Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/iTPjs-Nu4qPpEwmJJFreLt6dnD4.roa
File: iTPjs-Nu4qPpEwmJJFreLt6dnD4.roa (raw, json)
Hash identifier: bBv4VlPxTRF+HtUNJx5JkFX6Vq/J971RyiBA7igx0j4=
Subject key identifier: 89:33:E3:B3:E3:6E:E2:A3:E9:13:09:89:24:5A:DE:2E:DE:9D:9C:3E
Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial: 02B642D4
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/iTPjs-Nu4qPpEwmJJFreLt6dnD4.roa
Signing time: Sat 01 Jan 2022 03:57:12 +0000
ROA not before: Sat 01 Jan 2022 03:57:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63213
IP address blocks: 83.136.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45499092 (0x2b642d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Validity
Not Before: Jan 1 03:57:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8933e3b3e36ee2a3e9130989245ade2ede9d9c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ec:f9:8e:46:59:9e:f7:89:bd:8d:0e:6b:24:
a8:c2:ec:f8:92:4f:7a:df:aa:f1:71:36:f9:8c:c4:
29:2b:61:a5:4a:50:85:a1:61:3d:f9:64:5a:e8:cf:
fc:03:2b:4d:e9:3a:f2:d9:6a:ce:67:b4:b6:7d:f6:
82:0d:df:0f:d8:2f:46:34:5f:81:a6:1e:25:3b:0f:
3a:60:04:b1:e0:69:18:7c:49:ad:a4:ad:d7:35:a8:
f3:8e:b5:0f:3d:a3:9c:ff:fd:56:7e:2f:ec:0b:f8:
c7:3a:cb:c3:7f:22:99:e4:f5:65:01:a1:bf:d4:01:
f0:d1:7b:d5:31:75:8f:37:2f:98:74:f0:fe:f8:5b:
f5:1d:21:6c:d0:a2:23:f8:d2:b3:66:3a:e8:9e:37:
1d:fd:5c:6f:04:07:27:ad:1e:0d:cb:1c:28:e9:fd:
39:1f:69:9d:f1:3a:98:68:6d:2b:c5:e3:2c:2d:57:
1b:9a:07:7b:39:ef:70:f5:11:c6:c0:81:c1:a4:fb:
39:92:ce:7f:b9:f4:cf:a3:40:4b:e0:86:70:7e:cd:
50:ee:b9:00:22:53:70:e4:6d:b6:12:38:02:2a:7b:
27:49:27:05:3f:ea:41:1e:34:4a:c0:8f:98:0b:ef:
6e:95:29:a1:87:46:fc:d6:de:df:2c:6c:6b:a0:8b:
8d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:33:E3:B3:E3:6E:E2:A3:E9:13:09:89:24:5A:DE:2E:DE:9D:9C:3E
X509v3 Authority Key Identifier:
keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/iTPjs-Nu4qPpEwmJJFreLt6dnD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.213.0/24
Signature Algorithm: sha256WithRSAEncryption
65:44:6d:4b:0e:8a:d5:77:4d:c2:04:5f:75:ed:f4:b9:ca:dd:
de:dc:31:b6:39:7b:3a:a7:c2:1f:3b:de:11:86:fb:36:e8:c5:
70:7d:1c:23:89:88:05:8c:17:ba:67:a6:17:74:04:4e:b0:e6:
b4:4d:ce:10:d9:3c:74:33:35:20:64:6c:d7:ab:5d:1d:54:a5:
e4:7b:91:d1:c4:b0:ca:e8:d2:a9:77:74:7f:34:df:dc:1e:ac:
4a:60:02:2f:1e:de:37:ac:fd:da:ab:85:7c:78:c8:c5:91:44:
34:ed:18:b1:e5:40:60:00:d2:44:6f:d8:4f:19:2d:bb:b1:18:
97:84:aa:9d:b9:14:26:18:65:8b:03:a7:1b:ac:bb:77:ca:e2:
7a:d5:5e:7b:89:e7:29:4b:39:71:f0:8a:ac:36:e5:54:c3:60:
0b:88:b3:ad:00:b3:6b:91:f7:a9:2f:2f:1c:78:2a:5c:5b:96:
27:f1:c9:e3:0c:e3:83:f8:a1:e1:19:a9:f8:10:d2:9f:a8:4b:
63:28:b5:fd:09:23:49:96:0a:14:94:12:2d:99:5f:67:c4:ce:
3a:04:3a:6c:29:0e:34:36:93:59:04:29:66:58:40:4f:da:5a:
c0:b8:27:58:24:09:30:cf:80:a4:75:74:b6:00:66:62:3f:be:
4e:36:b1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:53 2023 by rpki-client on console-ams.rpki-client.org