Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/ifbAMuJ6QPgiKPCPrIHvnjhGGFg.roa
File: ifbAMuJ6QPgiKPCPrIHvnjhGGFg.roa (raw, json)
Hash identifier: iR89bT/lW/Cy168watjvBmYazezl7cnXYN5MA7ZihsU=
Subject key identifier: 89:F6:C0:32:E2:7A:40:F8:22:28:F0:8F:AC:81:EF:9E:38:46:18:58
Certificate issuer: /CN=26235ea70deaae0e999412876e9d216afd65cbdb
Certificate serial: 01853F4FA29A6894F9597B55B4E5FD8C76A9
Authority key identifier: 26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/ifbAMuJ6QPgiKPCPrIHvnjhGGFg.roa
Signing time: Fri 23 Dec 2022 14:07:41 +0000
ROA not before: Fri 23 Dec 2022 14:07:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6830
IP address blocks: 93.93.20.0/23 maxlen: 23
93.93.22.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3f:4f:a2:9a:68:94:f9:59:7b:55:b4:e5:fd:8c:76:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26235ea70deaae0e999412876e9d216afd65cbdb
Validity
Not Before: Dec 23 14:07:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89f6c032e27a40f82228f08fac81ef9e38461858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:20:65:4e:dc:f6:d0:c4:d8:c7:74:de:e4:97:
34:73:f0:69:9a:47:f5:97:f6:9b:63:75:14:99:26:
f5:6b:eb:0d:6f:ff:f2:55:44:6d:d7:3c:c6:90:2b:
e0:68:a1:83:61:19:4d:6e:6a:bf:ad:1d:83:11:d0:
95:6e:ad:9c:ac:c2:63:88:0b:d4:e3:2b:86:69:d1:
3b:d5:06:b4:d4:27:ee:b6:ee:cb:09:67:3b:2b:68:
9c:09:b9:2a:d8:f7:81:70:db:85:99:a5:b0:27:43:
d9:ba:95:05:f9:80:3f:04:f2:55:e1:c7:bb:e7:8b:
15:07:6c:d5:99:dc:79:d9:20:52:a0:24:ec:ff:f1:
20:40:36:09:84:04:62:77:a6:c9:d7:1b:e4:fc:e7:
25:7d:ae:2d:2a:0b:86:5b:f9:b9:52:ce:58:82:70:
dc:dc:94:f1:b4:6e:19:84:d3:f2:bc:8e:e6:18:07:
63:86:19:ff:8e:0c:6c:f2:62:7c:7e:53:b8:b2:e9:
1a:cf:a3:3f:d7:b1:67:db:04:f7:3c:04:a9:24:66:
fc:14:99:d0:43:4d:fe:ff:30:a9:0e:af:30:90:52:
71:d9:b0:41:60:43:71:10:96:60:39:7b:31:51:2b:
18:70:fd:5b:d2:eb:75:d9:65:26:98:94:b5:68:ac:
eb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F6:C0:32:E2:7A:40:F8:22:28:F0:8F:AC:81:EF:9E:38:46:18:58
X509v3 Authority Key Identifier:
keyid:26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/ifbAMuJ6QPgiKPCPrIHvnjhGGFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/JiNepw3qrg6ZlBKHbp0hav1ly9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.20.0/22
Signature Algorithm: sha256WithRSAEncryption
01:f6:0c:25:34:29:98:a7:ca:be:e3:80:17:30:5d:44:97:bc:
d7:83:cd:6c:e8:a5:85:2e:00:1d:c9:94:16:1b:8f:fa:d4:a5:
64:28:01:ed:e4:d6:01:b4:a6:c4:e6:10:bf:8f:83:8d:3b:e5:
57:3d:19:3e:94:d1:db:04:68:20:38:2d:c5:48:0f:ed:57:d7:
80:34:f9:24:83:eb:b9:e4:f3:2c:48:85:08:8b:41:77:27:16:
c2:84:51:ea:c0:01:5d:b5:52:50:f7:6a:58:85:83:2a:56:6d:
b0:dd:69:99:4b:3b:fa:3d:63:d6:c8:af:f7:33:74:04:ba:cf:
c5:f7:0b:0a:5f:97:eb:5f:ee:ba:5c:d6:3c:2f:22:3e:ed:a7:
a2:5d:d0:31:d7:dd:d5:ef:fa:fc:cb:40:6d:eb:24:95:9a:a7:
8d:62:c6:bd:c4:f2:21:0f:df:14:d2:55:0e:71:27:e0:c8:aa:
41:db:fe:ae:17:7a:ac:31:e2:f1:14:fa:b5:6f:5c:5f:a5:1e:
2d:05:7d:29:f3:b7:81:37:ad:06:29:97:f4:51:cb:d5:77:92:
c2:25:96:e6:8d:85:3a:9a:2b:a0:49:98:54:55:84:81:14:b5:
ba:ee:a1:28:a8:1c:3b:95:ab:69:0a:50:d3:e6:72:1d:77:99:
b8:95:5a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:45 2023 by rpki-client on console-ams.rpki-client.org