Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/n_K-MKd013cN2RFIsZbrK3s1WG0.roa
File: n_K-MKd013cN2RFIsZbrK3s1WG0.roa (raw, json)
Hash identifier: HkpN+7SFl3cQTxwpsx4qcbR5nOxynQj9lhkD5giPQik=
Subject key identifier: 9F:F2:BE:30:A7:74:D7:77:0D:D9:11:48:B1:96:EB:2B:7B:35:58:6D
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01853FE79BC9B725533E7373DE4137692ECD
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/n_K-MKd013cN2RFIsZbrK3s1WG0.roa
Signing time: Fri 23 Dec 2022 16:53:41 +0000
ROA not before: Fri 23 Dec 2022 16:53:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43043
IP address blocks: 83.147.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3f:e7:9b:c9:b7:25:53:3e:73:73:de:41:37:69:2e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Dec 23 16:53:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ff2be30a774d7770dd91148b196eb2b7b35586d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2a:fa:cd:86:45:1a:7b:82:47:65:fc:7e:63:
dc:55:34:80:63:d1:42:2d:d6:ef:80:51:a0:60:f6:
a0:0a:a6:9e:5d:67:0c:45:83:b4:4d:5c:18:62:a3:
e9:91:95:c6:60:67:16:6d:f0:e8:e2:14:1c:69:6e:
2e:86:27:d6:70:56:93:2f:7d:09:f9:4f:b4:72:33:
4e:f7:64:f3:76:ce:0f:95:72:91:7b:6a:05:fc:cb:
4a:c9:63:48:68:22:ff:33:7a:56:f9:c2:45:fe:ab:
a4:1e:10:1c:12:5a:dd:04:0f:f3:0e:8c:56:72:52:
db:43:23:e2:47:2e:01:37:3b:e8:67:66:4a:f9:a9:
d4:50:2d:f8:a0:40:36:c5:38:90:67:8f:74:45:d0:
e6:7d:e9:ba:2b:d8:2c:dc:74:7e:c5:4f:fb:08:70:
1e:41:a8:d5:61:e0:d2:9c:63:40:a1:71:0d:ff:b9:
fa:8c:d3:b2:59:b5:e8:77:48:c7:94:1f:45:1d:69:
f9:86:20:2f:7d:5f:a5:ef:7d:86:9e:07:6a:70:99:
db:9d:be:8b:b0:b3:e5:5a:a7:76:20:3a:7d:68:f3:
5c:8a:db:bc:dd:74:24:fd:6b:aa:67:40:3c:82:94:
a5:ab:12:29:ee:5a:b7:ae:01:af:e2:89:5e:84:1c:
ae:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F2:BE:30:A7:74:D7:77:0D:D9:11:48:B1:96:EB:2B:7B:35:58:6D
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/n_K-MKd013cN2RFIsZbrK3s1WG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.252.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:fc:56:43:a1:3b:5c:ce:42:57:13:59:4a:cc:91:4c:63:7e:
98:3f:5b:64:57:46:c9:45:be:e3:15:da:5f:65:aa:fa:8d:4f:
75:ae:68:f7:a6:d7:2b:ee:d2:58:56:79:fa:b4:56:c1:22:5b:
76:22:86:5a:2c:ab:49:52:fd:1e:de:be:7f:70:40:b9:59:47:
e6:c6:6a:c8:4e:c3:46:04:7e:eb:d0:e5:74:03:b2:c1:4c:a7:
8e:9b:fa:6e:81:22:09:ed:72:18:86:cd:26:b8:f3:88:c5:0b:
48:8a:9d:67:b6:cd:61:17:da:9f:4a:b9:6d:6a:bd:dd:ac:7f:
03:c4:67:c7:ca:f0:50:1f:86:dd:94:2a:44:35:e1:c1:c3:1c:
14:fa:ce:99:27:83:84:29:82:fa:0c:7b:e1:5f:d1:bd:17:d5:
70:d1:e7:32:4d:29:2a:3c:e6:bb:81:bc:93:56:7a:c9:fd:33:
33:55:20:82:39:eb:35:70:04:6d:bb:7a:68:82:a6:b9:50:e2:
99:1c:e8:ae:c7:0e:1b:dd:24:84:16:4f:e1:52:29:de:a5:b6:
b4:96:60:c8:5e:ee:c1:92:50:fa:90:d6:1b:38:ef:33:91:b1:
ad:29:12:38:79:13:52:f2:9f:ad:a8:96:91:96:61:7f:3b:65:
ba:15:6e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:38 2023 by rpki-client on console-ams.rpki-client.org