Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/0G7WoK9nQdLv7HHWoFTZ-o_KQtY.roa
File: 0G7WoK9nQdLv7HHWoFTZ-o_KQtY.roa (raw, json)
Hash identifier: huP18s/s44AeagBhmZKvjHMPQXYPiTxDaqduGIc6btg=
Subject key identifier: D0:6E:D6:A0:AF:67:41:D2:EF:EC:71:D6:A0:54:D9:FA:8F:CA:42:D6
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 049CDF75
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/0G7WoK9nQdLv7HHWoFTZ-o_KQtY.roa
Signing time: Thu 02 Jun 2022 04:29:21 +0000
ROA not before: Thu 02 Jun 2022 04:29:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 83.147.44.0/22 maxlen: 24
83.147.40.0/22 maxlen: 24
83.147.60.0/23 maxlen: 24
83.147.8.0/21 maxlen: 24
83.147.16.0/20 maxlen: 24
83.147.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77389685 (0x49cdf75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jun 2 04:29:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d06ed6a0af6741d2efec71d6a054d9fa8fca42d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:07:bb:6e:3d:d1:18:21:11:ca:b9:8c:96:4f:
1b:c0:94:6c:6d:be:1c:93:21:59:73:b7:33:7a:df:
77:0f:be:af:34:b0:f9:ee:b1:da:5c:35:d1:75:6a:
33:df:52:a8:09:8e:85:e4:6a:3a:24:26:04:57:43:
71:74:1a:63:86:fb:bc:9b:94:55:9e:30:5c:1c:d5:
2f:14:16:a6:45:a9:30:33:65:10:e7:80:ef:4c:82:
c2:4d:c6:c4:97:0b:5b:dc:c0:6b:e1:e7:62:6f:3e:
48:32:da:df:54:40:b6:c5:e9:b8:9d:8d:d3:25:3a:
f6:53:69:77:a2:24:ef:fb:a5:f2:fa:f8:fb:34:39:
e1:68:be:24:95:63:32:ee:69:6d:11:df:4c:0c:76:
fd:9c:b2:20:4f:bf:d6:7c:8a:f6:4b:f1:42:39:b5:
60:73:44:2a:cd:04:08:e7:95:64:bf:34:47:13:82:
7e:3d:80:4f:7e:30:cc:69:1b:a1:24:d2:ac:84:21:
28:02:de:af:6f:dd:d8:ce:b1:b2:73:72:8f:0e:fc:
89:12:26:30:26:cb:7e:2e:fd:8d:3d:ce:b6:3d:e2:
44:bb:61:0f:19:bc:ab:3f:37:85:ad:ef:a9:f9:6b:
83:e0:98:9f:86:09:c4:67:21:8e:d8:86:ea:b8:33:
20:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6E:D6:A0:AF:67:41:D2:EF:EC:71:D6:A0:54:D9:FA:8F:CA:42:D6
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/0G7WoK9nQdLv7HHWoFTZ-o_KQtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.8.0-83.147.35.255
83.147.40.0/21
83.147.60.0/23
Signature Algorithm: sha256WithRSAEncryption
00:a0:fc:8d:fc:6e:86:6c:de:52:7d:dc:cf:1e:a4:f2:a9:d1:
31:74:99:94:fa:41:37:2d:74:e1:41:42:ad:f4:a7:2e:f1:42:
fe:78:6e:8a:e6:46:4a:4e:a5:ba:74:fb:c6:9e:fa:55:bb:7d:
06:d1:6b:81:7c:fe:24:d9:dd:59:f2:f1:b2:8a:fe:11:74:89:
