Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gDedJb9G6bJI9o2WUrsT2B1B-sE.roa
File: gDedJb9G6bJI9o2WUrsT2B1B-sE.roa (raw, json)
Hash identifier: 2F237sdWTuYwWTfJfL0/Tjea58xjm9ChWY5Vb1eeQFQ=
Subject key identifier: 80:37:9D:25:BF:46:E9:B2:48:F6:8D:96:52:BB:13:D8:1D:41:FA:C1
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 0E3157D9
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gDedJb9G6bJI9o2WUrsT2B1B-sE.roa
Signing time: Sat 29 Jan 2022 11:10:53 +0000
ROA not before: Sat 29 Jan 2022 11:10:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 147.136.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238114777 (0xe3157d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 29 11:10:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80379d25bf46e9b248f68d9652bb13d81d41fac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2e:a9:57:91:05:c8:28:d4:2c:e5:73:9e:51:
72:b4:f1:13:53:0d:f7:93:62:ad:b8:d3:cc:30:c0:
e3:11:e2:1f:cd:0c:9c:f4:a8:44:76:5d:52:64:86:
1b:d7:a8:d0:95:6c:86:a3:09:7e:7d:7b:97:77:d0:
3d:15:52:a3:3e:60:cc:26:17:e6:b3:96:a2:b9:2b:
16:58:fb:37:ce:99:64:bf:8d:3f:e3:a2:cd:d2:1f:
d0:fa:66:3b:00:ad:a4:1a:e5:3d:66:23:34:48:df:
bf:ca:82:96:f0:2e:b0:ee:69:a5:bc:2f:d3:89:57:
8c:d8:fd:a8:23:5e:9e:14:9d:1b:9e:c3:03:a2:71:
8c:c1:1e:05:ae:db:19:64:0f:0b:90:e9:6c:f3:b4:
f0:ad:1b:7f:cc:26:b2:ef:1a:ea:d4:5b:49:aa:94:
87:11:99:1c:e7:ae:38:f5:e2:3b:9a:37:74:9b:03:
dc:d8:59:62:ed:7e:e3:ab:2d:74:b5:71:4b:0b:87:
76:55:b7:ee:be:97:67:d6:5a:58:55:56:98:ed:d2:
d3:1e:74:b6:61:ac:08:72:d5:83:b0:3b:c0:aa:02:
f8:0e:92:77:42:65:e5:99:99:ee:29:21:13:b3:0d:
4a:3f:82:b5:f1:5f:fe:99:1c:c6:1f:b2:ed:6f:db:
47:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:37:9D:25:BF:46:E9:B2:48:F6:8D:96:52:BB:13:D8:1D:41:FA:C1
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gDedJb9G6bJI9o2WUrsT2B1B-sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.136.72.0/22
Signature Algorithm: sha256WithRSAEncryption
83:d7:5a:1c:f7:10:23:d3:d2:4c:96:c0:b2:d5:84:84:ea:0f:
f2:cd:16:e7:58:32:9b:35:e7:fc:11:d0:82:bc:18:ad:fc:8d:
5b:78:df:14:8c:f6:38:19:dc:c2:2f:95:20:2c:18:44:80:c2:
f0:47:74:62:fe:c1:33:30:0c:bb:6b:eb:65:55:90:4f:48:75:
37:d0:9f:3e:72:9e:6b:2c:82:c7:0d:e0:ff:48:4f:75:e3:0e:
36:1e:03:38:44:65:53:24:fb:86:c0:c5:3f:8b:1f:86:0d:cf:
ae:9f:20:6c:26:ec:5a:8d:c8:21:76:39:90:37:ea:da:d3:e1:
25:bc:ac:6c:79:8f:90:cd:42:95:63:2d:d9:0c:39:e2:7a:99:
ce:11:a7:20:8b:4f:f7:af:3c:6f:37:9c:f8:b1:d6:c7:c9:d6:
c4:06:bf:dd:2c:28:57:62:1c:69:84:f7:53:54:8a:c8:8c:54:
f9:73:8c:11:57:3f:da:6a:d9:83:5d:fb:46:66:df:47:c4:81:
21:57:42:46:de:7f:e4:85:9e:92:a3:54:82:de:e2:4d:7a:23:
09:0e:33:f0:51:5d:fc:50:cf:42:59:e1:f4:b1:6f:d9:8f:aa:
68:4d:d3:97:41:7f:f3:70:de:ed:78:2f:fe:1e:b8:30:84:46:
2a:a9:27:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:50 2024 by rpki-client on console-fra.rpki-client.org