Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/rbMJixgkXABHot6FZgC_2UOjFKY.roa
File: rbMJixgkXABHot6FZgC_2UOjFKY.roa (raw, json)
Hash identifier: 58NPG+EOzvKAbRtR+/oQJgh08SOparF/m2iDBIEJ93k=
Subject key identifier: AD:B3:09:8B:18:24:5C:00:47:A2:DE:85:66:00:BF:D9:43:A3:14:A6
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 042CCA54
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/rbMJixgkXABHot6FZgC_2UOjFKY.roa
Signing time: Sat 01 Jan 2022 12:04:57 +0000
ROA not before: Sat 01 Jan 2022 12:04:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49954
IP address blocks: 193.233.159.0/24 maxlen: 24
193.233.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70044244 (0x42cca54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 12:04:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=adb3098b18245c0047a2de856600bfd943a314a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c6:6b:fb:24:d6:43:89:21:f1:29:fd:c8:b3:
5f:34:7e:ed:fb:5f:eb:5c:b8:3b:16:a6:f2:35:fd:
06:75:82:4a:dd:27:02:30:c8:d9:67:01:6c:34:12:
53:77:a9:96:ac:1f:6b:cc:c9:a4:7a:c9:da:29:48:
34:da:c0:a8:d6:d4:ba:ad:f0:85:7e:87:55:78:a2:
4b:4e:ce:49:93:df:64:4f:7d:e4:55:32:ce:dd:30:
75:1d:39:26:27:e1:79:dc:b5:18:20:f7:9f:b2:49:
e3:ee:79:67:14:c7:43:c9:4d:11:a9:a7:a9:09:da:
98:5b:7e:fa:b2:7f:b9:6c:48:fb:a7:d3:e0:d5:ab:
26:69:3d:09:16:92:d0:e2:fc:e0:e1:6a:63:77:5c:
c4:dd:22:05:3b:b8:31:e1:d1:cc:cb:2b:1a:a1:66:
0a:e5:7a:a2:23:f0:cc:21:56:45:91:81:df:55:dc:
75:bc:88:8f:5f:2f:01:8b:c1:d9:bc:0e:b4:af:c6:
87:60:92:ff:f6:6f:65:a6:a2:3b:ec:52:21:64:65:
01:97:9d:66:f5:9c:4a:d0:b9:0b:62:69:6f:ea:ce:
2d:2e:49:4a:ab:e6:b1:f1:57:73:d1:0d:70:f1:81:
ba:c6:74:64:32:69:cf:4f:e1:25:23:0c:f8:6c:87:
db:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B3:09:8B:18:24:5C:00:47:A2:DE:85:66:00:BF:D9:43:A3:14:A6
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/rbMJixgkXABHot6FZgC_2UOjFKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.154.0/24
193.233.159.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ac:16:13:e5:51:87:15:4b:f8:e8:3b:69:d0:e9:5d:ec:21:
82:12:11:19:e9:3d:c0:6c:a6:5c:51:85:b5:62:12:59:c6:53:
bb:14:33:d7:45:08:33:eb:19:16:1e:7d:c2:bc:f3:32:ef:fc:
6d:08:b3:b8:e8:20:39:b9:47:e9:95:2e:e5:fb:33:04:fb:9a:
80:be:69:b6:a3:29:aa:f7:c6:c1:23:82:3a:48:a6:af:68:77:
19:13:dd:b7:ec:1a:2c:45:12:e4:41:6b:60:09:ed:9a:79:46:
c8:e6:b3:8c:29:8c:32:d5:08:ce:b9:64:ed:0f:99:a9:1a:62:
2f:7f:00:02:0a:48:27:9d:8a:d3:1d:15:97:ca:3a:88:79:19:
a6:28:39:99:55:52:95:39:3f:59:1a:7d:9a:83:ce:02:d2:c1:
05:5c:85:25:02:30:ec:63:73:ee:6d:06:5c:de:98:dd:d3:19:
b9:81:8d:1f:ae:9e:aa:76:fe:14:e9:c7:a7:3f:c6:4d:09:7d:
bd:ee:69:aa:a6:d3:86:91:7d:4d:82:b2:64:83:bc:42:8a:69:
1d:88:2d:d7:ab:d7:22:13:7e:16:37:f7:51:c6:24:92:15:71:
66:d6:6d:83:33:9d:b0:40:86:9a:d0:88:c6:22:45:e6:f6:09:
09:fe:7f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:31 2023 by rpki-client on console-ams.rpki-client.org