12:1f:0d:01:d4:ac:75:85:15:c6:72:74:61:b7:d9:36:3b:7d:
c9:98:26:4e:29:2b:0e:cc:ce:e0:7a:10:d9:3b:b0:ca:0f:c7:
3d:78:11:41:e6:90:1b:a2:5d:26:ca:f6:ea:f3:04:ee:d0:a9:
9b:f8:d1:9a:f0:ad:ce:47:ac:6f:b5:67:93:59:58:40:c6:9a:
a2:ba:1f:51:d6:d6:7d:e7:bf:39:c8:6d:a0:e0:4a:f0:e8:c3:
44:f1:4b:ea:69:e7:e0:86:b6:99:98:be:3d:6e:a3:8e:f2:0a:
6f:1a:4e:4d:f2:11:bb:76:1a:c1:be:7b:70:93:2a:20:9f:d1:
5d:6a:ce:43:1f:1a:66:da:2c:25:ef:2a:c0:ff:03:00:02:67:
78:25:f4:7f:a8:9b:81:9c:47:fb:b6:80:c2:a5:d7:22:cf:81:
99:e9:ff:c4:ac:d7:f1:0c:13:7e:49:c1:43:51:f3:07:b6:fd:
9e:5f:1c:e0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIEBJzfdTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MTkzZmZlOWRiMzc2MjZiMTNmODVkN2NjNDU3YWFkNWMxZjMwYzlmMB4XDTIyMDYw
MjA0MjkyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDA2ZWQ2YTBhZjY3
NDFkMmVmZWM3MWQ2YTA1NGQ5ZmE4ZmNhNDJkNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJoHu2490RghEcq5jJZPG8CUbG2+HJMhWXO3M3rfdw++rzSw
+e6x2lw10XVqM99SqAmOheRqOiQmBFdDcXQaY4b7vJuUVZ4wXBzVLxQWpkWpMDNl
EOeA70yCwk3GxJcLW9zAa+HnYm8+SDLa31RAtsXpuJ2N0yU69lNpd6Ik7/ul8vr4
+zQ54Wi+JJVjMu5pbRHfTAx2/ZyyIE+/1nyK9kvxQjm1YHNEKs0ECOeVZL80RxOC
fj2AT34wzGkboSTSrIQhKALer2/d2M6xsnNyjw78iRImMCbLfi79jT3Otj3iRLth
Dxm8qz83ha3vqflrg+CYn4YJxGchjtiG6rgzIKUCAwEAAaOCAh0wggIZMB0GA1Ud
DgQWBBTQbtagr2dB0u/scdagVNn6j8pC1jAfBgNVHSMEGDAWgBSBk//p2zdiaxP4
XXzEV6rVwfMMnzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2daUF82ZHMzWW1zVC1GMTh4RmVxMWNIekRKOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTcvNzZiYzFlLWI2ZjQtNDA4YS1iYjg5LTA4ZDEyNzBjMmU3MS8x
LzBHN1dvSzluUWRMdjdISFdvRlRaLW9fS1F0WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcv
NzZiYzFlLWI2ZjQtNDA4YS1iYjg5LTA4ZDEyNzBjMmU3MS8xL2daUF82ZHMzWW1z
VC1GMTh4RmVxMWNIekRKOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAz
BggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGjAMAwQDU5MIAwQCU5MgAwQDU5MoAwQB
U5M8MA0GCSqGSIb3DQEBCwUAA4IBAQAAoPyN/G6GbN5SfdzPHqTyqdExdJmU+kE3
LXThQUKt9Kcu8UL+eG6K5kZKTqW6dPvGnvpVu30G0WuBfP4k2d1Z8vGyiv4RdIkS
Hw0B1Kx1hRXGcnRht9k2O33JmCZOKSsOzM7gehDZO7DKD8c9eBFB5pAbol0myvbq
8wTu0Kmb+NGa8K3OR6xvtWeTWVhAxpqiuh9R1tZ95785yG2g4Erw6MNE8Uvqaefg
hraZmL49bqOO8gpvGk5N8hG7dhrBvntwkyogn9Fdas5DHxpm2iwl7yrA/wMAAmd4
JfR/qJuBnEf7toDCpdciz4GZ6f/ErNfxDBN+ScFDUfMHtv2eXxzg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org