Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ux3eBcFSYtuWmL5n0pds3cNvrJE.roa
File: ux3eBcFSYtuWmL5n0pds3cNvrJE.roa (raw, json)
Hash identifier: NRQYPdf2t6IGbQCIsKw02Jp1uiH20NjutPJr8/jjhpI=
Subject key identifier: BB:1D:DE:05:C1:52:62:DB:96:98:BE:67:D2:97:6C:DD:C3:6F:AC:91
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01847FAC87F13FCE8185B1D5EF80E144EDEA
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ux3eBcFSYtuWmL5n0pds3cNvrJE.roa
Signing time: Wed 16 Nov 2022 09:02:04 +0000
ROA not before: Wed 16 Nov 2022 09:02:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 193.233.108.0/22 maxlen: 24
193.233.116.0/23 maxlen: 23
193.233.118.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7f:ac:87:f1:3f:ce:81:85:b1:d5:ef:80:e1:44:ed:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Nov 16 09:02:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb1dde05c15262db9698be67d2976cddc36fac91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:56:2e:99:59:c2:bb:e7:9d:e0:64:63:7c:d0:
b2:21:68:1b:10:76:e5:35:1a:cb:1b:06:c0:af:3c:
39:65:d3:91:d5:10:0c:52:cf:a8:b0:ff:9f:9e:85:
ee:fe:71:c4:c5:b9:4a:5a:eb:3a:db:b8:b4:00:3d:
d5:6e:d0:d4:b4:d1:6a:d5:02:82:bd:44:17:10:8b:
a7:f8:d3:38:76:49:74:7c:63:fa:62:d2:db:18:3f:
42:51:9a:39:7c:a3:9e:e0:b8:16:c4:e7:fb:09:07:
58:e2:55:61:69:95:99:34:b9:be:2e:48:d7:70:92:
c6:de:41:e7:d5:5e:dd:22:53:d1:fb:70:f9:84:d0:
fc:ef:51:d9:d4:c2:b7:d7:b1:af:c4:05:2d:f3:6f:
42:a0:2c:5a:e8:7c:a1:c1:b3:c4:98:09:d9:4a:3d:
a5:f7:ed:70:72:13:bf:ac:99:27:a3:fe:af:e5:05:
ea:9e:04:56:c7:0b:19:02:63:4c:22:f4:46:d4:79:
0d:32:3f:e5:ac:ad:32:37:0e:4a:34:90:4d:37:04:
c6:05:b3:58:b2:11:a0:ee:d5:4f:83:4e:d1:d6:63:
cb:e3:60:86:b4:63:f0:ff:63:51:49:22:5d:dd:60:
d4:78:ec:6d:42:43:20:67:d6:07:07:5f:aa:7b:22:
f1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1D:DE:05:C1:52:62:DB:96:98:BE:67:D2:97:6C:DD:C3:6F:AC:91
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ux3eBcFSYtuWmL5n0pds3cNvrJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.108.0/22
193.233.116.0/22
Signature Algorithm: sha256WithRSAEncryption
58:f4:13:8d:7c:3f:21:83:57:49:78:78:24:9d:e8:56:da:8b:
58:4c:b0:4f:1e:d8:f5:05:a0:8b:ba:c9:e7:cb:9f:04:49:50:
a8:e6:c7:fa:cb:42:f8:01:b9:b5:41:bd:2d:02:31:38:a8:22:
d6:12:4d:4c:17:4c:c0:4c:aa:4d:2b:19:84:35:ce:df:4e:c6:
f4:3b:4a:c5:2b:cc:6c:7f:36:7b:1c:a0:9f:c7:bb:5e:8c:ff:
4c:9b:95:c5:68:c2:ac:6c:03:ae:3b:91:cb:ba:46:5c:cb:c8:
27:7e:64:a1:54:8d:06:3a:ae:f9:a8:6e:e0:9b:57:bf:1d:32:
fa:33:88:81:59:f0:a7:52:1d:e2:0b:86:a4:6e:e6:9a:c0:36:
09:f7:22:e4:89:d5:86:ad:12:d1:ec:5a:a9:91:a7:0c:ab:27:
1c:ac:98:38:01:db:95:23:5b:05:85:cd:88:4a:79:5e:93:fc:
dd:69:96:1f:e9:9e:7e:fd:87:ec:2e:8d:17:18:0e:b2:70:3b:
2a:06:1b:25:3c:c8:35:be:55:31:06:0f:53:ba:81:53:64:ec:
59:43:9c:dc:c7:81:2c:7a:04:c8:bf:62:c0:24:b1:dc:34:b6:
8f:3d:68:74:c7:b4:5a:b2:be:fe:bb:15:86:04:5b:fe:2d:fa:
89:3b:42:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:39 2023 by rpki-client on console-fra.rpki-client.org