Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/WVz2YL9pwDEE1kCp9BY2VUVhTs8.roa
File: WVz2YL9pwDEE1kCp9BY2VUVhTs8.roa (raw, json)
Hash identifier: ItsW8Q6jJd9uxjH/ATUV+DpRozYnPxkCNWVj1iZGWZg=
Subject key identifier: 59:5C:F6:60:BF:69:C0:31:04:D6:40:A9:F4:16:36:55:45:61:4E:CF
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 030FF887
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/WVz2YL9pwDEE1kCp9BY2VUVhTs8.roa
Signing time: Tue 08 Feb 2022 14:00:29 +0000
ROA not before: Tue 08 Feb 2022 14:00:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 83.136.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51378311 (0x30ff887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Feb 8 14:00:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=595cf660bf69c03104d640a9f416365545614ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:99:7b:08:0e:70:7a:c6:d7:cd:d5:b5:71:5e:
44:2f:9c:55:5b:86:9b:ac:b6:8f:cc:71:25:96:09:
05:b6:43:61:5c:6a:09:b1:27:26:3b:8e:9d:31:70:
ec:23:29:51:d6:c4:dc:62:e2:7c:2f:8d:a2:25:47:
6b:4c:be:0e:5c:54:63:05:cd:16:58:cd:6f:54:e6:
37:42:f0:d0:b1:5b:f9:20:99:94:36:47:4e:5a:c5:
f0:9f:d5:43:51:f8:8a:57:3f:12:bb:8d:5f:77:5d:
d7:87:41:14:25:f2:3d:62:46:6e:cd:cd:3b:bb:b6:
b6:e0:39:6e:a9:81:a8:d8:ae:7f:e5:2d:9d:9f:88:
66:ff:e9:5f:2a:af:ca:6c:f4:88:17:b1:84:13:c8:
35:d1:cb:7d:be:cf:cc:b8:c0:9b:57:f9:4e:60:7e:
11:55:b2:74:52:d2:b1:c1:4d:54:6b:ac:4c:73:22:
5e:4f:a2:a8:33:d0:aa:58:67:de:ec:13:43:11:89:
92:2e:27:e1:00:86:68:20:96:af:2c:9d:7a:0b:b3:
42:23:6e:0f:db:e5:72:6c:cc:bf:94:66:01:93:f7:
e0:10:1f:14:f5:7a:7d:e8:4e:b1:1f:17:2a:6c:40:
4a:bd:45:9f:e5:27:a9:f4:9c:f2:05:1c:8e:bc:cd:
72:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5C:F6:60:BF:69:C0:31:04:D6:40:A9:F4:16:36:55:45:61:4E:CF
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/WVz2YL9pwDEE1kCp9BY2VUVhTs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.212.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:99:3b:10:3c:a2:d2:d3:e0:01:83:71:d5:5b:97:51:fb:4e:
24:60:17:9f:a9:70:fe:db:4b:37:b4:d5:14:17:29:24:32:b7:
05:9d:29:ec:d9:e8:a9:1c:5d:21:f5:2d:56:35:4d:ef:4f:db:
4b:83:f7:1c:6a:c8:e7:6b:f2:9a:07:82:91:cb:cb:ff:b9:ad:
8a:b2:29:9a:be:a0:c6:a0:01:e9:f2:c8:40:0b:e0:06:cd:a6:
d0:cc:20:41:e5:79:d0:e7:4b:5e:b9:ed:8e:3c:6f:e5:e8:79:
6a:8b:fc:7d:6e:9a:e4:34:de:5f:c0:37:82:a0:58:fe:e9:69:
82:94:65:06:ed:68:f5:3a:22:fc:6c:85:7f:dd:9a:2d:2b:9f:
eb:24:87:76:c6:43:e5:9a:95:9b:04:0e:7a:aa:10:86:91:9b:
bf:8b:d4:96:0a:3b:e0:b5:d5:7d:e7:82:d9:e4:56:b1:91:5b:
9d:53:e5:f9:52:72:8e:1f:07:9d:a0:31:76:a7:09:2b:b3:ee:
ba:fd:e0:c2:6b:de:74:a3:26:5d:6c:0b:8e:8e:bd:db:62:c6:
59:ad:a3:fb:2f:5d:9d:53:c2:81:fb:e8:91:6a:b8:60:5c:43:
f9:d2:b2:05:a0:da:4b:81:ec:66:d3:e1:e3:ee:4c:a2:c4:bd:
36:f3:79:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:00 2023 by rpki-client on console-fra.rpki-client.org