Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/_lYgRN-boDinsOZUvnj1DRhnHrc.roa
File: _lYgRN-boDinsOZUvnj1DRhnHrc.roa (raw, json)
Hash identifier: n4AMojsmM21rayWDPhlbEi1zh1Uoo8SWdUboq4Fm0eM=
Subject key identifier: FE:56:20:44:DF:9B:A0:38:A7:B0:E6:54:BE:78:F5:0D:18:67:1E:B7
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 07F2E557
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/_lYgRN-boDinsOZUvnj1DRhnHrc.roa
Signing time: Sat 01 Jan 2022 03:02:04 +0000
ROA not before: Sat 01 Jan 2022 03:02:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28753
IP address blocks: 83.147.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133358935 (0x7f2e557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 1 03:02:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe562044df9ba038a7b0e654be78f50d18671eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:7b:00:f7:75:d0:c7:ab:c2:ad:d2:21:25:
a1:27:9f:52:83:34:3c:62:ad:38:4b:16:99:d4:4a:
17:ba:81:4e:6c:95:eb:1d:53:1e:6a:ce:f0:57:24:
72:96:c8:ac:f8:7c:93:d4:a3:9f:59:5b:cd:f8:a8:
ad:ba:8c:71:3b:a1:c2:72:78:2d:17:27:b8:a6:5b:
fa:63:0e:c6:a8:75:fc:2a:cc:92:d6:67:05:d4:d9:
b7:da:4f:b8:aa:a7:81:ad:45:b2:06:91:33:20:6c:
ab:51:c6:2c:54:f4:dd:eb:5c:c4:45:1f:ec:05:a8:
d9:58:73:a8:64:1e:43:1e:e4:b1:ed:df:9a:d1:3d:
f3:e9:2b:9a:7a:85:83:32:54:35:46:ee:9c:a8:e3:
e8:91:95:8a:59:cd:bf:da:61:82:e5:0f:55:d8:09:
4f:10:68:78:b2:d1:63:b6:1f:c9:a1:63:41:f4:0e:
13:c8:c3:c0:ac:9a:30:c9:82:a7:9d:d7:ee:bc:61:
81:89:be:cb:c0:9c:54:a4:34:98:26:05:a3:ab:d3:
eb:d1:34:1f:95:93:dd:c7:79:0d:91:7c:a0:5a:99:
88:82:70:ef:75:9e:45:1d:01:8c:f2:0b:b6:1e:6c:
b1:71:c9:3b:95:4e:fb:23:87:64:60:6b:ff:62:1c:
72:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:56:20:44:DF:9B:A0:38:A7:B0:E6:54:BE:78:F5:0D:18:67:1E:B7
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/_lYgRN-boDinsOZUvnj1DRhnHrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.216.0/24
Signature Algorithm: sha256WithRSAEncryption
02:12:2d:ef:99:8c:ba:a6:50:37:30:84:62:de:49:d5:32:1f:
4d:75:3b:78:e7:82:53:b6:c7:c4:ae:12:2d:0c:6c:64:a5:e5:
8d:50:8e:f8:a2:98:c2:63:45:a5:27:84:73:cf:76:1d:be:5e:
49:86:22:d2:14:de:95:58:4c:9a:83:13:37:dd:f1:e2:18:ee:
43:e9:aa:84:5d:67:82:9a:f8:98:9b:2e:e4:2e:3c:a9:b2:de:
d9:35:90:ce:9d:09:c7:fc:33:0a:5f:57:97:b5:7a:2a:9e:1e:
b7:a8:b2:6a:e2:0a:40:2f:a9:90:2d:82:98:be:68:33:d7:8c:
40:db:f7:ad:f2:df:b5:4f:1b:aa:64:d1:23:c5:a7:0f:00:e6:
3c:c7:1b:25:62:5a:44:89:d9:73:7e:df:4f:5c:35:a8:2d:8f:
fa:e8:20:98:1d:0c:fd:e1:01:7d:9f:71:df:68:82:ed:9c:3c:
f0:4e:01:e2:1a:36:54:ff:54:38:3c:44:7c:b0:ba:7a:44:22:
45:79:11:8f:3f:b0:ef:bb:f7:f6:cf:90:cf:f4:a1:4d:77:5d:
22:df:89:18:8f:b4:a1:8d:4b:4c:3e:27:6c:8a:7c:3c:dd:52:
ec:68:b1:ab:f8:4d:b5:65:7a:cd:98:cd:cd:79:02:61:d9:b4:
7b:86:9f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org