Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c9jDudw92jSpKRpVMAj46gLXeII.roa
File: c9jDudw92jSpKRpVMAj46gLXeII.roa (raw, json)
Hash identifier: aoepGEbhEoeFzmG0wjkqDPnZsZ79DiZpiQHax1QO/II=
Subject key identifier: 73:D8:C3:B9:DC:3D:DA:34:A9:29:1A:55:30:08:F8:EA:02:D7:78:82
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1D9BFF0B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c9jDudw92jSpKRpVMAj46gLXeII.roa
Signing time: Fri 25 Mar 2022 13:20:37 +0000
ROA not before: Fri 25 Mar 2022 13:20:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48057
IP address blocks: 93.123.75.0/24 maxlen: 24
93.123.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496762635 (0x1d9bff0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 25 13:20:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73d8c3b9dc3dda34a9291a553008f8ea02d77882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:49:15:4f:5f:a8:cf:ef:60:c7:26:bf:26:19:
68:85:e6:ab:3d:bc:e9:24:c9:f2:c7:07:85:f2:55:
5e:ed:86:df:67:96:25:1c:ef:ef:eb:0b:c9:9e:82:
40:24:0b:dc:0f:42:96:0d:d5:95:82:32:cc:c2:6d:
16:cd:a2:29:1b:e9:9e:24:71:54:8d:2d:88:1c:25:
9d:dc:3e:e8:db:2f:d8:fd:6f:23:6f:94:67:b1:f1:
75:c7:95:22:0f:6a:30:49:d9:4d:50:81:03:9b:14:
8f:49:3b:1b:9e:f8:ef:1b:e2:d3:33:5a:42:e4:c9:
95:46:53:59:d9:e9:d6:38:0a:df:e5:16:ed:cf:b4:
13:99:a0:c2:66:be:44:d8:3c:c7:79:ca:6a:a7:cc:
a3:a9:e1:97:3a:cd:75:5e:c4:12:fc:da:e4:d2:8a:
f9:69:c4:85:34:ed:d4:78:d9:ba:bf:cf:82:94:17:
2b:92:ca:c3:e2:eb:80:f5:3a:a7:85:58:08:71:90:
5d:28:d6:9e:47:d0:ad:d0:07:1c:05:f8:9f:a7:ae:
31:4d:1f:7b:2f:06:f1:9b:e6:82:bf:74:70:c6:a4:
b8:47:30:db:cd:8c:f2:5a:e9:38:36:8b:b0:97:03:
c1:48:1f:18:a5:d2:3c:9a:b7:e8:b6:fd:a7:f9:5c:
90:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D8:C3:B9:DC:3D:DA:34:A9:29:1A:55:30:08:F8:EA:02:D7:78:82
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/c9jDudw92jSpKRpVMAj46gLXeII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.74.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:1d:47:e0:4a:03:ae:b7:f5:bc:be:37:6a:0b:b0:f3:3b:87:
a6:f7:36:87:c5:54:9a:c8:dd:6a:8f:72:97:1d:f4:a0:29:8b:
fb:4f:17:f8:63:57:5a:6e:cc:47:2a:2a:bf:3a:25:53:04:7b:
11:18:6f:d4:95:ad:f0:61:c0:4d:65:1d:72:bb:22:a8:2c:ac:
16:16:06:ae:5e:4c:ec:75:bd:d1:d9:ca:ab:56:fc:32:98:9e:
f4:bf:c3:d9:ef:bd:3a:34:4c:83:e1:2c:6b:f7:da:36:84:70:
bd:96:da:75:a2:2f:10:fe:9c:93:b7:b3:5d:47:aa:b0:57:65:
ee:16:d2:76:29:2f:13:25:ff:ed:41:75:ef:3d:d7:b1:52:0c:
bc:de:b6:db:27:53:6d:0c:22:0b:1e:b9:ac:24:67:5e:cc:3c:
cb:51:c1:4a:8a:38:24:0a:1b:a0:1a:70:98:b0:66:8c:57:a4:
a1:87:b9:34:1d:94:b3:62:d5:af:86:2b:15:30:61:8a:cf:47:
d9:56:6f:b0:8f:f4:4c:9d:b5:13:5d:6d:45:f1:d4:b2:5f:d1:
70:04:80:71:19:2a:d2:8f:74:ea:36:fa:b0:63:5a:42:4b:89:
ce:1f:0a:6c:de:35:b8:7b:65:c1:44:68:ed:cc:f5:07:67:9f:
81:d3:73:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:39 2023 by rpki-client on console-ams.rpki-client.org