Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/6Bj2HQQtAJNJvyVo2_1ouxXb6mc.roa
File: 6Bj2HQQtAJNJvyVo2_1ouxXb6mc.roa (raw, json)
Hash identifier: JhgrFDgkj+O7oNobwn80eR9Ogddz+qRBW3a3i2dmOX0=
Subject key identifier: E8:18:F6:1D:04:2D:00:93:49:BF:25:68:DB:FD:68:BB:15:DB:EA:67
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01824F0943403A99A192506563F2AC961C35
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/6Bj2HQQtAJNJvyVo2_1ouxXb6mc.roa
Signing time: Sat 30 Jul 2022 12:16:23 +0000
ROA not before: Sat 30 Jul 2022 12:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43043
IP address blocks: 83.137.154.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4f:09:43:40:3a:99:a1:92:50:65:63:f2:ac:96:1c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 30 12:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e818f61d042d009349bf2568dbfd68bb15dbea67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:90:ac:44:e0:60:11:b5:c6:6d:b9:5c:b4:
f4:8d:9b:bf:e8:21:06:70:f2:20:da:b7:b3:d8:d8:
1f:32:83:1a:20:ab:72:63:4a:c7:86:52:d4:38:a2:
48:13:69:f5:64:92:c1:7c:83:f9:66:e7:c3:1d:3c:
4d:41:8d:65:8f:87:c3:9a:09:d1:3d:58:4c:9a:a1:
ab:72:53:59:fa:5b:54:5a:cc:93:06:f5:df:6b:3c:
8f:29:eb:41:a3:8c:a0:fa:f5:69:39:3f:51:e3:36:
02:f8:99:57:7f:12:36:46:ce:8a:a2:c1:21:61:04:
bc:17:0e:0d:44:7a:7a:0c:0b:a2:d3:70:98:9b:a1:
c7:25:d3:e4:63:95:90:d5:ad:9a:3c:7a:2e:d9:29:
57:fa:c6:ca:23:b6:ba:f1:48:ad:2a:a1:a9:5c:4d:
e3:83:1e:e5:c1:30:ba:1f:37:cc:f4:a7:f8:cd:38:
ed:74:27:09:ce:c3:41:b3:cd:2e:f4:b4:91:9a:12:
16:f8:3f:d6:9a:52:fe:ec:7e:85:0e:3b:03:36:c5:
9b:b6:d5:de:fe:cb:44:a4:42:29:26:1f:12:88:56:
8d:62:c0:24:61:d0:3c:80:64:1c:dc:6e:17:f8:b9:
16:79:04:79:af:66:d4:73:dc:f9:c2:58:93:38:c5:
51:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:18:F6:1D:04:2D:00:93:49:BF:25:68:DB:FD:68:BB:15:DB:EA:67
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/6Bj2HQQtAJNJvyVo2_1ouxXb6mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.154.0/23
Signature Algorithm: sha256WithRSAEncryption
47:ff:74:f5:30:4c:9f:3e:15:ed:16:2d:ce:c8:84:da:9a:1a:
c9:d9:96:eb:ee:7a:9b:d3:f0:b8:1d:a6:ba:40:cd:33:34:7a:
6a:f7:52:84:c0:af:eb:95:2f:29:fe:9b:5c:de:c2:45:f6:b5:
d0:39:fc:49:c1:4b:cb:38:f1:23:18:e7:40:2c:a7:80:b5:0b:
79:91:31:82:50:8d:6a:02:ac:ae:f5:57:d2:36:2d:28:fd:89:
96:05:c8:4b:ea:eb:cc:e8:9b:72:a2:62:84:e4:5f:19:d5:bc:
21:e1:57:1e:6d:c6:2e:37:41:76:dd:25:e0:d1:18:2f:18:fb:
c7:17:1d:43:bb:cb:b1:a7:72:31:21:f4:71:ba:91:d5:c1:1b:
a5:34:b5:d7:03:3c:91:25:73:19:3a:57:77:d8:98:3f:20:4d:
c5:96:f0:e5:5c:e9:ee:65:c5:11:f9:2f:bb:b0:3f:f1:f8:42:
46:d2:5d:ab:d8:1d:2c:db:ef:3d:c1:fd:de:1c:3a:bc:3c:b8:
8b:1b:7c:9f:8e:1b:9b:7b:a4:bd:7f:b9:71:36:5d:58:5c:b5:
01:3b:b6:31:92:99:b5:e7:3c:8e:b8:6e:aa:51:c2:7d:3f:91:
95:7e:b6:74:a7:2f:ff:33:c0:63:a8:a9:53:93:01:9c:95:4a:
82:cd:fa:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:00 2023 by rpki-client on console-fra.rpki-client.org