Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/CJreyvyv6YzLzHs_ezESxNi8ojk.roa
File: CJreyvyv6YzLzHs_ezESxNi8ojk.roa (raw, json)
Hash identifier: 44lhyC+z1aHKY7gfkEfvJ8mEmKsGl2HHhOO5xmiocT0=
Subject key identifier: 08:9A:DE:CA:FC:AF:E9:8C:CB:CC:7B:3F:7B:31:12:C4:D8:BC:A2:39
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01854F4C0BB205BA1C46A666F4433DC1562F
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/CJreyvyv6YzLzHs_ezESxNi8ojk.roa
Signing time: Mon 26 Dec 2022 16:37:41 +0000
ROA not before: Mon 26 Dec 2022 16:37:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211584
IP address blocks: 83.147.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4f:4c:0b:b2:05:ba:1c:46:a6:66:f4:43:3d:c1:56:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Dec 26 16:37:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=089adecafcafe98ccbcc7b3f7b3112c4d8bca239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:44:a1:0d:4e:40:00:87:5f:78:e0:8f:a5:d3:
16:74:98:60:5f:d5:f6:b0:f8:44:3b:a0:de:92:9e:
9c:d7:47:5c:d9:7b:16:52:48:88:67:12:89:7c:77:
26:ac:90:e4:81:de:da:f9:37:c3:42:a2:cb:bf:87:
a2:da:ee:82:f0:40:27:8a:b7:ef:b1:c1:ac:88:68:
e7:c5:64:dc:c7:2d:29:ba:a7:bd:c2:0e:35:3c:90:
79:ec:3b:0c:ba:c4:dc:d8:3c:57:5b:24:ae:85:2b:
7f:e1:a0:62:f2:79:60:ef:e4:ad:42:fe:db:16:bf:
ff:63:ad:86:d3:1e:20:c9:7f:a6:0c:02:b4:45:3a:
7f:8c:73:c3:33:0c:7b:e2:a3:52:ba:ca:13:33:cc:
ad:60:d5:5f:c8:96:66:27:ba:c4:a6:a7:15:da:5e:
8e:32:94:33:ca:3a:5f:f4:d7:6b:e4:6b:cf:fd:8a:
80:fa:47:bd:56:5e:45:94:a9:8a:0c:fe:e5:cc:48:
8a:8c:af:71:86:5f:c1:52:4c:f0:8d:98:26:5b:15:
7a:bb:b0:f5:1f:09:23:16:34:64:fc:36:f8:3c:26:
45:3b:44:e4:40:d0:85:9a:22:21:68:b7:15:81:55:
69:46:f7:8b:67:be:5a:f1:bd:88:a3:4a:b6:85:e3:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9A:DE:CA:FC:AF:E9:8C:CB:CC:7B:3F:7B:31:12:C4:D8:BC:A2:39
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/CJreyvyv6YzLzHs_ezESxNi8ojk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.252.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:2a:c8:ab:4d:39:a3:fd:5d:6e:2b:8f:99:c4:52:11:ec:15:
c5:18:73:b8:00:f3:00:07:f8:e6:58:86:07:1e:9d:bc:50:4a:
8d:57:43:ea:7b:41:a5:30:0a:ad:db:1a:1f:d9:22:02:85:b0:
60:cb:17:c0:3d:99:46:99:7a:92:3b:9b:f3:85:ff:bf:46:c4:
d5:ac:1d:de:4d:e4:92:97:d1:5b:62:ee:3b:7c:b2:3b:98:2f:
d9:44:b7:74:5c:6a:ab:6d:a9:5a:e8:3b:10:49:aa:3f:8d:24:
ef:ee:0e:63:9f:cb:c6:cb:fa:04:98:66:9c:46:3a:3f:d0:19:
64:58:36:67:f0:e2:24:e8:38:76:82:fd:63:6b:c6:39:b9:e0:
f4:86:31:96:58:f4:1c:32:46:90:9e:fb:22:ad:bd:7d:79:d3:
26:05:f6:95:06:67:8d:3a:21:ab:5f:2a:37:ed:58:c7:e3:73:
2d:52:99:64:b4:d1:94:dd:f4:6e:ec:40:1b:43:d4:1a:e6:fc:
30:ec:bd:28:39:f0:b8:f3:30:9b:1b:8b:d9:93:75:d7:bd:f3:
86:87:f5:e9:4f:82:dc:f7:92:71:09:af:54:55:41:cc:a3:11:
3e:c2:6b:cc:99:52:54:6b:1a:9a:ea:47:1b:be:3d:fd:c8:35:
eb:59:e6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:18 2024 by rpki-client on console-ams.rpki-client.org