Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/41-zdP0i3yf1is5JoA2x1bywinY.roa
File: 41-zdP0i3yf1is5JoA2x1bywinY.roa (raw, json)
Hash identifier: nwdMc5fCjFL+QIAjxnoJNlBqm8Uu/bKyzlTbIbE/7uE=
Subject key identifier: E3:5F:B3:74:FD:22:DF:27:F5:8A:CE:49:A0:0D:B1:D5:BC:B0:8A:76
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C812059
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/41-zdP0i3yf1is5JoA2x1bywinY.roa
Signing time: Sat 01 Jan 2022 01:02:45 +0000
ROA not before: Sat 01 Jan 2022 01:02:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199871
IP address blocks: 93.123.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478224473 (0x1c812059)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e35fb374fd22df27f58ace49a00db1d5bcb08a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:ff:ed:81:91:02:7e:73:42:a7:17:fe:9d:
1f:0e:d2:70:96:14:ba:fd:02:2e:bf:39:d7:54:a2:
3c:c8:7a:f5:4f:7e:41:5b:fe:d3:98:d0:bd:95:f2:
4a:98:a4:98:08:7b:7a:76:53:e9:df:3e:ff:33:94:
ed:26:03:0b:b4:36:9d:dd:d1:11:d8:4e:17:fd:6a:
8a:c2:fd:c5:79:d8:2a:69:64:d7:08:04:4c:d1:a4:
5c:55:15:0a:85:a5:90:c7:da:a1:c5:5c:59:dd:d6:
8d:24:a4:13:de:d8:37:63:90:22:42:a4:2c:92:14:
66:36:ab:8f:89:87:1b:4b:01:ff:df:b9:93:35:31:
ee:1c:b1:0e:4a:7f:eb:7b:4e:55:db:6e:01:22:0d:
51:ff:5f:00:ef:a8:f3:e3:4a:9c:b0:58:b9:31:fe:
60:09:18:94:44:d7:ff:33:f8:4b:67:08:71:57:7d:
cd:3a:42:d3:08:36:36:af:48:38:a8:dd:75:8d:94:
73:a1:09:c2:d8:e8:88:b8:f1:4f:ae:04:6e:f6:f4:
32:7d:11:74:e9:94:54:68:3c:29:25:2c:ef:66:a0:
f9:e5:1c:bd:6b:eb:d4:61:fc:51:55:24:8b:c9:da:
ae:95:41:a6:85:d9:ee:1a:51:c0:a4:f6:08:1e:bc:
41:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5F:B3:74:FD:22:DF:27:F5:8A:CE:49:A0:0D:B1:D5:BC:B0:8A:76
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/41-zdP0i3yf1is5JoA2x1bywinY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.110.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:e6:94:dc:2c:8c:f4:b6:6a:6d:da:b2:7f:84:70:cd:45:e3:
d2:05:72:ce:fa:00:c9:dd:47:42:d8:98:06:bd:dc:ea:8f:75:
fc:3e:68:ab:a4:d6:82:b3:2b:fa:3e:b8:9d:db:35:bb:3e:c3:
42:c5:dd:85:ae:71:d9:58:a5:df:3c:51:ac:54:25:98:5e:eb:
39:0f:aa:9e:25:c1:d5:7b:2a:69:e6:21:02:dd:d4:0b:c0:98:
64:b0:5f:40:e0:10:ed:69:a8:0c:7d:d4:fc:7a:e7:97:2a:bb:
9b:02:41:c4:0c:3e:6b:e3:62:d4:1a:3c:20:dd:60:f7:6d:ae:
ed:81:df:42:10:ed:a2:9b:4e:98:b3:f3:3f:a7:85:26:e5:3b:
34:e8:0d:d1:52:c3:6e:a6:2d:dc:dc:ae:8f:eb:6b:61:98:32:
8e:fc:29:be:9d:26:60:02:e8:ce:1d:ee:94:50:49:31:00:85:
a5:1f:81:2d:e4:69:94:53:a2:44:4a:97:c5:f7:9f:d1:19:c0:
ed:c9:b7:fa:f7:e5:6a:48:b5:11:17:a1:09:2d:7e:4b:c2:64:
d8:43:85:b9:94:4d:cb:2a:57:d6:86:53:c9:01:7f:8b:07:0f:
4d:ff:3e:5e:61:7b:9c:1b:39:f4:d2:9b:d1:5d:ea:4f:d1:b5:
16:be:c1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-ams.rpki-client.org