Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/z2E919jrA5e0HYjGNc19pjoDDzw.roa
File: z2E919jrA5e0HYjGNc19pjoDDzw.roa (raw, json)
Hash identifier: nWKi3XgKHLcH1X7UYpRmyneqwIzcyJYrCMvCZ9n+j44=
Subject key identifier: CF:61:3D:D7:D8:EB:03:97:B4:1D:88:C6:35:CD:7D:A6:3A:03:0F:3C
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 050DFB57
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/z2E919jrA5e0HYjGNc19pjoDDzw.roa
Signing time: Thu 17 Mar 2022 19:30:16 +0000
ROA not before: Thu 17 Mar 2022 19:30:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207967
IP address blocks: 193.233.120.0/22 maxlen: 22
193.233.124.0/23 maxlen: 23
193.233.126.0/23 maxlen: 23
193.233.112.0/22 maxlen: 22
193.233.108.0/22 maxlen: 22
193.233.116.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84802391 (0x50dfb57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Mar 17 19:30:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf613dd7d8eb0397b41d88c635cd7da63a030f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c4:f0:d6:69:90:db:c9:d0:0e:80:eb:e4:a3:
9b:4f:cb:1c:6f:de:73:e8:7b:b4:45:6d:28:0b:b4:
6c:9c:07:74:25:ec:ac:b8:bc:29:95:a3:10:62:c2:
ee:dc:62:2f:1b:66:7f:f6:5f:ce:33:0a:47:28:4f:
a2:df:13:1e:21:f5:a0:da:e5:41:0d:bd:a0:9d:4c:
72:50:c9:a7:7f:dc:23:c4:cc:21:00:75:da:c4:0b:
a2:2a:f5:a0:15:14:87:27:24:87:67:06:c9:03:81:
62:10:23:1d:21:b6:c1:b3:4b:a9:ac:f9:fa:ce:87:
3c:2d:07:ac:d4:7f:22:5a:ed:86:4b:00:a2:63:93:
5d:93:47:6f:1e:70:c3:fe:13:38:fc:72:57:dd:bf:
91:df:90:a8:af:56:89:e8:e7:f3:5e:85:c5:6c:a2:
00:ef:f5:48:39:5b:8e:f5:10:11:01:6a:57:21:13:
3b:80:5f:08:02:e7:af:2d:03:78:8e:b1:db:5e:a2:
14:41:4c:0e:cb:05:50:47:f0:84:40:10:0e:58:5f:
76:91:3f:38:06:4b:1b:a0:1d:db:0b:80:45:54:bd:
65:80:c5:5b:06:b8:6d:ec:f0:3e:a7:bd:57:b1:af:
52:6e:9d:26:e6:7c:b1:13:cc:ce:03:48:c7:2f:da:
13:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:61:3D:D7:D8:EB:03:97:B4:1D:88:C6:35:CD:7D:A6:3A:03:0F:3C
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/z2E919jrA5e0HYjGNc19pjoDDzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.108.0-193.233.127.255
Signature Algorithm: sha256WithRSAEncryption
4c:f9:a2:28:cb:e7:f8:48:e4:d4:10:bd:e9:ad:de:92:1f:29:
9d:92:35:af:41:83:6b:45:ef:2b:c0:ba:12:bc:b3:ec:01:0f:
26:16:01:78:10:40:44:8d:55:7e:03:38:25:ac:fd:91:76:7f:
68:e0:a6:69:30:21:ff:ed:27:34:b9:9a:42:6b:90:fd:a4:72:
6d:d5:8b:f5:af:66:96:06:ed:d1:71:22:b8:b2:8b:5c:9e:91:
ab:bb:f9:1b:0b:72:6f:1e:3f:d1:fb:3d:70:19:c9:95:07:4f:
27:15:b0:00:20:a6:8d:0e:ae:ed:90:b8:cd:1a:7a:52:29:8b:
24:30:c7:27:90:57:87:be:47:01:18:4a:5a:c9:d2:3e:a0:8f:
3f:60:74:d5:dd:9d:c9:b0:a8:4c:07:53:50:91:9b:41:25:6e:
a8:1c:1c:84:cd:cc:d8:92:f1:09:df:ee:18:f3:59:17:87:35:
05:c8:38:ad:29:b5:c6:93:15:98:f8:8a:00:3b:95:60:ba:d0:
ba:7c:4f:29:53:fe:d9:e2:1d:85:cc:4e:71:f2:c7:33:89:b1:
3d:f7:78:1a:b2:be:91:30:1d:93:1e:48:0e:18:07:b3:25:ab:
94:26:0e:b0:3c:e2:30:82:fe:d7:c9:e1:d3:6d:86:f6:f5:e2:
48:66:0f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:31 2023 by rpki-client on console-ams.rpki-client.org