Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/L3U9TqrSFPODN9rbZDCG1btkEYE.roa
File: L3U9TqrSFPODN9rbZDCG1btkEYE.roa (raw, json)
Hash identifier: 6pTXhh9LZkNcCM2OptrjMeadAuKb06acCeoAvELcwKs=
Subject key identifier: 2F:75:3D:4E:AA:D2:14:F3:83:37:DA:DB:64:30:86:D5:BB:64:11:81
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C7E1D3C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/L3U9TqrSFPODN9rbZDCG1btkEYE.roa
Signing time: Sat 01 Jan 2022 01:02:44 +0000
ROA not before: Sat 01 Jan 2022 01:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198860
IP address blocks: 93.123.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478027068 (0x1c7e1d3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f753d4eaad214f38337dadb643086d5bb641181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:1a:22:98:b5:ab:be:38:e5:19:27:83:e9:
d6:85:61:d2:42:1a:70:f5:9e:3d:2f:3b:8f:62:ee:
34:b3:fa:51:35:35:70:e4:4a:b7:17:60:0b:37:a9:
55:c4:91:21:76:01:7f:f1:27:7a:b2:04:74:06:22:
c0:98:39:11:1e:36:02:6b:71:9b:b6:80:db:b0:1f:
13:1a:e2:87:01:58:05:42:67:45:f9:ff:d6:69:df:
94:4d:17:0b:ba:96:3f:0c:02:c2:e2:eb:52:da:b4:
c9:74:bb:3b:cd:95:e3:7a:af:e1:f8:b8:56:cd:90:
cf:ac:2d:80:9f:3b:2d:8f:f8:4c:fc:cf:8a:55:f8:
b9:b2:c1:ba:da:ea:6c:86:a3:f8:ac:f6:56:e6:44:
ab:a1:12:c2:21:84:2d:ec:e7:13:bd:af:06:20:7d:
82:31:85:94:84:03:81:c0:84:e5:ad:a3:b0:98:e5:
23:3e:d3:56:6e:65:6a:d3:4d:22:f6:4f:d2:71:7f:
f4:f7:00:98:8e:ea:e2:05:3e:38:09:03:8d:0b:bb:
20:fd:94:c4:5d:31:0d:a9:4f:ab:7d:e3:fd:24:41:
db:02:76:4a:17:73:55:ba:cf:d3:da:b8:2d:a0:f4:
74:8a:24:0e:b5:8b:e3:b8:09:a8:5c:fd:bb:5d:b8:
e4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:75:3D:4E:AA:D2:14:F3:83:37:DA:DB:64:30:86:D5:BB:64:11:81
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/L3U9TqrSFPODN9rbZDCG1btkEYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.13.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:03:26:f4:d3:64:ca:ef:43:78:49:67:66:2a:20:dd:c7:45:
f9:08:fc:57:aa:37:c5:3b:44:4d:c1:8f:6e:c9:8d:18:e8:dd:
28:8e:14:3e:bd:4d:80:9f:84:3f:99:e3:b3:5e:82:49:a9:b2:
bb:37:a1:69:99:a8:44:2c:87:37:75:08:5e:80:e2:77:78:29:
ee:c5:83:31:4e:46:fb:ef:c5:b0:61:9a:cc:3d:80:95:9b:ca:
b3:ee:68:e9:9b:67:f3:82:10:21:24:49:56:09:33:2d:40:ce:
1f:b8:e5:99:a0:e2:17:80:23:44:5f:2e:cc:5f:ab:7b:61:08:
64:23:df:2b:7b:0e:d2:db:86:a8:c5:72:82:8a:c2:b1:bf:01:
bb:30:09:fc:53:57:cc:26:29:fd:a5:7c:f6:fe:98:31:f2:cb:
f3:2a:b6:44:45:c8:b3:f6:5d:79:7b:cc:98:ba:7e:cd:a2:e8:
40:f5:93:74:65:41:f9:02:b9:3b:0d:fb:ee:a0:c4:52:59:5d:
49:e4:cf:5d:bc:64:5b:e9:16:a6:48:0e:d9:16:8f:fd:27:1e:
74:8b:26:d0:d6:60:b0:ea:08:5d:5f:aa:81:52:7d:6d:49:e0:
d3:6d:28:a9:0a:55:1c:28:f7:df:cc:5d:c8:32:e0:79:ba:3d:
3b:a3:6a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org