Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/WREnM2gS6VXr76vH3ENfGljHxlc.roa
File: WREnM2gS6VXr76vH3ENfGljHxlc.roa (raw, json)
Hash identifier: J8AJCtiyME3I08OGhpxLfGook8B2f4DEQ6u8uJgclfE=
Subject key identifier: 59:11:27:33:68:12:E9:55:EB:EF:AB:C7:DC:43:5F:1A:58:C7:C6:57
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01831302A455E7E4169D024BC35367CC6AB7
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/WREnM2gS6VXr76vH3ENfGljHxlc.roa
Signing time: Tue 06 Sep 2022 13:34:43 +0000
ROA not before: Tue 06 Sep 2022 13:34:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 83.147.212.0/22 maxlen: 24
83.147.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:13:02:a4:55:e7:e4:16:9d:02:4b:c3:53:67:cc:6a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Sep 6 13:34:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=591127336812e955ebefabc7dc435f1a58c7c657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:d5:a6:7b:35:f0:f1:e4:f4:45:4e:8e:30:
dd:88:5a:ba:d5:a5:78:54:82:d4:d1:3f:5a:bd:65:
5a:21:e7:24:61:d9:77:ef:a4:bc:18:0b:b8:3e:57:
e1:82:58:45:15:ad:85:ae:3e:c1:95:ca:9c:99:29:
4c:6b:a3:40:a2:df:f3:9b:ef:7d:15:4f:7f:76:bb:
1b:74:00:bb:d3:c0:20:90:02:2f:4a:8b:0c:61:7b:
10:c8:c9:ee:68:cb:e4:98:21:28:b7:21:6e:3e:9a:
75:73:8d:36:a2:4d:db:bf:9e:69:71:85:5e:68:64:
1e:87:f2:99:33:cd:cb:47:a4:8e:d9:46:84:63:ca:
90:5c:00:5f:5c:6c:83:c9:89:ab:c5:80:03:cc:f7:
ec:18:b7:97:0f:61:53:b5:c1:47:f5:e5:00:b8:56:
5e:fb:a3:75:a1:dd:f4:07:bd:9a:e6:05:2b:41:50:
15:66:ac:91:22:32:6e:ec:fa:9c:3a:c3:4a:29:eb:
da:31:ef:f8:3c:46:54:64:e3:ce:a0:28:d7:30:3a:
43:b8:08:f1:be:83:2a:21:ee:e6:9a:52:fd:34:1c:
7f:4f:91:5a:d6:b4:1f:66:65:b4:65:76:33:59:e0:
e3:f2:73:ea:e0:63:35:ad:46:82:69:db:6c:93:45:
7e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:11:27:33:68:12:E9:55:EB:EF:AB:C7:DC:43:5F:1A:58:C7:C6:57
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/WREnM2gS6VXr76vH3ENfGljHxlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.212.0/22
83.147.223.0/24
Signature Algorithm: sha256WithRSAEncryption
02:65:92:ce:dc:db:22:84:78:32:59:bf:f3:95:23:83:af:4f:
70:cc:1c:90:b4:47:09:ae:41:ee:8e:03:69:2b:46:2c:de:20:
69:4e:31:c1:23:96:4d:e2:97:86:04:57:f7:86:db:98:71:f9:
53:af:7e:c0:08:93:82:3c:e0:73:2e:d4:ba:f6:db:32:1f:be:
49:e2:9e:8e:22:3b:4e:5c:e0:21:99:af:6b:8e:b1:08:23:34:
ac:f2:a4:cc:e0:8a:c4:a2:6e:1b:0f:dc:6d:22:03:5e:a5:d4:
e7:20:b6:ff:47:b2:3e:5c:56:b9:77:4b:fe:61:41:f7:b6:77:
a2:0d:5c:fc:43:d8:98:00:76:bb:00:f2:65:d7:30:dc:d0:55:
d9:f1:1c:86:25:3f:62:7c:bf:a9:07:b1:b7:a9:77:b4:6a:c0:
a1:48:15:09:28:1a:08:b6:0b:5c:e4:dd:be:1f:4a:ed:9e:c2:
fb:d9:44:3c:80:dd:47:80:f6:5a:90:35:82:ba:94:34:b4:fb:
a2:90:e7:e9:3f:0f:1e:d2:a2:c9:f2:80:fb:4f:eb:56:9b:03:
9e:3e:a5:9e:43:ca:bd:87:54:3c:0e:94:ec:19:6e:e6:51:b2:
01:41:4e:17:78:56:82:93:f9:e9:d5:ba:7a:df:b3:41:95:1a:
d6:8d:a6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org