Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/aw93pXUKzfzabnrenGGGIRoMge8.roa
File: aw93pXUKzfzabnrenGGGIRoMge8.roa (raw, json)
Hash identifier: YTo6yaLiAOenuWGXP8Tpy+czuHmX9omjxpX1gk5ThNU=
Subject key identifier: 6B:0F:77:A5:75:0A:CD:FC:DA:6E:7A:DE:9C:61:86:21:1A:0C:81:EF
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 13653EDA
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/aw93pXUKzfzabnrenGGGIRoMge8.roa
Signing time: Sat 01 Jan 2022 05:58:21 +0000
ROA not before: Sat 01 Jan 2022 05:58:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21734
IP address blocks: 83.126.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325402330 (0x13653eda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 05:58:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6b0f77a5750acdfcda6e7ade9c6186211a0c81ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:b2:33:1d:8a:24:0a:d9:95:79:55:72:ae:
04:31:a5:76:98:dd:33:96:59:6b:d7:78:78:5a:38:
44:42:ab:9d:ed:ee:01:50:be:95:3a:ba:ba:49:31:
14:3b:3b:fd:91:fe:21:ca:8f:53:ba:0a:ae:89:0a:
46:8d:0b:4f:83:46:b0:4b:4e:d9:f6:2b:39:db:83:
a4:f1:e9:c1:2e:0b:91:42:1a:3e:b4:98:f7:1d:c9:
f6:22:f3:de:c4:2d:53:1a:4b:56:43:0b:44:19:e4:
7c:bf:a7:de:86:3e:92:bb:1e:d7:94:00:bf:f3:a1:
a8:79:50:3a:6f:e6:ea:af:74:2c:4f:3b:08:e7:9a:
aa:c8:c9:cc:b3:9f:a7:ff:e0:23:45:e5:bf:8c:b0:
ca:13:69:a5:e4:30:5e:90:12:fa:55:ba:0f:21:c6:
8a:75:de:d9:af:15:1f:54:c2:dc:ea:8b:a7:4f:a9:
6a:db:ea:88:73:98:46:67:23:d6:a1:da:be:3e:c3:
82:a3:14:a7:29:c1:d3:44:1c:8b:7c:e2:53:b8:a8:
ed:64:dd:0a:96:14:10:a1:ce:e6:e9:d0:a9:15:2e:
a6:94:05:e4:cb:48:a5:d0:76:82:60:9f:06:26:57:
3d:6d:a1:74:f2:52:ac:79:95:49:b9:3c:cf:a1:a4:
5e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0F:77:A5:75:0A:CD:FC:DA:6E:7A:DE:9C:61:86:21:1A:0C:81:EF
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/aw93pXUKzfzabnrenGGGIRoMge8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.126.50.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:47:84:46:c3:58:73:6a:43:64:55:a5:59:aa:8a:06:11:ce:
6f:39:2b:be:06:57:44:a0:bc:b9:8d:2a:f8:d1:86:a2:a7:c5:
ff:b4:dc:a3:2f:a9:fd:36:88:70:3b:bd:40:4b:15:01:d5:26:
f1:06:ad:f0:3e:f5:a5:a2:99:52:cb:64:01:bb:b5:9d:5c:3f:
35:9d:04:2d:83:c4:7c:e3:69:08:86:20:6b:01:2d:c1:a7:bb:
c1:94:f6:b5:84:19:dc:8e:02:37:a1:4a:90:99:aa:c6:8d:0c:
cf:bb:fb:9e:2b:c3:ab:ff:ed:ea:39:ef:38:72:e7:09:69:7d:
5d:36:68:ca:9e:a1:18:97:68:e8:90:85:6e:e3:35:13:0e:1a:
6e:ea:e5:90:39:87:96:5b:a2:5f:a2:be:c1:bc:9e:9a:c9:fa:
ee:3b:42:7f:1d:91:4c:a9:ba:ad:9c:94:19:a5:5e:d1:ca:19:
02:5b:34:45:5d:8c:5a:7f:73:0c:d8:77:89:aa:2e:21:cb:57:
59:ce:4e:60:03:62:e4:21:09:a5:72:c0:bb:9f:64:72:f8:4e:
a7:05:77:58:fd:d8:4a:d5:e3:81:82:cc:a8:a5:99:33:67:d1:
4b:64:25:31:1f:29:45:1a:2f:23:3a:1a:64:7f:04:bd:58:c0:
76:c8:fd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:38 2023 by rpki-client on console-fra.rpki-client.org