Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/AaJTPaGXgQt9Yi0FafXEVOk1mcQ.roa
File: AaJTPaGXgQt9Yi0FafXEVOk1mcQ.roa (raw, json)
Hash identifier: N4tIoUrspr1bvkx65btqz1SWDBpJba5uIvBywXSBgLY=
Subject key identifier: 01:A2:53:3D:A1:97:81:0B:7D:62:2D:05:69:F5:C4:54:E9:35:99:C4
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0183D0BC2E3E63BA17B41163F84A36A3D765
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/AaJTPaGXgQt9Yi0FafXEVOk1mcQ.roa
Signing time: Thu 13 Oct 2022 09:45:36 +0000
ROA not before: Thu 13 Oct 2022 09:45:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 83.147.232.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:bc:2e:3e:63:ba:17:b4:11:63:f8:4a:36:a3:d7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 13 09:45:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01a2533da197810b7d622d0569f5c454e93599c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:98:8f:57:24:4f:6d:de:dd:09:37:89:ab:55:
92:00:b5:74:46:5d:eb:03:77:5e:f0:f2:ec:87:9d:
3d:39:d0:ef:90:81:a9:17:f0:16:11:7f:6e:33:41:
4c:3d:f8:7b:05:75:a7:db:12:6c:e0:66:15:41:39:
b2:8e:63:27:09:36:19:73:61:e8:28:0a:b5:49:1e:
39:b0:92:b3:1d:65:54:91:3b:43:1c:45:d4:cc:5f:
dc:fc:48:48:7f:94:12:9f:a5:8b:90:b9:8f:85:09:
e7:18:fe:48:68:a5:da:83:8b:8d:b9:bd:c7:30:54:
01:a9:03:cc:1e:c7:d1:4e:4f:24:a8:5e:7a:4d:66:
b5:a5:91:42:d1:6a:d0:5d:22:41:0e:68:ba:4e:fb:
9f:2f:3a:d5:fa:c6:51:d7:3c:03:f0:43:6b:b7:83:
4c:b9:38:a8:46:ab:90:31:08:db:9b:c8:df:dd:fd:
c8:52:b4:f5:0a:5b:33:a6:7b:93:87:9a:6e:9c:87:
52:2b:d5:8c:88:a4:89:d1:80:f3:f8:7f:39:7b:64:
09:74:bc:fd:de:6c:ac:a6:18:dc:c9:a1:b5:a0:7e:
2e:cf:4f:a2:fb:a5:bf:be:e3:b0:88:c9:8b:c6:c1:
36:e1:a3:16:ba:f8:40:07:88:0c:2c:b2:78:31:7a:
29:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A2:53:3D:A1:97:81:0B:7D:62:2D:05:69:F5:C4:54:E9:35:99:C4
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/AaJTPaGXgQt9Yi0FafXEVOk1mcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.232.0/22
83.147.252.0/22
Signature Algorithm: sha256WithRSAEncryption
84:c1:64:30:20:17:20:f7:44:1b:df:c5:d3:90:0f:1b:74:e4:
f1:dd:dd:74:aa:f9:35:e8:10:bc:a4:75:98:e4:63:6c:32:de:
e1:10:c6:6a:a8:a3:c5:94:4d:7a:0c:8e:06:00:a8:23:cc:aa:
6f:af:78:dd:e6:a3:69:45:8f:e3:aa:1d:40:8c:10:2a:04:b7:
1f:30:4a:c8:c2:0c:49:99:40:08:4b:2c:08:87:3f:ca:f6:9d:
9e:7e:50:3e:83:05:80:b5:44:b2:e4:a6:0c:6d:0b:36:00:fa:
60:22:f8:82:41:47:e8:59:ec:1f:49:0d:fa:5f:d6:35:e2:37:
30:ac:a8:ce:ce:b9:5a:0e:1f:03:37:c6:3a:0e:58:55:f2:c7:
73:e8:2d:32:76:92:54:e8:22:f3:22:69:e6:6b:b9:31:8e:88:
e0:9d:6a:ea:90:56:04:b2:42:0f:d5:f9:b8:ac:e2:d7:bc:40:
87:22:20:ac:60:60:0b:40:53:1d:1a:9a:8f:cc:f1:45:4a:62:
d4:fc:23:fc:cb:50:e0:48:b3:60:c0:67:79:8e:99:de:8d:d5:
f6:8a:f2:0e:82:97:59:8b:23:b3:25:55:47:60:c0:09:52:f9:
9e:a1:46:bc:7f:fe:da:fc:38:eb:11:6c:f5:93:69:c1:f3:3e:
31:25:62:ff
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYPQvC4+Y7oXtBFj+Eo2o9dlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjIxMDEzMDk0NTM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWEyNTMzZGExOTc4MTBiN2Q2MjJkMDU2OWY1YzQ1NGU5MzU5OWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJiPVyRPbd7dCTeJq1WSALV0Rl3r
A3de8PLsh509OdDvkIGpF/AWEX9uM0FMPfh7BXWn2xJs4GYVQTmyjmMnCTYZc2Ho
KAq1SR45sJKzHWVUkTtDHEXUzF/c/EhIf5QSn6WLkLmPhQnnGP5IaKXag4uNub3H
MFQBqQPMHsfRTk8kqF56TWa1pZFC0WrQXSJBDmi6TvufLzrV+sZR1zwD8ENrt4NM
uTioRquQMQjbm8jf3f3IUrT1ClszpnuTh5punIdSK9WMiKSJ0YDz+H85e2QJdLz9
3mysphjcyaG1oH4uz0+i+6W/vuOwiMmLxsE24aMWuvhAB4gMLLJ4MXop4QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAGiUz2hl4ELfWItBWn1xFTpNZnEMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvQWFKVFBhR1hnUXQ5WWkwRmFmWEVWT2sxbWNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCU5PoAwQC
U5P8MA0GCSqGSIb3DQEBCwUAA4IBAQCEwWQwIBcg90Qb38XTkA8bdOTx3d10qvk1
6BC8pHWY5GNsMt7hEMZqqKPFlE16DI4GAKgjzKpvr3jd5qNpRY/jqh1AjBAqBLcf
MErIwgxJmUAISywIhz/K9p2eflA+gwWAtUSy5KYMbQs2APpgIviCQUfoWewfSQ36
X9Y14jcwrKjOzrlaDh8DN8Y6DlhV8sdz6C0ydpJU6CLzImnma7kxjojgnWrqkFYE
skIP1fm4rOLXvECHIiCsYGALQFMdGpqPzPFFSmLU/CP8y1DgSLNgwGd5jpnejdX2
ivIOgpdZiyOzJVVHYMAJUvmeoUa8f/7a/DjrEWz1k2nB8z4xJWL/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:18 2024 by rpki-client on console-ams.rpki-client.org