Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1eqorenxg7yNk2yM290fcryxHl0.roa
File: 1eqorenxg7yNk2yM290fcryxHl0.roa (raw, json)
Hash identifier: nAYAlOgfq4O0DXGl19pFbpYJJL8p/4SZJh3hipAqBkU=
Subject key identifier: D5:EA:A8:AD:E9:F1:83:BC:8D:93:6C:8C:DB:DD:1F:72:BC:B1:1E:5D
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 01841E92D8E6426AFE095358356D9F2F740E
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1eqorenxg7yNk2yM290fcryxHl0.roa
Signing time: Fri 28 Oct 2022 12:30:51 +0000
ROA not before: Fri 28 Oct 2022 12:30:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16276
IP address blocks: 83.136.214.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:92:d8:e6:42:6a:fe:09:53:58:35:6d:9f:2f:74:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Oct 28 12:30:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5eaa8ade9f183bc8d936c8cdbdd1f72bcb11e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a3:5d:d6:45:b9:6b:9a:0a:c2:6d:d7:29:c1:
33:88:d7:37:7a:3c:27:d2:a5:fe:81:25:38:7a:30:
99:68:c8:f9:c6:d7:52:b2:24:21:5c:96:96:ae:65:
ad:3a:be:99:78:eb:47:a1:20:18:5e:26:01:f6:81:
4e:66:f8:f8:83:40:e3:6e:98:20:ff:15:4c:05:84:
83:59:2e:1c:43:b9:39:b9:e1:ff:1e:ef:90:1a:90:
ea:5e:a7:e8:1e:d0:c6:1d:36:9f:d2:b3:57:ce:0d:
33:e6:7a:46:9d:6f:ae:94:37:c5:78:17:3c:70:10:
9f:d2:da:dc:66:e6:b9:03:87:72:e8:13:e0:6a:51:
bd:bf:f6:e7:1c:8f:ba:33:ef:f2:13:c0:2d:6b:1e:
be:84:3a:14:44:59:2d:00:3b:cf:cb:6b:6e:44:e8:
d7:c1:95:6a:53:e9:41:72:89:fe:a9:99:fc:7a:9c:
fc:8e:51:a6:b0:c2:7b:b9:0c:24:81:10:c2:93:81:
47:42:f3:85:d7:22:14:a8:0d:1a:73:ce:8d:e6:3a:
86:fa:fe:ca:f0:88:eb:f0:04:94:af:70:81:58:57:
79:4d:90:e1:21:10:e2:c1:92:25:99:35:54:8e:56:
8c:a6:c4:fe:4d:2a:00:70:51:ab:ce:72:44:e5:92:
ed:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EA:A8:AD:E9:F1:83:BC:8D:93:6C:8C:DB:DD:1F:72:BC:B1:1E:5D
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1eqorenxg7yNk2yM290fcryxHl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.214.0/23
Signature Algorithm: sha256WithRSAEncryption
22:ab:ad:50:6c:d9:be:56:96:7f:58:c7:a5:e5:fb:2e:23:f9:
94:c3:f5:82:ae:2f:6d:6f:b2:17:43:a6:3e:d4:8e:38:de:b7:
5a:9a:a5:5c:0b:76:aa:49:a0:c7:1e:92:5d:24:aa:bc:01:84:
34:1c:01:6b:f2:b7:5e:46:c0:e5:99:ae:69:47:e4:bb:2b:82:
b9:45:c2:dc:d2:83:61:d9:01:bd:52:e3:d6:43:73:c6:45:11:
4b:b1:19:5b:a7:fd:61:43:ef:03:b2:ff:19:c9:c5:01:90:b5:
b3:13:9b:cc:79:1b:19:fa:72:36:9d:cb:a4:ac:9c:7e:f1:a0:
8c:d6:6a:34:e9:16:e8:6f:8e:2f:9d:1d:6a:af:75:5f:f1:dc:
20:ce:1a:e7:9d:98:1f:70:69:ea:25:c6:89:6b:91:e4:f9:87:
00:86:38:a9:99:1f:50:1d:57:6a:bc:b9:70:b7:db:97:8f:22:
dc:e1:f3:90:78:5d:33:29:f0:79:1d:83:41:b1:98:85:78:7e:
3c:d4:b8:f5:a7:bf:ea:ec:d5:b2:f7:5d:d6:6e:46:52:cc:c2:
01:a2:61:73:83:4d:a4:6b:a6:4f:38:4f:24:48:ae:bd:f5:f0:
48:72:56:37:ef:8e:f4:d4:01:67:eb:71:55:2c:7c:db:34:dd:
5d:fd:31:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:53 2023 by rpki-client on console-ams.rpki-client.org