Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/iV-slt7kyfugrLN8IqZ0JDHqovM.roa
File: iV-slt7kyfugrLN8IqZ0JDHqovM.roa (raw, json)
Hash identifier: 9N9A4ZOnlVz+Qqzf8CCbRgkW8sIbaXAf3xSxKqWzuFs=
Subject key identifier: 89:5F:AC:96:DE:E4:C9:FB:A0:AC:B3:7C:22:A6:74:24:31:EA:A2:F3
Certificate issuer: /CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Certificate serial: 018203C6B468C876E2E695F317C95EF9EF9B
Authority key identifier: 2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/iV-slt7kyfugrLN8IqZ0JDHqovM.roa
Signing time: Fri 15 Jul 2022 21:32:10 +0000
ROA not before: Fri 15 Jul 2022 21:32:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213375
IP address blocks: 93.157.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:03:c6:b4:68:c8:76:e2:e6:95:f3:17:c9:5e:f9:ef:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Validity
Not Before: Jul 15 21:32:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=895fac96dee4c9fba0acb37c22a6742431eaa2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:18:38:0b:2e:1f:88:87:28:b1:47:fe:5b:
8e:e4:96:fb:d5:42:bd:c8:8e:aa:27:f7:8f:f3:c9:
29:ec:96:be:a5:19:a7:7f:6b:84:71:20:f2:64:17:
af:98:bf:42:63:2a:be:e1:0e:c6:27:aa:22:55:23:
eb:15:83:36:f6:d8:89:61:50:c3:73:20:83:ea:ab:
f0:ce:26:b5:06:a3:2c:82:87:8a:db:e1:a7:80:07:
2a:9f:5b:d1:6d:d7:51:f5:b8:ad:43:e7:10:02:c4:
f7:b8:cf:64:46:40:5c:74:48:15:5f:7e:f1:7b:bd:
e8:91:3c:62:c2:68:44:c3:7a:df:7a:05:c0:f9:e5:
1a:35:a4:2b:1a:7f:dc:9c:12:12:6a:84:d6:03:b4:
35:93:0d:d8:87:34:3a:6e:d8:d8:ce:16:be:b8:c2:
91:01:36:e4:cf:74:ee:ae:0c:9c:b0:cf:15:33:65:
83:e3:c9:7a:5e:04:f5:49:34:80:0e:56:d3:ca:7b:
4a:7a:08:8a:15:bb:09:1e:5f:e6:9e:53:ef:ce:7b:
59:e6:db:d0:f2:0e:c6:d4:ec:fa:16:a6:ae:a5:47:
c8:84:bb:57:70:55:11:f4:bf:49:c7:7a:cd:22:b7:
5d:28:a7:a5:54:67:7c:17:6c:e2:0b:33:95:ad:9e:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5F:AC:96:DE:E4:C9:FB:A0:AC:B3:7C:22:A6:74:24:31:EA:A2:F3
X509v3 Authority Key Identifier:
keyid:2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/iV-slt7kyfugrLN8IqZ0JDHqovM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.12.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:5e:e9:c4:81:92:01:2a:15:0c:1d:51:50:fa:b5:de:a9:4e:
79:54:27:d0:34:65:f7:75:b9:70:26:87:a0:28:52:ad:66:0f:
58:df:15:c7:9a:e6:fb:41:8c:83:d9:de:06:80:c4:07:93:95:
9b:8c:36:4a:5b:5d:71:30:8b:a1:6d:4f:ad:0c:ca:c7:6d:0a:
ca:db:05:c9:aa:07:5e:c0:cf:83:54:cf:e1:66:84:43:35:0a:
25:77:40:e5:ff:c1:91:66:ef:e9:85:4d:29:7e:54:d9:1d:0d:
85:88:ec:2b:c6:32:e6:97:8e:0c:ea:78:1e:89:fe:79:29:8c:
85:f1:8c:56:e1:30:bc:d5:df:c6:2e:28:7a:18:d5:17:e7:f1:
b4:97:96:81:92:13:ee:33:c5:85:72:3a:4c:e4:e6:d3:f4:5b:
bf:7c:78:34:4c:5d:9f:68:e3:95:ed:f4:1a:36:62:c2:fd:c1:
78:7e:32:54:1f:2a:8e:58:65:94:28:52:45:75:92:e4:07:87:
a0:81:d3:ab:f2:e4:92:f5:8e:62:b1:5e:31:c5:11:a7:39:73:
38:62:31:6f:66:fe:e3:d6:b2:63:5f:12:6c:1c:3d:cf:32:23:
f4:00:8c:0e:06:35:dc:a5:bf:e9:f0:b4:ee:56:9d:85:23:ac:
b7:d4:14:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIDxrRoyHbi5pXzF8le+e+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjY2I5Yjg5YmMwYmMyMTc1MjQ3NGU2NTBkYzM0ZjA2OWRh
NWMwYjMwHhcNMjIwNzE1MjEzMjEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTVmYWM5NmRlZTRjOWZiYTBhY2IzN2MyMmE2NzQyNDMxZWFhMmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCQYOAsuH4iHKLFH/luO5Jb71UK9
yI6qJ/eP88kp7Ja+pRmnf2uEcSDyZBevmL9CYyq+4Q7GJ6oiVSPrFYM29tiJYVDD
cyCD6qvwzia1BqMsgoeK2+GngAcqn1vRbddR9bitQ+cQAsT3uM9kRkBcdEgVX37x
e73okTxiwmhEw3rfegXA+eUaNaQrGn/cnBISaoTWA7Q1kw3YhzQ6btjYzha+uMKR
ATbkz3TurgycsM8VM2WD48l6XgT1STSADlbTyntKegiKFbsJHl/mnlPvzntZ5tvQ
8g7G1Oz6FqaupUfIhLtXcFUR9L9Jx3rNIrddKKelVGd8F2ziCzOVrZ7/xwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIlfrJbe5Mn7oKyzfCKmdCQx6qLzMB8GA1UdIwQY
MBaAFCzLm4m8C8IXUkdOZQ3DTwadpcCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTE11Ymlid0x3aGRTUjA1bERjTlBCcDJsd0xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yM2Y3YzQtNmUzYi00ZmRhLTkzMWIt
MDYyYWVkNTEzODFjLzEvaVYtc2x0N2t5ZnVnckxOOElxWjBKREhxb3ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yM2Y3YzQtNmUzYi00ZmRhLTkzMWItMDYyYWVkNTEzODFj
LzEvTE11Ymlid0x3aGRTUjA1bERjTlBCcDJsd0xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXZ0MMA0G
CSqGSIb3DQEBCwUAA4IBAQAcXunEgZIBKhUMHVFQ+rXeqU55VCfQNGX3dblwJoeg
KFKtZg9Y3xXHmub7QYyD2d4GgMQHk5WbjDZKW11xMIuhbU+tDMrHbQrK2wXJqgde
wM+DVM/hZoRDNQold0Dl/8GRZu/phU0pflTZHQ2FiOwrxjLml44M6ngeif55KYyF
8YxW4TC81d/GLih6GNUX5/G0l5aBkhPuM8WFcjpM5ObT9Fu/fHg0TF2faOOV7fQa
NmLC/cF4fjJUHyqOWGWUKFJFdZLkB4eggdOr8uSS9Y5isV4xxRGnOXM4YjFvZv7j
1rJjXxJsHD3PMiP0AIwOBjXcpb/p8LTuVp2FI6y31BSk
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:16 2023 by rpki-client on console-ams.rpki-client.org