Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TO-cYV_K6UwyLud8IclvEAQj6-Q.roa
File: TO-cYV_K6UwyLud8IclvEAQj6-Q.roa (raw, json)
Hash identifier: Vi5Zq/JNvKcOwO6kskJCrSrVAUE66hIoaga8kSv9eq0=
Subject key identifier: 4C:EF:9C:61:5F:CA:E9:4C:32:2E:E7:7C:21:C9:6F:10:04:23:EB:E4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1E33436A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TO-cYV_K6UwyLud8IclvEAQj6-Q.roa
Signing time: Thu 28 Apr 2022 06:35:57 +0000
ROA not before: Thu 28 Apr 2022 06:35:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202129
IP address blocks: 93.123.105.0/24 maxlen: 24
93.123.104.0/22 maxlen: 22
93.123.104.0/24 maxlen: 24
93.123.107.0/24 maxlen: 24
93.123.106.0/24 maxlen: 24
2a00:1728:1e::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506676074 (0x1e33436a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 28 06:35:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4cef9c615fcae94c322ee77c21c96f100423ebe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:6c:c5:a2:86:a4:13:b9:b7:5b:d5:1e:07:
60:36:a8:d6:88:c4:1e:98:f8:75:39:d6:8c:bf:5b:
5d:9b:75:e8:de:d7:35:62:35:6f:b8:c7:8b:18:cf:
f4:fd:bf:a8:50:42:0e:4f:37:4a:fb:d9:05:fb:42:
99:6c:e6:3b:8d:12:11:bd:75:cf:ef:98:a0:2a:e7:
cd:b3:04:93:37:57:6b:6c:3b:ef:5d:c1:64:51:6c:
b5:1d:be:8b:d0:89:9f:28:73:ab:18:f4:2e:1d:39:
b6:62:97:d3:7f:38:e9:49:24:aa:f7:4d:b4:43:15:
5c:74:17:3d:1d:ec:4b:e1:ed:79:d0:ec:5b:d1:b7:
60:7a:71:f7:0a:65:bd:23:2a:dc:aa:67:ce:3f:6d:
47:81:3f:a5:a5:f0:72:bb:6f:b4:93:c8:96:86:29:
47:f6:11:e5:66:64:cb:43:bb:f1:71:a6:fb:6d:62:
f7:b2:b3:45:f2:d3:c2:89:66:76:a4:12:fa:e5:63:
ff:4d:5b:56:a6:f9:3c:a3:3b:51:86:02:bb:33:47:
ae:6d:99:5d:55:5d:4b:39:a0:01:72:b1:63:66:1d:
32:75:a4:77:d1:21:72:d8:11:3e:7f:bf:5f:6c:6e:
3e:7e:65:a7:20:2f:16:bc:ed:97:3e:c5:e0:25:d3:
6c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EF:9C:61:5F:CA:E9:4C:32:2E:E7:7C:21:C9:6F:10:04:23:EB:E4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TO-cYV_K6UwyLud8IclvEAQj6-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.104.0/22
IPv6:
2a00:1728:1e::/48
Signature Algorithm: sha256WithRSAEncryption
9a:7e:71:3a:ed:34:d8:c0:43:ed:42:8c:fc:8c:1f:a8:bc:8b:
63:ff:61:a0:56:73:a1:d6:9c:89:c0:c9:bc:2f:50:e7:47:80:
2d:7c:15:3e:10:97:17:7d:ac:4a:10:ce:b4:57:28:c1:46:6e:
f2:ad:f1:20:bd:77:4e:4c:d9:ab:17:33:72:13:db:39:41:d2:
c8:8f:b0:44:da:cf:c8:b3:f2:55:0c:4a:4d:26:94:e4:6c:1f:
95:f5:55:cd:73:c1:f6:97:4a:b3:be:08:39:e6:27:d1:f3:13:
9c:fb:0e:d9:02:9b:e5:34:6e:0b:5e:cd:30:31:8a:43:d6:37:
7e:3c:63:6b:e8:81:a7:aa:3f:d2:9b:8d:08:f9:db:7f:69:9b:
8d:f4:e5:73:64:95:d0:33:29:c8:f0:ec:f9:35:0f:ca:ec:d9:
ba:ff:46:8e:33:72:ed:7c:61:e3:77:ab:49:8a:46:6b:e1:39:
ea:72:0a:24:bc:bb:c4:d4:e9:2a:7c:10:25:7b:3b:f5:e4:8a:
1c:bf:bc:fa:9a:c5:75:86:bf:d0:d7:76:7e:fb:d0:41:75:d5:
01:d4:1e:dc:89:e8:6f:37:c7:97:e8:8b:9c:47:68:ac:f3:2e:
66:be:b3:c4:7e:6d:88:b7:71:b6:a8:47:f0:43:f0:9b:4b:c5:
70:cf:2e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-ams.rpki-client.org