Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pW-wivwubbarzAt71HE6xWzqJ4Q.roa
File: pW-wivwubbarzAt71HE6xWzqJ4Q.roa (raw, json)
Hash identifier: pXGWu5fUJabKAdESrexWpUEsGbm0zqscrMjCM8RWOXI=
Subject key identifier: A5:6F:B0:8A:FC:2E:6D:B6:AB:CC:0B:7B:D4:71:3A:C5:6C:EA:27:84
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C87C3C3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pW-wivwubbarzAt71HE6xWzqJ4Q.roa
Signing time: Sat 01 Jan 2022 01:02:49 +0000
ROA not before: Sat 01 Jan 2022 01:02:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202129
IP address blocks: 93.123.105.0/24 maxlen: 24
93.123.104.0/22 maxlen: 22
93.123.104.0/24 maxlen: 24
93.123.107.0/24 maxlen: 24
93.123.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478659523 (0x1c87c3c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a56fb08afc2e6db6abcc0b7bd4713ac56cea2784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a0:b2:f0:78:1f:be:ce:8d:90:28:53:b2:50:
b6:92:78:4f:9f:d1:a5:b4:8e:c4:1f:28:89:5b:31:
37:80:46:36:61:4b:17:be:03:08:e9:2e:99:e4:3f:
23:28:f2:bf:a0:2e:46:cd:4b:28:9e:b8:0b:72:c3:
41:ef:57:8c:90:11:f3:65:71:33:dc:2d:7c:d5:b8:
2b:b2:13:c2:56:e8:f0:61:fb:0f:cf:2a:03:0e:3b:
a1:de:f0:d4:57:d5:3e:f2:26:b4:3f:fe:19:91:ae:
53:e1:dd:bb:d9:3e:e2:b0:00:b3:2a:49:1a:99:7f:
4a:a1:09:7b:bf:48:bc:cc:51:5b:ab:3a:95:72:e3:
06:56:5c:7f:c2:2d:b5:45:34:10:39:ae:7c:46:29:
13:27:7b:28:a7:5d:1f:30:43:dd:99:5f:45:67:47:
1c:66:91:7d:0c:91:ea:32:d3:05:5f:61:1a:f7:b6:
4c:33:a5:08:7e:b3:de:2d:95:82:36:b6:b2:a7:16:
33:4c:e3:98:1a:6c:19:a1:df:9a:38:c5:78:77:bc:
a5:10:7c:35:af:8d:7e:51:cc:79:88:48:c8:e1:b5:
1e:b9:3c:61:29:d1:0f:ac:e8:9d:2c:76:ac:2d:66:
e2:14:e0:87:35:6a:0e:05:0c:62:64:c2:db:05:00:
39:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6F:B0:8A:FC:2E:6D:B6:AB:CC:0B:7B:D4:71:3A:C5:6C:EA:27:84
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pW-wivwubbarzAt71HE6xWzqJ4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.104.0/22
Signature Algorithm: sha256WithRSAEncryption
94:c5:47:1d:4e:37:05:d2:6b:20:1f:3e:32:dd:38:f4:28:27:
a5:fb:c9:8c:df:6f:d3:a3:11:cd:83:49:b0:88:9b:6f:f9:0e:
5e:dd:02:0f:22:0c:35:95:95:66:1c:61:31:94:ad:ec:94:64:
47:b7:8d:59:4f:9f:f5:99:af:02:2a:bb:9f:74:b1:d9:b7:e1:
4a:19:ea:83:dc:85:15:e0:37:f3:66:30:47:25:b5:80:5d:5f:
05:87:c4:32:25:19:91:a4:53:6d:61:17:6a:fc:dd:d9:c2:26:
8d:a3:99:70:14:ba:dc:8a:6c:0f:fe:70:fd:2b:35:dd:65:53:
f2:73:ed:84:4a:c9:fe:17:48:08:8f:54:c7:54:57:a1:9f:78:
e4:c1:54:db:df:36:51:0a:21:52:7b:ef:f4:69:3d:40:03:4f:
de:f4:53:4e:3a:91:a5:d3:a2:c0:e4:35:9a:37:53:7f:2c:27:
df:59:aa:1d:bf:9a:57:d9:88:fa:fa:c1:90:0a:c5:6d:18:4a:
12:9a:78:27:98:81:c4:b0:1b:c4:5d:ae:08:13:13:85:ac:4b:
17:6f:d2:84:e0:63:17:98:23:25:61:fe:bf:95:9b:50:73:cf:
cf:3c:1d:52:96:40:d2:e3:75:ec:b3:75:58:16:2b:63:e6:38:
36:9b:9c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org