Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/sl7AtxLByGKP7IyZwjXUmxEYvec.roa
File: sl7AtxLByGKP7IyZwjXUmxEYvec.roa (raw, json)
Hash identifier: GHPt+hyrqG5pe8vT/bijduF+s+SzTxo198uP8s+uTXU=
Subject key identifier: B2:5E:C0:B7:12:C1:C8:62:8F:EC:8C:99:C2:35:D4:9B:11:18:BD:E7
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018264B3881F71F7062A3351917A820610C8
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/sl7AtxLByGKP7IyZwjXUmxEYvec.roa
Signing time: Wed 03 Aug 2022 17:14:23 +0000
ROA not before: Wed 03 Aug 2022 17:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 83.147.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:64:b3:88:1f:71:f7:06:2a:33:51:91:7a:82:06:10:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Aug 3 17:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b25ec0b712c1c8628fec8c99c235d49b1118bde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:51:2f:79:87:59:55:fd:d4:31:58:05:77:b2:
79:9f:75:74:29:55:92:af:fb:f6:27:9b:7e:26:85:
2f:87:c0:9d:da:a1:d5:89:ea:9e:0d:1f:28:2c:27:
ca:99:26:66:5e:11:4d:95:dc:c0:1c:22:ec:2e:76:
75:2b:1b:60:1b:07:f0:69:07:6f:44:7a:74:9b:62:
8e:8a:5c:15:e9:e3:34:8e:5e:c4:04:01:89:4c:14:
d8:10:4c:91:9f:92:c2:1f:c3:1a:92:6d:78:06:cf:
30:0e:a0:3d:bc:b1:e7:60:96:a4:ea:e4:ac:bf:5e:
f6:6e:a1:e7:36:ac:64:da:39:11:3c:f2:87:99:3d:
0f:d2:74:16:3e:b9:8e:bc:12:c0:af:be:c0:ba:93:
87:5d:94:d6:9a:a2:f0:23:5e:4e:8d:6d:13:f7:92:
44:ea:8f:66:07:2a:15:67:54:0d:1d:24:4e:d1:ca:
21:11:b6:52:f3:78:67:41:ab:e4:c3:dd:29:9e:3d:
68:6f:0a:21:11:ba:47:6b:67:f4:53:1c:61:f1:4e:
0c:1a:50:89:7e:f2:c8:df:08:6e:c6:a0:38:35:b5:
34:13:bd:3a:37:bd:25:f5:7d:67:db:42:82:a5:dd:
4d:fc:15:9f:7d:c6:59:6b:9a:84:36:88:f9:a3:2d:
86:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5E:C0:B7:12:C1:C8:62:8F:EC:8C:99:C2:35:D4:9B:11:18:BD:E7
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/sl7AtxLByGKP7IyZwjXUmxEYvec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.212.0/22
Signature Algorithm: sha256WithRSAEncryption
70:f4:df:f1:ca:64:c3:dc:89:7f:77:0d:7a:fa:4e:bf:34:d1:
49:03:54:d0:5f:0b:c3:47:1d:36:61:d3:33:7b:e0:0e:84:50:
f3:28:e7:ac:f5:62:4d:f9:09:c4:02:83:95:9d:9c:f9:36:48:
3b:55:03:8d:5f:3d:97:6e:7c:ee:fc:13:f5:db:03:48:27:6a:
ce:2c:b4:04:f0:59:f4:8f:df:47:f2:20:d7:2c:a3:33:08:16:
cb:f1:73:28:41:f9:0c:5a:dd:83:d9:a2:0e:7c:24:90:20:8a:
71:4e:fc:1f:27:b0:7e:64:20:89:16:78:f3:ef:a7:77:d3:3f:
28:f2:06:9f:fa:a1:e5:4b:47:e4:b7:e4:10:22:71:b7:b2:5a:
64:f4:dc:61:0b:53:0c:b8:3d:57:1c:48:a5:25:37:12:5d:58:
f9:7b:8e:28:1d:50:29:99:6b:5b:e1:d4:eb:d8:64:1b:27:aa:
10:aa:2d:9f:11:5a:1b:a8:d1:2b:a2:4a:b1:06:56:ec:e7:14:
a3:a2:7d:e9:02:ef:e4:ee:67:d7:3c:ed:6f:0b:0b:9d:db:8f:
d0:78:3d:03:6c:e9:ea:52:9d:f3:07:6e:a8:84:03:38:f6:b1:
0c:70:c9:16:74:c6:28:55:5c:71:7f:3d:cb:87:20:6c:a3:7d:
1c:cf:ca:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org