Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Zxki-uaubciVLvC-ck1qXWQZG8E.roa
File: Zxki-uaubciVLvC-ck1qXWQZG8E.roa (raw, json)
Hash identifier: DwFuXKkdGxUh8sgjVGT6ma4BwaHT675Rt/bCK/tIr7c=
Subject key identifier: 67:19:22:FA:E6:AE:6D:C8:95:2E:F0:BE:72:4D:6A:5D:64:19:1B:C1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C6D93B0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Zxki-uaubciVLvC-ck1qXWQZG8E.roa
Signing time: Sat 01 Jan 2022 01:02:35 +0000
ROA not before: Sat 01 Jan 2022 01:02:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48584
IP address blocks: 31.13.224.0/24 maxlen: 24
94.156.166.0/23 maxlen: 23
93.123.109.0/24 maxlen: 24
94.156.105.0/24 maxlen: 24
94.156.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476943280 (0x1c6d93b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=671922fae6ae6dc8952ef0be724d6a5d64191bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:da:94:9d:61:de:cf:36:fa:0e:b0:08:cc:45:
63:84:8b:b2:f5:4a:0e:4d:c8:15:23:ed:64:d4:10:
16:31:c4:1e:c8:c4:f6:3a:f6:76:71:69:45:db:cc:
39:20:63:70:1e:cd:84:ee:03:67:01:93:a0:7c:c0:
21:97:20:6e:8d:20:67:89:34:38:5a:04:18:7f:9a:
6d:0f:23:4d:fc:1d:ee:3f:10:d3:c1:e1:f5:d8:02:
8b:19:51:56:82:91:5d:3f:82:8b:7c:93:3a:bf:c8:
9e:11:fc:f0:9d:35:be:e5:b6:65:89:22:a2:13:08:
ae:b8:e6:08:48:94:ff:52:ca:3e:b0:ef:b7:1e:0d:
d3:7f:56:8f:13:af:91:d2:b0:7c:0f:c6:8d:9d:89:
16:ce:1f:9a:77:7e:cc:c6:72:48:f7:3b:ed:a6:a6:
f1:d5:02:8b:d3:ff:1a:00:52:8f:3a:a6:f0:f4:fa:
65:08:41:47:4d:5b:59:1f:74:19:47:b7:9f:f4:90:
77:6a:1a:19:f2:98:51:12:e4:54:14:c7:14:c8:85:
6a:f7:0d:5b:09:fa:27:88:25:6b:a8:46:a6:3b:12:
ed:d3:0c:07:46:b6:62:84:c9:e6:34:36:72:84:6c:
b9:db:70:0f:91:81:f9:69:92:98:9d:c4:60:8a:6c:
f5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:19:22:FA:E6:AE:6D:C8:95:2E:F0:BE:72:4D:6A:5D:64:19:1B:C1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Zxki-uaubciVLvC-ck1qXWQZG8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.224.0/24
93.123.109.0/24
94.156.104.0/23
94.156.166.0/23
Signature Algorithm: sha256WithRSAEncryption
01:d0:38:5c:f8:fb:90:24:4c:68:95:fd:35:ef:eb:a4:9d:b5:
ef:9f:fd:63:b0:01:fc:6e:37:e4:51:a6:29:c7:4d:25:ac:3a:
e6:c8:58:a3:0f:11:7e:f7:02:21:38:b8:ab:40:44:0d:a5:07:
32:00:30:76:3c:42:f6:22:fd:e7:0d:c5:3c:c5:1f:14:04:4a:
d0:65:cc:70:42:2e:09:2e:2e:9c:2c:18:b6:5e:9b:b3:5c:d9:
22:07:ad:ae:2e:2a:4d:f4:ae:5f:88:a6:f2:48:48:e2:a4:eb:
a7:e6:ca:de:31:33:5e:a5:70:ae:72:0f:49:d4:f0:38:06:26:
a0:55:4e:26:11:a5:ae:16:19:59:80:fb:8b:bf:28:bb:35:76:
48:2d:2d:83:25:33:89:08:f3:af:9c:fb:e5:9a:95:6b:35:f1:
5b:f3:f3:49:bf:5a:cd:99:d5:4b:c2:6d:bf:6d:71:3d:e2:03:
a9:b7:74:72:bd:da:e7:da:3e:b9:9c:fd:67:fc:e0:39:24:97:
f7:00:bf:c5:ee:88:2e:bf:e3:5f:51:1b:b4:50:ea:37:f2:00:
09:61:42:c4:9e:e1:dd:2f:e9:be:e1:c5:4b:ae:23:d2:f9:8d:
d0:16:88:06:52:ac:ee:9f:f5:8a:4e:d0:5e:38:47:79:5d:13:
7d:49:86:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org