Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/fMJgW4e2m3uVhujdjJd9Rn4eV5k.roa
File: fMJgW4e2m3uVhujdjJd9Rn4eV5k.roa (raw, json)
Hash identifier: fjjUl8CoS9dPwxbBcsD40JaGZFFvIx1tvcTlSADgmxs=
Subject key identifier: 7C:C2:60:5B:87:B6:9B:7B:95:86:E8:DD:8C:97:7D:46:7E:1E:57:99
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018C1EAF6A3182D4C51C952E96EDE61F3BDD
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/fMJgW4e2m3uVhujdjJd9Rn4eV5k.roa
Signing time: Thu 30 Nov 2023 05:24:21 +0000
ROA not before: Thu 30 Nov 2023 05:24:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.12.0/22 maxlen: 24
83.147.20.0/23 maxlen: 24
83.147.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1e:af:6a:31:82:d4:c5:1c:95:2e:96:ed:e6:1f:3b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 30 05:24:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cc2605b87b69b7b9586e8dd8c977d467e1e5799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b8:22:96:2c:e5:24:11:53:73:55:f5:95:73:
e2:84:b1:d5:0f:d7:ab:ca:21:77:48:dc:04:de:f5:
aa:35:bb:b2:bc:45:11:1e:11:5a:0b:e0:98:75:8d:
94:45:d3:ba:43:72:e3:37:01:69:38:fd:49:bb:b4:
92:2c:93:1d:10:c9:36:01:68:09:a7:64:b2:de:45:
2c:c0:1e:89:21:2a:63:8a:7a:02:93:40:aa:ec:70:
ef:be:c0:e6:96:57:59:c8:17:44:4d:0c:eb:71:71:
c6:86:c9:67:43:af:63:b8:82:ab:19:f5:15:9e:40:
29:5b:8b:23:1c:e1:1b:29:7b:dc:ec:5c:30:f8:be:
93:65:16:4c:9f:b1:53:76:44:de:ec:d2:c7:c5:2b:
6b:27:95:a8:e7:af:09:fa:58:95:65:76:8d:8d:06:
65:dd:23:f0:91:3a:cb:4f:cc:1d:59:a8:bc:b3:53:
88:65:04:1b:f3:c7:ea:01:28:0d:a1:85:45:36:24:
74:57:d9:76:af:5f:27:b2:d4:cc:99:3e:58:5a:3c:
ae:82:86:ec:7b:e6:4f:7b:cb:0d:03:35:92:e3:44:
60:b5:73:60:7b:d5:7a:d3:92:85:9f:ed:2a:18:40:
ca:9c:ab:f8:d0:a6:0a:e4:8c:42:f9:b2:67:3b:28:
8d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C2:60:5B:87:B6:9B:7B:95:86:E8:DD:8C:97:7D:46:7E:1E:57:99
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/fMJgW4e2m3uVhujdjJd9Rn4eV5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.12.0/22
83.147.20.0/23
83.147.28.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:98:d0:f0:b0:ff:8c:4b:64:2f:48:a0:ee:8d:c4:dc:5f:aa:
06:88:36:37:cd:1b:4e:5f:18:80:52:38:82:a1:63:61:7a:08:
c4:6e:d5:3f:b7:c2:e9:a3:ba:ff:13:e1:e3:b0:8b:5e:a6:45:
5c:94:b9:58:40:41:ae:7b:d2:a7:c3:90:9f:56:fe:56:44:60:
8e:e8:17:78:dc:0c:15:85:7a:4e:c8:cb:b2:42:b4:a4:58:01:
70:70:26:38:ba:97:2a:a1:6b:57:de:f9:65:04:7f:da:ea:07:
db:0b:47:0c:4b:55:2f:cf:a1:45:2b:4e:16:f0:25:34:05:31:
17:31:bc:ae:c2:71:88:4d:a8:e2:65:8c:7a:b9:94:c0:c5:9c:
53:6f:1b:e9:15:f4:0a:fc:1e:9d:5c:52:32:9a:ae:2c:70:b0:
f3:d1:f9:ba:cf:4b:61:99:04:14:1c:32:8a:c0:2f:24:91:67:
e1:38:f5:63:80:ab:3b:1f:b2:aa:5b:33:e1:0e:23:d5:ec:87:
02:75:dc:13:52:91:7b:31:b3:53:f2:45:2b:10:09:e4:1f:e4:
48:e7:c8:03:a1:bd:f7:da:9f:cc:52:71:14:2c:e8:64:7f:63:
91:3a:55:95:ae:d4:e9:13:15:93:0a:a2:6d:0d:3b:86:70:92:
fd:b8:d1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:10:34 2025 by rpki-client