Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/irHbpZ2u2cmatxT3Jy_I-xqr9r8.roa
File: irHbpZ2u2cmatxT3Jy_I-xqr9r8.roa (raw, json)
Hash identifier: 5wAhrbstTmFCpWTDQ9zmWJwPxNhATN2dcQn3/toEb4M=
Subject key identifier: 8A:B1:DB:A5:9D:AE:D9:C9:9A:B7:14:F7:27:2F:C8:FB:1A:AB:F6:BF
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0183D0BC2EEC19C547C042D655EB775E194C
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/irHbpZ2u2cmatxT3Jy_I-xqr9r8.roa
Signing time: Thu 13 Oct 2022 09:45:37 +0000
ROA not before: Thu 13 Oct 2022 09:45:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16200
IP address blocks: 91.186.192.0/24 maxlen: 24
83.147.192.0/24 maxlen: 24
83.147.193.0/24 maxlen: 24
83.147.194.0/24 maxlen: 24
83.147.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:bc:2e:ec:19:c5:47:c0:42:d6:55:eb:77:5e:19:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 13 09:45:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ab1dba59daed9c99ab714f7272fc8fb1aabf6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:43:46:b3:be:eb:34:f4:77:20:6a:62:70:e5:
38:49:d3:08:23:fa:26:89:08:c6:8e:72:3a:f7:e8:
48:bd:75:6c:74:2b:79:72:29:fb:78:17:a6:b0:3f:
b3:4c:85:98:62:14:39:b5:78:b4:c7:92:2c:46:34:
01:cc:8c:9d:22:e9:4c:7e:4f:fc:e0:11:c7:28:85:
77:86:51:9d:22:7d:18:29:92:43:ea:50:dc:7b:1b:
4e:7e:90:cf:67:23:06:a3:3d:88:c0:5c:65:f2:ef:
7e:96:c8:0e:f6:44:7b:d0:bc:54:f8:85:c4:3b:78:
98:59:4c:44:27:5d:c5:01:26:4c:6f:7e:2e:29:2a:
20:de:8a:eb:91:40:02:96:40:64:78:9a:60:2b:e7:
05:18:28:70:42:50:4d:b5:c2:bd:fb:b8:85:3c:33:
f0:0d:d0:c3:c9:11:a1:ca:e6:03:ce:85:01:dc:21:
3c:2a:b3:3c:35:75:65:14:6f:66:85:6c:63:30:35:
89:70:a9:9b:d9:42:c6:f4:4b:fe:c4:3e:90:8e:80:
9a:cd:a9:89:36:dc:49:b4:b2:ba:86:c3:37:90:5b:
39:53:8f:25:37:a7:fd:49:2f:df:47:ec:44:16:58:
44:f9:1b:ad:67:e8:e0:9b:7a:72:aa:b0:21:62:7d:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B1:DB:A5:9D:AE:D9:C9:9A:B7:14:F7:27:2F:C8:FB:1A:AB:F6:BF
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/irHbpZ2u2cmatxT3Jy_I-xqr9r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.192.0-83.147.194.255
83.147.217.0/24
91.186.192.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:e7:d4:af:16:da:ec:0b:5e:0c:54:92:91:4d:94:87:77:01:
79:57:92:f0:5e:87:41:33:74:24:7c:ad:ad:27:f5:d6:65:f8:
c6:a2:7c:ae:c3:89:22:19:63:c4:bf:16:9c:e0:b7:8b:c8:47:
67:91:8b:b3:c6:e7:37:7f:a3:22:e2:93:15:8c:95:40:31:b5:
a0:17:88:81:d4:35:2e:ed:0e:63:5a:c2:15:e5:3a:c8:6c:a6:
b6:e6:c3:96:af:c7:0a:61:32:fa:2d:e8:cc:30:7e:85:f0:2c:
de:84:07:a9:d3:a4:2e:a5:6c:2a:6f:d5:d4:a9:ce:c5:f6:ea:
14:5c:26:0f:cc:de:89:9d:d9:36:f8:f6:dd:88:af:16:ac:2a:
2e:e4:b4:58:24:4a:34:89:00:68:2a:5e:80:7d:4b:68:58:c9:
a4:c7:55:c8:81:cf:f8:46:63:35:79:50:7c:8c:8f:37:d2:7b:
5d:ca:23:34:8e:bb:b4:92:ea:a2:1d:7b:d3:f2:68:9f:97:17:
6d:4a:4f:50:14:9a:73:03:d3:4e:1a:b0:39:5c:f0:b9:e4:4a:
f4:98:26:2d:91:4d:34:60:72:7b:b3:31:8c:df:4f:6f:64:30:
57:6f:98:ae:5e:a8:b4:18:d5:7d:c6:92:26:90:8f:e3:3e:4f:
20:a9:a5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:10 2024 by rpki-client on console-fra.rpki-client.org