Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Jqh3Ke9pF8r2YcwfrZI2evjJUxg.roa
File: Jqh3Ke9pF8r2YcwfrZI2evjJUxg.roa (raw, json)
Hash identifier: Jj+tjuoOzHqZxWhRRLR5Behoog+3kGIR1ATLR5bEIPQ=
Subject key identifier: 26:A8:77:29:EF:69:17:CA:F6:61:CC:1F:AD:92:36:7A:F8:C9:53:18
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0183FB43DE517E393C07323558CCA1EAFEDC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Jqh3Ke9pF8r2YcwfrZI2evjJUxg.roa
Signing time: Fri 21 Oct 2022 15:57:52 +0000
ROA not before: Fri 21 Oct 2022 15:57:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210106
IP address blocks: 93.123.16.0/24 maxlen: 24
93.123.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fb:43:de:51:7e:39:3c:07:32:35:58:cc:a1:ea:fe:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 21 15:57:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26a87729ef6917caf661cc1fad92367af8c95318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:62:a1:d1:16:8c:43:bb:7f:3a:84:e0:92:39:
f1:46:8f:fa:3c:88:64:b1:a9:ca:c0:70:a8:c0:f3:
4f:fc:88:fe:1c:37:15:ed:55:64:fb:83:39:bf:65:
8e:a6:a6:af:8c:a6:26:3f:90:7f:75:be:6d:f9:87:
1f:23:05:b0:e4:ae:0e:c5:ee:95:3b:49:49:2f:40:
ae:b0:4f:f6:e8:2a:46:14:2f:1a:5b:f2:21:68:11:
f3:2f:2e:ce:1d:c7:86:bb:17:57:2c:ed:0b:0e:b6:
12:08:c1:84:19:f1:b2:8f:9f:d6:f1:01:9a:ba:f8:
40:e3:28:8b:f5:59:36:c0:5a:0a:6c:bf:31:e8:d9:
b8:ce:17:0a:08:e0:e1:fc:e6:b6:7c:71:5f:5c:ab:
08:39:ac:ec:77:19:89:3b:fe:b3:5e:d6:81:b9:06:
f2:d0:6e:38:2d:3e:c9:de:fa:52:1d:de:0d:6d:9c:
48:63:a2:b3:ba:ff:58:cd:90:69:fd:ef:39:44:cd:
b1:be:10:f4:07:7c:a8:3b:21:19:01:43:7a:f4:db:
dd:35:68:22:aa:a9:5c:d2:13:cd:23:8a:94:89:67:
2f:ff:7e:76:f9:cf:ec:6a:cc:43:e7:96:8b:2c:c3:
9e:80:4b:8c:ae:13:74:4e:af:cc:b7:43:31:8b:97:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A8:77:29:EF:69:17:CA:F6:61:CC:1F:AD:92:36:7A:F8:C9:53:18
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Jqh3Ke9pF8r2YcwfrZI2evjJUxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.16.0/24
93.123.22.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e5:dc:94:a9:78:d6:7f:d6:1c:c2:e3:bd:88:98:af:0e:79:
b2:33:bb:12:f7:97:af:1a:02:40:35:0c:ff:06:e0:92:25:80:
9e:2c:d7:6f:1d:30:75:40:d8:35:cd:c3:a7:fd:d8:48:03:97:
66:c1:db:b0:ab:77:5a:b6:4c:04:11:ef:8e:2e:48:1e:56:37:
c1:d4:83:40:a7:4b:bb:be:94:27:67:7b:7e:f3:cf:f2:5b:23:
e9:83:c9:ff:b3:1d:b5:9e:99:58:ee:a6:54:a8:f8:46:8d:5b:
34:aa:d7:b5:5e:8f:2c:b6:a2:95:4c:df:d6:fe:d9:07:69:44:
19:dd:e8:d7:3f:d4:4b:30:9c:0a:13:fe:51:d6:b2:12:16:4b:
29:a5:04:c0:8a:ee:00:36:53:24:9e:46:47:50:9e:fd:80:81:
b2:00:4a:04:fc:cb:79:6a:0a:57:8b:a7:ba:c1:86:09:1b:37:
1f:ff:33:22:cd:9d:f1:79:af:db:5b:16:28:7e:70:14:dc:54:
35:e9:94:25:bb:93:06:e6:8d:63:c4:07:a8:6a:90:c9:80:70:
78:ae:5d:ae:a5:98:57:f7:19:44:54:59:fd:23:24:f1:ec:ad:
18:30:81:8e:b5:b4:bf:52:76:72:43:dc:79:07:ce:99:f9:61:
7c:04:fe:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org