Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/wrRPV4u4VWVaDBKxPqAsGNJI-Is.roa
File: wrRPV4u4VWVaDBKxPqAsGNJI-Is.roa (raw, json)
Hash identifier: JMLUeSZ4slcRzle9zWjTcYr/X9hbyvQHI2ZziORhbDw=
Subject key identifier: C2:B4:4F:57:8B:B8:55:65:5A:0C:12:B1:3E:A0:2C:18:D2:48:F8:8B
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0182A6DC0D794212FA6A6D35D8A7D3943B39
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/wrRPV4u4VWVaDBKxPqAsGNJI-Is.roa
Signing time: Tue 16 Aug 2022 13:33:35 +0000
ROA not before: Tue 16 Aug 2022 13:33:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49981
IP address blocks: 193.233.160.0/24 maxlen: 24
193.233.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a6:dc:0d:79:42:12:fa:6a:6d:35:d8:a7:d3:94:3b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Aug 16 13:33:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2b44f578bb855655a0c12b13ea02c18d248f88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:f0:3d:4f:02:ef:a0:c7:ce:f3:2b:ba:2a:
20:12:1d:c2:0d:f3:bf:7d:b0:60:7e:53:48:5c:1c:
69:f5:27:91:3f:1c:cd:0f:10:61:19:37:38:b5:12:
bc:02:3d:a2:8e:22:9a:60:81:cf:87:de:c6:38:b8:
a5:94:5c:d6:19:a2:d5:e1:39:90:db:af:c8:58:f4:
90:be:b8:ac:41:5e:82:f4:eb:3a:69:ba:25:f6:50:
ca:03:35:65:c2:67:60:e7:8c:fa:7a:05:84:dc:c4:
09:e6:03:ef:8e:e9:e0:91:be:bf:0e:73:0f:fd:83:
ee:cf:df:03:10:52:4e:cd:1e:46:35:b0:a1:a7:14:
2c:be:b3:0d:b2:c8:31:b8:90:19:be:4f:dd:9e:9f:
7f:e7:b2:18:b5:59:9b:ac:12:33:96:b8:66:03:fc:
a9:82:de:97:38:48:c4:6d:b9:aa:ec:41:01:66:23:
5a:e0:fe:ac:19:db:32:d9:51:9a:d4:5e:6b:f4:a9:
e5:85:e9:71:d3:00:e8:00:6f:22:98:8f:b2:d1:13:
53:5d:b4:87:4d:51:2a:4a:9e:cf:4e:ea:72:14:c7:
d7:e8:f9:60:f5:5a:a8:35:9e:9a:1f:df:71:8a:7d:
83:bd:87:31:8b:ad:db:9d:a0:d7:ae:3c:1f:1e:df:
69:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B4:4F:57:8B:B8:55:65:5A:0C:12:B1:3E:A0:2C:18:D2:48:F8:8B
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/wrRPV4u4VWVaDBKxPqAsGNJI-Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.88.0/22
193.233.160.0/24
Signature Algorithm: sha256WithRSAEncryption
43:c5:d5:bf:c7:dd:3f:90:f5:9e:20:1c:91:a8:3f:05:58:fd:
09:d0:91:33:ba:45:fb:f8:d5:39:b5:89:01:f9:df:5c:70:bd:
5f:6d:92:09:e6:31:d4:b9:2e:a5:18:3f:78:35:71:fa:dd:94:
c6:76:48:e1:06:40:16:7b:21:e1:2e:1c:3c:ec:d1:a8:d2:95:
00:38:e1:65:42:0c:fe:93:43:46:ac:2f:82:06:fe:0f:ac:84:
a3:c2:0e:ec:25:fa:3e:f4:22:ca:3d:20:cf:79:e0:7a:b6:ab:
5b:9a:db:ff:90:a3:db:e1:b7:c5:e6:7b:42:a8:a4:91:b2:c1:
cd:04:6b:6d:cf:cc:4c:cb:22:b5:bd:a4:84:79:02:83:14:c9:
09:e9:ea:20:ca:47:e6:b8:02:09:77:08:62:71:65:11:36:14:
b1:99:af:00:57:e7:00:05:b1:1c:87:59:59:dc:5e:dd:5f:71:
8f:85:08:29:1e:4a:14:71:cd:10:2c:12:c2:93:0e:5a:e2:ff:
c6:a6:72:46:e6:a7:20:33:6b:3c:e8:7b:60:74:e7:37:a3:41:
55:38:cc:f5:1b:bf:77:cb:a2:40:54:89:53:42:e4:ca:a7:5d:
ca:15:d3:bd:8c:12:eb:0e:6c:b9:69:c0:87:20:ca:4e:34:20:
bc:ad:0e:54
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYKm3A15QhL6am012KfTlDs5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjIwODE2MTMzMzM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmI0NGY1NzhiYjg1NTY1NWEwYzEyYjEzZWEwMmMxOGQyNDhmODhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKXwPU8C76DHzvMruiogEh3CDfO/
fbBgflNIXBxp9SeRPxzNDxBhGTc4tRK8Aj2ijiKaYIHPh97GOLillFzWGaLV4TmQ
26/IWPSQvrisQV6C9Os6abol9lDKAzVlwmdg54z6egWE3MQJ5gPvjungkb6/DnMP
/YPuz98DEFJOzR5GNbChpxQsvrMNssgxuJAZvk/dnp9/57IYtVmbrBIzlrhmA/yp
gt6XOEjEbbmq7EEBZiNa4P6sGdsy2VGa1F5r9Knlhelx0wDoAG8imI+y0RNTXbSH
TVEqSp7PTupyFMfX6Plg9VqoNZ6aH99xin2DvYcxi63bnaDXrjwfHt9pWwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMK0T1eLuFVlWgwSsT6gLBjSSPiLMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvd3JSUFY0dTRWV1ZhREJLeFBxQXNHTkpJLUlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwelYAwQA
wemgMA0GCSqGSIb3DQEBCwUAA4IBAQBDxdW/x90/kPWeIByRqD8FWP0J0JEzukX7
+NU5tYkB+d9ccL1fbZIJ5jHUuS6lGD94NXH63ZTGdkjhBkAWeyHhLhw87NGo0pUA
OOFlQgz+k0NGrC+CBv4PrISjwg7sJfo+9CLKPSDPeeB6tqtbmtv/kKPb4bfF5ntC
qKSRssHNBGttz8xMyyK1vaSEeQKDFMkJ6eogykfmuAIJdwhicWURNhSxma8AV+cA
BbEch1lZ3F7dX3GPhQgpHkoUcc0QLBLCkw5a4v/GpnJG5qcgM2s86HtgdOc3o0FV
OMz1G793y6JAVIlTQuTKp13KFdO9jBLrDmy5acCHIMpONCC8rQ5U
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:31 2023 by rpki-client on console-ams.rpki-client.org