 15:34:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 193.233.61.0/24 maxlen: 24
193.233.100.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ad:ef:6f:67:7a:ef:34:c2:15:1a:60:7f:31:90:3c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Oct 6 15:34:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac2a360d50dad8938c7a47b0f39ec4d907e29a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:ab:85:8b:df:d5:b8:3b:94:02:80:9c:b9:
11:ad:31:a6:7f:52:4e:c6:d1:cf:6b:f3:82:48:55:
de:66:90:d5:12:63:43:89:db:c9:de:02:74:2f:a3:
88:b9:6b:20:8e:d7:0f:c9:f2:46:11:6d:ba:a0:e6:
d2:aa:84:ad:1a:1b:59:07:22:1e:02:0b:09:c0:c4:
66:f7:93:6b:e0:bc:da:39:e1:0d:bc:e8:3b:e6:bf:
2b:6d:1b:28:15:0a:31:fd:7f:16:50:b8:36:ed:de:
25:25:8d:03:ae:67:33:49:d8:37:a8:65:6a:16:37:
8c:3a:b2:87:89:cf:88:a0:0d:a5:29:d6:f5:e4:9a:
07:56:f4:66:c7:3f:e7:be:b2:52:40:02:b6:6c:ee:
80:43:f7:d2:b9:a6:a3:cd:1e:95:20:a5:fa:62:f5:
35:34:c2:4e:fe:1d:33:76:06:24:3a:a1:3c:d2:d5:
39:a9:e2:3e:1c:1f:6c:cf:9a:20:8e:cd:9d:81:c9:
10:d5:e5:10:0e:b6:0a:2c:b4:91:20:75:da:ef:d5:
90:c4:e2:6a:38:ec:16:34:18:55:d0:e8:ff:82:2d:
fa:76:2c:c3:15:6d:78:f9:a2:0a:34:1c:cc:46:04:
48:20:19:3b:84:b0:75:b2:63:24:7c:ab:d0:1f:2b:
10:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2A:36:0D:50:DA:D8:93:8C:7A:47:B0:F3:9E:C4:D9:07:E2:9A:53
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/rCo2DVDa2JOMekew857E2QfimlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.61.0/24
193.233.100.0/22
Signature Algorithm: sha256WithRSAEncryption
20:fb:20:71:15:8b:5c:26:d6:34:da:4a:1a:2f:6f:24:23:16:
16:75:f9:41:98:6c:26:5e:ed:12:6e:f9:04:ef:d5:9d:11:e6:
2b:49:29:a2:ac:c2:c1:c3:a7:52:4a:19:5d:bf:18:f8:2a:19:
55:b3:0d:74:01:6a:5b:9b:42:e2:c5:b5:f6:12:61:bd:5c:b0:
bf:68:a8:0a:20:dd:17:99:80:09:c8:eb:55:61:42:c1:88:a5:
69:2d:fc:79:6a:92:9d:6b:26:9e:fc:11:d2:8f:b9:e0:92:4f:
9b:f8:68:64:f8:e7:74:94:49:f1:dd:ad:1a:2e:80:af:af:2f:
97:fb:4a:b9:41:c9:6e:77:60:56:b8:cd:a8:6b:b7:56:18:d1:
37:03:ea:7d:a6:6c:ec:98:da:35:16:3a:e9:db:eb:6b:1c:58:
bd:39:78:f4:5d:ed:26:f8:29:e3:e8:8c:81:8a:07:d0:1b:48:
1a:9b:f5:e6:46:6b:2c:92:50:d3:a6:03:8d:92:2e:d2:03:22:
2d:de:33:60:c0:c1:c7:f4:1c:b4:f8:ee:61:a7:2f:ce:12:13:
8e:21:a3:bc:b5:08:ad:90:7b:b3:3a:17:01:e1:6a:0d:2b:8b:
0b:74:18:18:9c:36:06:a5:5d:3f:78:da:66:69:1c:d4:31:d5:
42:44:f1:fa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYOt729neu80whUaYH8xkDymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjIxMDA2MTUzNDUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzJhMzYwZDUwZGFkODkzOGM3YTQ3YjBmMzllYzRkOTA3ZTI5YTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYyrhYvf1bg7lAKAnLkRrTGmf1JO
xtHPa/OCSFXeZpDVEmNDidvJ3gJ0L6OIuWsgjtcPyfJGEW26oObSqoStGhtZByIe
AgsJwMRm95Nr4LzaOeENvOg75r8rbRsoFQox/X8WULg27d4lJY0DrmczSdg3qGVq
FjeMOrKHic+IoA2lKdb15JoHVvRmxz/nvrJSQAK2bO6AQ/fSuaajzR6VIKX6YvU1
NMJO/h0zdgYkOqE80tU5qeI+HB9sz5ogjs2dgckQ1eUQDrYKLLSRIHXa79WQxOJq
OOwWNBhV0Oj/gi36dizDFW14+aIKNBzMRgRIIBk7hLB1smMkfKvQHysQtQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKwqNg1Q2tiTjHpHsPOexNkH4ppTMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvckNvMkRWRGEySk9NZWtldzg1N0UyUWZpbWxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwek9AwQC
welkMA0GCSqGSIb3DQEBCwUAA4IBAQAg+yBxFYtcJtY02koaL28kIxYWdflBmGwm
Xu0SbvkE79WdEeYrSSmirMLBw6dSShldvxj4KhlVsw10AWpbm0LixbX2EmG9XLC/
aKgKIN0XmYAJyOtVYULBiKVpLfx5apKdayae/BHSj7ngkk+b+Ghk+Od0lEnx3a0a
LoCvry+X+0q5Qclud2BWuM2oa7dWGNE3A+p9pmzsmNo1Fjrp2+trHFi9OXj0Xe0m
+Cnj6IyBigfQG0gam/XmRmssklDTpgONki7SAyIt3jNgwMHH9By0+O5hpy/OEhOO
IaO8tQitkHuzOhcB4WoNK4sLdBgYnDYGpV0/eNpmaRzUMdVCRPH6
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:31 2023 by rpki-client on console-ams.rpki-client.org