Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/PnBivMLdp7ZH2ECK8tIu5FnxIX8.roa
File: PnBivMLdp7ZH2ECK8tIu5FnxIX8.roa (raw, json)
Hash identifier: nfkdBz+b1PJ+DrJOsRWdPkFh6LCLIK8ArtM+xbP2pHE=
Subject key identifier: 3E:70:62:BC:C2:DD:A7:B6:47:D8:40:8A:F2:D2:2E:E4:59:F1:21:7F
Certificate issuer: /CN=82aa3ec58ba846d27a797111c5585153000dba0e
Certificate serial: 0B07F873
Authority key identifier: 82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/PnBivMLdp7ZH2ECK8tIu5FnxIX8.roa
Signing time: Sat 01 Jan 2022 02:01:41 +0000
ROA not before: Sat 01 Jan 2022 02:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202130
IP address blocks: 83.136.144.0/24 maxlen: 24
83.136.145.0/24 maxlen: 24
83.136.147.0/24 maxlen: 24
83.136.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185071731 (0xb07f873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82aa3ec58ba846d27a797111c5585153000dba0e
Validity
Not Before: Jan 1 02:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e7062bcc2dda7b647d8408af2d22ee459f1217f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:0d:16:b1:26:73:bd:2f:d4:4e:2b:d9:44:
df:4c:4b:7b:b7:21:5e:e1:84:64:e2:f2:65:87:fa:
c9:04:3c:4b:f2:a8:91:ee:01:74:79:db:cb:16:f3:
2e:4b:86:de:fd:0b:57:28:6b:c3:cc:c9:33:c1:7b:
20:4a:1a:09:eb:b1:90:22:4b:83:de:08:ef:99:e4:
90:b7:2b:d6:d1:bf:5b:d8:5d:b0:00:00:48:81:5a:
56:1d:5b:c3:63:ed:79:41:75:33:a0:29:2c:4c:e4:
4b:0f:ab:21:b8:03:26:85:e4:48:25:25:73:92:84:
7f:03:86:8d:f2:ab:6b:b6:e4:0f:89:d7:e6:4d:85:
81:63:3c:c4:72:f0:cc:9a:06:88:d3:1c:72:f9:0c:
24:3c:5e:6d:38:bc:91:a2:17:a4:fc:9c:85:09:34:
69:0a:53:4f:39:87:83:f8:f9:c0:55:85:c7:a2:58:
0a:69:cf:ec:24:8e:40:bf:68:57:98:a6:c7:57:36:
c3:dd:e8:87:75:e4:9c:70:f1:1c:11:69:7f:d7:39:
09:ce:d9:50:af:21:71:a6:4c:f7:d8:c1:7b:45:b0:
4a:4f:3c:ac:d4:ea:a9:ec:62:90:aa:8e:ce:84:7e:
7e:f6:cc:67:54:b7:c4:e3:d2:7d:e9:09:c1:88:57:
70:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:70:62:BC:C2:DD:A7:B6:47:D8:40:8A:F2:D2:2E:E4:59:F1:21:7F
X509v3 Authority Key Identifier:
keyid:82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/PnBivMLdp7ZH2ECK8tIu5FnxIX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.144.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:26:18:98:36:ae:53:c4:c7:0f:8d:a1:84:2f:29:c1:21:f3:
87:74:f1:1f:fc:c6:c1:51:73:08:84:3c:8b:e9:1a:e6:a9:a8:
16:7e:a6:c1:cf:63:34:c0:87:ba:0b:9f:e6:28:0b:23:50:3a:
f4:19:65:89:9d:d7:f4:31:15:cd:94:15:e5:df:3a:61:59:24:
55:5c:7b:28:92:71:71:5a:46:ac:99:5b:2d:d2:3c:dd:f6:87:
44:c6:1d:28:d2:6d:0a:94:10:a5:bc:55:f9:24:1c:10:ba:62:
fa:19:64:8c:b0:8d:2c:ba:2d:ae:5a:6c:be:e8:0c:ab:0a:4b:
c7:36:ab:7f:23:cc:d0:dc:b3:b0:f1:07:23:4c:20:a3:88:24:
c0:ed:fd:cd:0b:36:b7:e4:6f:4f:a4:63:6b:ce:b2:4a:61:e7:
ff:87:a5:e4:43:08:28:8a:20:95:b6:1f:5f:23:e6:02:2c:23:
b7:00:ec:7a:ff:87:4a:bc:7e:f4:d1:d0:c7:56:41:79:5c:fb:
fc:7a:ff:00:8a:a2:79:40:db:a0:53:e4:75:7d:29:53:c2:ec:
8e:fd:1e:fb:e3:ec:32:91:9d:ef:f6:f5:aa:24:b6:39:c4:0b:
35:3e:92:c5:67:47:67:18:99:d8:e2:2a:5c:55:6f:7c:09:81:
54:1f:3c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:46 2023 by rpki-client on console-fra.rpki-client.org