Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/PUuVY8iXaY-b8GIjViWsVt6qTuo.roa
File: PUuVY8iXaY-b8GIjViWsVt6qTuo.roa (raw, json)
Hash identifier: EJ7v7EF1nw2aQqF7SFMUGWoMwpE45YPn5fZOM6QaSGw=
Subject key identifier: 3D:4B:95:63:C8:97:69:8F:9B:F0:62:23:56:25:AC:56:DE:AA:4E:EA
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018439D6D16B4402658BD0328352ADFD79AD
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/PUuVY8iXaY-b8GIjViWsVt6qTuo.roa
Signing time: Wed 02 Nov 2022 19:34:50 +0000
ROA not before: Wed 02 Nov 2022 19:34:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56876
IP address blocks: 83.147.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:39:d6:d1:6b:44:02:65:8b:d0:32:83:52:ad:fd:79:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Nov 2 19:34:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d4b9563c897698f9bf062235625ac56deaa4eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:38:c0:70:18:11:ab:7e:3e:5a:53:3f:eb:06:
18:e6:51:fb:21:db:5d:a4:54:4b:a1:84:64:0d:f0:
16:e3:7e:f0:ae:a8:7e:5b:3d:a4:c4:19:0d:7f:39:
37:e2:2e:f7:34:ba:66:13:8e:60:37:6d:43:b8:0e:
13:12:7c:3a:b3:a7:7c:ff:2a:6a:22:0f:e8:8f:60:
1a:50:d5:d3:ee:e5:85:a1:9f:3b:1c:d2:ad:ae:27:
9f:6e:9b:30:81:55:57:83:c3:b4:b6:0b:21:ba:34:
fa:27:c7:98:c9:b9:ff:57:46:45:12:1f:3e:78:a1:
09:46:94:11:3b:38:c1:3e:9d:29:4e:f1:23:4c:29:
4a:ab:13:13:83:4c:20:a5:e4:1a:71:6e:4e:d6:54:
17:2a:26:1c:15:86:e8:63:b3:5f:78:8b:6f:de:2f:
48:a6:af:ac:bb:b1:96:c7:db:d3:3a:fb:a6:4b:46:
04:eb:96:a4:5c:18:fb:67:a5:aa:99:79:5e:a4:4e:
75:bb:9d:04:09:bf:f6:d4:d0:48:5f:ea:93:85:d2:
fa:00:b8:3e:15:f0:2a:60:2a:a7:12:01:97:e7:f8:
73:b6:0a:68:e9:22:a1:f9:02:16:a7:02:53:90:4d:
28:67:50:15:25:be:99:83:56:7e:19:2d:1a:f4:06:
81:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4B:95:63:C8:97:69:8F:9B:F0:62:23:56:25:AC:56:DE:AA:4E:EA
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/PUuVY8iXaY-b8GIjViWsVt6qTuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.212.0/22
Signature Algorithm: sha256WithRSAEncryption
81:a5:21:94:16:26:34:f3:29:e4:dd:30:86:f3:1c:eb:af:e9:
05:68:6d:3a:a9:e0:81:eb:75:d4:54:74:d9:5c:ea:bb:4d:52:
9b:3d:79:ac:fc:dd:f8:de:9c:41:d0:a6:91:27:d6:13:b6:3c:
b2:7c:2f:e3:06:f4:05:a7:7e:fb:8e:bb:f5:22:09:81:92:8b:
44:85:56:13:69:bc:70:d3:9a:a6:91:c1:31:9a:2b:18:f8:54:
2c:ee:f0:0d:38:1f:08:c7:bb:a0:bc:d7:e9:e3:e8:ea:c7:70:
86:26:3d:c5:a2:05:63:27:c4:e9:2c:55:57:1d:35:2d:71:26:
1e:f8:dd:a3:66:b6:e8:61:fa:03:9b:81:1f:0a:c5:38:76:89:
22:8c:ea:32:6c:62:4d:69:07:7b:f2:a7:e9:14:2e:5d:c7:da:
8d:b4:f9:55:f3:43:d4:f4:ee:d9:81:71:e7:9a:70:4a:11:7d:
8f:44:70:b1:0d:39:d9:51:44:de:aa:94:2d:87:01:28:a7:4b:
e0:23:ce:d7:0f:61:36:2d:17:90:b9:54:d9:00:56:5a:c9:e7:
10:27:4a:71:af:f5:ab:87:cc:1a:1d:0f:af:22:c3:9c:bf:85:
eb:c8:e4:ac:36:2b:bd:62:00:d8:3a:26:f1:91:a8:2b:ea:a6:
1b:c2:88:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org