Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/ZzfkRlQYjjulXXvxBqBuD9iDuu0.roa
File: ZzfkRlQYjjulXXvxBqBuD9iDuu0.roa (raw, json)
Hash identifier: AsLOWgZEdsMcq1tTqsHls5+YrNdy9x90gzG0Ivh0l8I=
Subject key identifier: 67:37:E4:46:54:18:8E:3B:A5:5D:7B:F1:06:A0:6E:0F:D8:83:BA:ED
Certificate issuer: /CN=21db69b104ba7c7f912cd725916bf47dd8bb0367
Certificate serial: 042DFD7C
Authority key identifier: 21:DB:69:B1:04:BA:7C:7F:91:2C:D7:25:91:6B:F4:7D:D8:BB:03:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IdtpsQS6fH-RLNclkWv0fdi7A2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/ZzfkRlQYjjulXXvxBqBuD9iDuu0.roa
Signing time: Sat 01 Jan 2022 14:57:23 +0000
ROA not before: Sat 01 Jan 2022 14:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 18254
IP address blocks: 93.93.244.0/24 maxlen: 24
93.93.245.0/24 maxlen: 24
93.93.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70122876 (0x42dfd7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21db69b104ba7c7f912cd725916bf47dd8bb0367
Validity
Not Before: Jan 1 14:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6737e44654188e3ba55d7bf106a06e0fd883baed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1a:63:3d:9e:a0:08:e5:c4:c9:24:4f:e7:a4:
1c:33:56:63:9d:aa:6a:78:8e:ec:96:7b:91:83:b0:
03:a4:04:8e:da:4d:6e:c0:fd:12:e6:db:20:20:5d:
57:87:4b:78:7b:46:9a:ce:ca:6f:e1:14:ce:9c:51:
16:e9:d7:c7:1a:4b:4e:c0:2c:d8:07:18:d2:e4:7e:
53:44:9c:11:90:c9:fd:20:36:d7:1c:f4:11:3c:10:
9c:b7:1b:cf:69:a8:6a:dc:b1:92:47:63:9d:0b:34:
ba:8b:b5:62:46:b2:68:fc:02:35:7a:83:b8:c9:f0:
8d:df:c3:17:ee:48:52:6c:86:2c:94:8f:60:cd:b3:
b7:6a:93:0d:59:92:42:2d:d0:89:9b:85:bb:35:ba:
0f:2c:b5:09:76:41:11:0f:d5:ff:6e:3e:05:4d:9e:
36:a5:cc:22:c2:dc:46:2e:19:26:52:14:fd:a0:7c:
d3:8c:94:6d:bf:c1:77:6b:c5:b0:4e:8a:eb:45:cd:
24:20:b8:98:db:5a:ef:a7:24:4e:74:01:ec:ec:82:
14:4d:f4:63:cb:5a:57:b6:59:01:0c:0c:18:fb:63:
82:86:dd:d5:7e:a3:e5:1f:c3:01:fc:18:12:46:57:
89:4b:32:22:58:aa:25:7c:8c:96:75:77:a7:c4:90:
5a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:37:E4:46:54:18:8E:3B:A5:5D:7B:F1:06:A0:6E:0F:D8:83:BA:ED
X509v3 Authority Key Identifier:
keyid:21:DB:69:B1:04:BA:7C:7F:91:2C:D7:25:91:6B:F4:7D:D8:BB:03:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IdtpsQS6fH-RLNclkWv0fdi7A2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/ZzfkRlQYjjulXXvxBqBuD9iDuu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/IdtpsQS6fH-RLNclkWv0fdi7A2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.244.0/23
93.93.247.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:1d:b6:26:47:cd:3d:ce:85:4d:07:a2:8c:2e:fd:e7:17:4b:
5a:e5:3d:c0:8f:03:c0:0a:51:91:69:b7:fb:0f:12:08:38:71:
9b:a4:6f:37:e8:d0:c7:9d:3a:92:28:60:40:49:60:cc:56:f1:
f6:ff:9a:4d:de:bb:97:3c:a2:e3:b6:d0:2c:cb:2f:b5:6d:1a:
92:69:a5:58:21:08:c0:3c:bb:ed:56:43:70:f7:ec:a7:9e:22:
16:13:c4:8d:e0:e5:6e:7a:31:b4:69:a4:1e:07:eb:73:9a:5b:
22:12:b5:65:17:5b:dd:3c:55:a0:d7:fa:6d:8f:4c:80:a2:82:
a9:f6:b6:a5:bc:e3:79:c1:96:0b:81:49:07:db:34:a3:e6:57:
cc:b0:08:82:52:e5:cc:7f:23:b0:ef:d0:db:26:2f:8c:c3:6b:
b4:70:07:f5:89:a5:c3:86:76:cd:eb:e9:2c:08:8c:a9:04:9e:
27:a2:bb:b3:59:2e:b6:98:85:ac:ea:06:86:0f:86:1a:be:ad:
58:3a:36:ef:83:f5:0c:6d:cf:48:49:b7:0e:5c:f9:7f:fc:78:
db:4c:2f:36:93:63:6d:db:c0:f7:99:76:0c:2b:ba:7c:c2:bd:
bf:45:98:99:4a:cb:1f:ed:ae:7e:ff:8e:c3:d3:57:73:5c:a6:
1d:f1:b2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:14 2023 by rpki-client on console-fra.rpki-client.org