Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/822b12-2b8c-45ed-b65f-8904a437ca58/1/exdYPnRNniCflAI69bljjAA9eKk.roa
File: exdYPnRNniCflAI69bljjAA9eKk.roa (raw, json)
Hash identifier: zHS1YElaSaReuTrny0ChtPYEO82DQvs1IuII2UfDQKY=
Subject key identifier: 7B:17:58:3E:74:4D:9E:20:9F:94:02:3A:F5:B9:63:8C:00:3D:78:A9
Certificate issuer: /CN=72fb8abc33d141c49137081af4286e82a4cacc96
Certificate serial: 8D7AE3
Authority key identifier: 72:FB:8A:BC:33:D1:41:C4:91:37:08:1A:F4:28:6E:82:A4:CA:CC:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvuKvDPRQcSRNwga9ChugqTKzJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/822b12-2b8c-45ed-b65f-8904a437ca58/1/exdYPnRNniCflAI69bljjAA9eKk.roa
Signing time: Sat 01 Jan 2022 02:56:00 +0000
ROA not before: Sat 01 Jan 2022 02:56:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 262287
IP address blocks: 93.157.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9272035 (0x8d7ae3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72fb8abc33d141c49137081af4286e82a4cacc96
Validity
Not Before: Jan 1 02:56:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b17583e744d9e209f94023af5b9638c003d78a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:55:02:96:20:e6:19:03:62:e9:a9:b4:b6:37:
cc:37:29:2a:a6:0e:0c:11:8d:d9:31:4b:4f:d4:be:
07:aa:aa:c7:58:ba:90:c7:f9:7e:f8:b0:50:37:a4:
0a:10:51:3b:37:4d:ec:dc:41:aa:ad:c6:4f:57:95:
e4:b2:18:d2:e2:b5:00:da:83:2c:1e:9f:7f:3b:5f:
d3:2c:67:92:ac:b3:e8:2c:7a:a0:8c:ca:9d:2e:bf:
0a:9a:c2:8f:e3:b8:40:30:83:1f:d7:b7:43:f3:bb:
b4:00:58:34:4e:e4:fd:9e:d4:50:bf:c2:de:89:01:
2e:f5:4d:d6:a2:9e:b7:c8:c4:d2:5b:f1:06:da:3b:
46:3f:01:fc:4a:d7:b1:97:c2:8a:5c:f8:f5:0a:b1:
2e:03:b4:cb:31:59:60:a2:6f:68:b2:1c:bc:f2:7d:
35:25:cb:82:bc:7e:39:5c:1c:be:e7:03:14:d4:ae:
5a:77:36:d6:7a:1d:29:64:8b:ef:bf:0d:f2:86:e7:
af:ea:6a:bb:78:28:5d:9a:af:c2:56:db:9a:04:94:
36:82:ae:3c:99:10:e0:eb:6c:a6:c6:71:3a:cc:04:
35:41:2d:60:b7:f5:16:e2:6f:25:f1:6b:7a:bb:a1:
aa:5e:77:74:d7:a7:36:f1:f7:b9:94:94:b6:45:f9:
6a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:17:58:3E:74:4D:9E:20:9F:94:02:3A:F5:B9:63:8C:00:3D:78:A9
X509v3 Authority Key Identifier:
keyid:72:FB:8A:BC:33:D1:41:C4:91:37:08:1A:F4:28:6E:82:A4:CA:CC:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvuKvDPRQcSRNwga9ChugqTKzJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/822b12-2b8c-45ed-b65f-8904a437ca58/1/exdYPnRNniCflAI69bljjAA9eKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/822b12-2b8c-45ed-b65f-8904a437ca58/1/cvuKvDPRQcSRNwga9ChugqTKzJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.108.0/24
Signature Algorithm: sha256WithRSAEncryption
71:e0:12:b4:92:b8:d7:1f:b2:8b:04:fa:34:32:98:94:76:82:
b3:d5:b6:fd:f8:ec:ab:c4:69:3a:ca:37:7f:96:0f:2d:e9:87:
3f:a1:77:b5:1f:00:1d:55:06:28:32:6d:ef:aa:03:49:93:f9:
79:9d:74:2f:3b:c0:f1:62:d4:65:43:17:cc:e8:f9:fb:74:5e:
8a:50:f6:aa:04:6d:78:5f:7b:48:72:44:af:42:78:7c:e4:ec:
36:40:31:50:d5:52:ff:be:f4:4f:f9:18:6c:31:4a:61:22:cb:
b5:e5:88:c4:28:bd:51:87:e3:67:f0:a4:d9:29:2a:51:04:aa:
91:f0:f0:9e:db:0d:8f:21:f2:bc:ee:12:43:f3:36:0d:10:9e:
97:d3:46:72:ec:c9:dd:ee:44:cb:c4:42:66:b2:2a:fd:d2:c1:
83:dd:ed:a7:eb:b2:1d:15:a8:94:57:11:5c:41:33:3d:12:af:
92:2f:12:4f:ad:56:1d:06:bb:d2:79:37:95:a1:1d:09:a4:d5:
bf:41:39:4f:46:34:86:17:0e:5b:b7:30:00:31:3c:ff:08:73:
c1:51:ce:1e:54:a0:ea:84:50:74:02:97:91:54:e5:a4:c5:4b:
0a:cb:5f:15:4e:90:5e:da:71:09:12:00:4a:4e:a8:a9:fd:f1:
fc:a1:35:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:52 2023 by rpki-client on console-fra.rpki-client.org