Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/biRq7vkHDrBWsN_msOvIT76FOoE.roa
File: biRq7vkHDrBWsN_msOvIT76FOoE.roa (raw, json)
Hash identifier: D6qZ+G3e7UwV8V8YenSiKYHj0/usygMyJGY6UOelBv4=
Subject key identifier: 6E:24:6A:EE:F9:07:0E:B0:56:B0:DF:E6:B0:EB:C8:4F:BE:85:3A:81
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 0E2889D4
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/biRq7vkHDrBWsN_msOvIT76FOoE.roa
Signing time: Mon 24 Jan 2022 22:52:12 +0000
ROA not before: Mon 24 Jan 2022 22:52:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 147.136.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237537748 (0xe2889d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 24 22:52:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e246aeef9070eb056b0dfe6b0ebc84fbe853a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:9e:97:5e:5f:b4:19:66:be:ed:86:0b:d6:
73:c3:de:3a:02:cd:db:da:c7:4d:f2:fb:75:d0:ec:
4b:13:43:9a:48:1a:ac:9e:2f:e4:fc:cf:3b:86:6b:
05:88:99:df:12:78:4d:ad:06:f7:8e:fe:18:1b:91:
50:98:65:45:52:eb:00:fc:bd:70:ab:c0:7c:f0:fe:
5d:99:3e:9e:b9:55:35:45:78:e9:61:50:cc:ed:7f:
1a:16:2f:02:ed:6e:7f:70:2f:15:64:74:0e:54:4c:
6e:fe:1d:01:76:67:8a:08:ee:9b:d2:21:a3:b9:0b:
7f:af:84:2a:62:11:86:28:93:a4:81:a7:dc:dc:14:
84:53:23:35:df:a7:e1:ae:3f:b4:81:45:8a:d9:6b:
86:da:24:f7:d7:a1:86:27:e8:8e:99:8f:53:4f:cf:
83:8f:7c:7b:32:fc:3d:8e:1a:0f:6e:ad:bd:5d:11:
0e:fe:55:cc:ba:cc:c0:f7:9b:9e:e6:99:7f:ce:ea:
a2:04:a1:79:4c:d7:35:44:5f:77:38:3c:5d:e1:c8:
62:47:fa:d4:36:ff:c5:e0:44:10:61:b4:df:db:d2:
05:f8:17:0a:c0:fd:a6:61:45:69:c5:60:79:63:b1:
e7:cf:71:ea:10:db:c5:1a:c1:91:57:52:dd:7a:b9:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:24:6A:EE:F9:07:0E:B0:56:B0:DF:E6:B0:EB:C8:4F:BE:85:3A:81
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/biRq7vkHDrBWsN_msOvIT76FOoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.136.80.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:d9:a3:9e:ed:69:c9:dd:5b:cc:8e:33:7f:85:ae:27:3a:74:
99:5f:12:4e:90:a8:af:8d:89:17:11:ba:c5:85:52:1b:f5:12:
e7:9c:48:50:0f:ff:1f:0c:74:b2:e1:b7:30:ef:95:40:d3:da:
49:9d:bc:dc:13:9a:42:ff:34:b2:b9:6d:b8:3a:7d:b7:31:2a:
84:91:92:97:ba:ce:f2:c7:60:c8:81:e3:76:da:5b:70:e6:53:
1a:e7:f3:6a:b2:0d:81:25:e3:0b:84:d0:68:84:22:76:3d:25:
f1:56:0d:ab:30:84:41:94:f1:06:ee:2c:01:47:59:6e:1b:58:
f5:3f:22:b3:de:f4:29:98:4f:8d:d5:55:87:c2:3a:ee:9d:59:
61:48:89:5b:79:49:7a:aa:bb:3b:3c:d2:6b:bd:a6:ba:21:83:
66:83:39:41:88:80:c2:98:75:21:15:79:65:c8:d2:e5:18:f0:
8e:8d:6d:cf:23:c6:a5:2a:c8:b3:38:f1:78:2d:f3:a2:3e:15:
a5:ef:e4:bd:fa:7b:1b:c2:db:84:75:83:25:4d:bc:8e:8c:b8:
69:3c:3a:3e:ec:f4:c8:90:6f:2d:b7:9d:47:2d:4a:79:ef:57:
3f:b9:30:93:4c:12:a4:93:af:d2:e0:85:18:fc:03:af:c4:7c:
0a:f1:25:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:59 2023 by rpki-client on console-fra.rpki-client.org