Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/1JNHY1qplzahOgQQEtOy7c5-BZQ.roa
File: 1JNHY1qplzahOgQQEtOy7c5-BZQ.roa (raw, json)
Hash identifier: RhPzn+VDdquyOuFuZubyRd0cHni9WQChGIbFgTqtfnU=
Subject key identifier: D4:93:47:63:5A:A9:97:36:A1:3A:04:10:12:D3:B2:ED:CE:7E:05:94
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0184992173A2269AA89A61EEF59372E05962
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/1JNHY1qplzahOgQQEtOy7c5-BZQ.roa
Signing time: Mon 21 Nov 2022 07:40:17 +0000
ROA not before: Mon 21 Nov 2022 07:40:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212384
IP address blocks: 83.147.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:99:21:73:a2:26:9a:a8:9a:61:ee:f5:93:72:e0:59:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 21 07:40:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d49347635aa99736a13a041012d3b2edce7e0594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bd:70:c1:bc:c7:88:e3:b5:ae:74:fa:7b:57:
e1:c3:80:5b:9c:47:89:a4:49:51:38:0e:42:18:f9:
2f:2d:25:d0:11:ae:97:22:6a:2d:74:d5:67:af:5b:
00:c9:5f:d2:b3:99:fa:2b:42:f5:76:e1:ca:62:97:
bf:f7:c5:83:e0:89:af:fa:71:dd:75:54:3e:84:51:
9d:f6:46:1a:e6:c9:6d:a2:87:f1:33:dd:d9:68:74:
15:f3:a6:a6:47:1b:73:f4:75:0e:90:7c:86:09:4e:
6a:6d:2d:f5:00:4c:6f:20:a4:0b:43:a0:16:08:bb:
a7:0b:60:50:3d:63:cb:dd:cc:00:46:67:01:52:36:
42:1c:23:f6:0d:db:dc:8e:59:83:86:f3:1d:4b:25:
d3:94:c2:37:6e:20:89:ce:41:50:24:05:1c:6a:94:
4e:86:6c:ea:3d:4c:2d:51:6e:21:42:7c:33:2c:dc:
f2:99:1c:4e:d3:e5:73:53:68:7d:49:3a:4b:5d:27:
93:c5:e1:35:3a:7c:e9:5a:a4:22:62:7a:66:15:45:
12:7d:ea:c5:6b:18:f3:bb:9e:22:3b:15:a5:3e:4c:
cd:7f:8e:58:3e:a9:9a:e8:2a:f7:a5:c1:6b:19:c2:
d7:9c:ec:72:fb:96:bf:6b:5b:2c:7e:e3:0b:13:d2:
0f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:93:47:63:5A:A9:97:36:A1:3A:04:10:12:D3:B2:ED:CE:7E:05:94
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/1JNHY1qplzahOgQQEtOy7c5-BZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.24.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e1:ca:87:8b:38:19:6e:84:98:03:ef:45:e1:bf:15:02:b6:
db:c3:88:73:53:b5:fe:9f:f0:75:89:c3:4a:24:2d:f9:fe:86:
ca:ea:e8:6f:17:5c:3c:ba:c4:36:81:b1:f8:a7:c3:a1:97:06:
1d:ba:c3:d5:3c:d6:86:a2:cf:a7:41:e3:6d:61:bf:06:e5:02:
62:d7:04:1e:de:f7:a1:ee:fb:ed:6d:94:11:1d:af:1f:e2:56:
1a:ac:22:2f:00:b8:8a:b0:21:12:46:d3:61:70:52:d2:34:21:
b1:6e:b4:36:30:55:b0:1f:9c:90:66:48:06:3e:7c:03:75:eb:
08:74:56:74:63:36:f0:6a:b5:a7:ef:d3:e1:e2:86:81:c8:65:
fb:61:56:75:5c:de:fc:19:05:85:c8:6e:25:71:00:49:9f:b7:
dc:cc:e0:d1:02:81:da:50:38:8a:61:84:6d:ab:33:29:8f:83:
3c:4e:93:ff:9e:2b:20:34:04:73:d4:9d:bd:7f:e4:5a:68:2c:
a1:64:a1:77:40:56:93:a0:4c:7d:ae:1e:37:31:61:e9:28:aa:
d8:34:5b:7a:f4:35:de:e9:16:bc:f7:cd:fb:95:36:71:bd:9e:
c2:09:13:76:ae:97:92:e5:11:95:ac:56:c3:1a:64:c8:9a:dd:
32:83:b1:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSZIXOiJpqommHu9ZNy4FliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjIxMTIxMDc0MDE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDkzNDc2MzVhYTk5NzM2YTEzYTA0MTAxMmQzYjJlZGNlN2UwNTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb1wwbzHiOO1rnT6e1fhw4BbnEeJ
pElROA5CGPkvLSXQEa6XImotdNVnr1sAyV/Ss5n6K0L1duHKYpe/98WD4Imv+nHd
dVQ+hFGd9kYa5sltoofxM93ZaHQV86amRxtz9HUOkHyGCU5qbS31AExvIKQLQ6AW
CLunC2BQPWPL3cwARmcBUjZCHCP2DdvcjlmDhvMdSyXTlMI3biCJzkFQJAUcapRO
hmzqPUwtUW4hQnwzLNzymRxO0+VzU2h9STpLXSeTxeE1OnzpWqQiYnpmFUUSferF
axjzu54iOxWlPkzNf45YPqma6Cr3pcFrGcLXnOxy+5a/a1ssfuMLE9IPFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNSTR2NaqZc2oToEEBLTsu3OfgWUMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvMUpOSFkxcXBsemFoT2dRUUV0T3k3YzUtQlpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU5MYMA0G
CSqGSIb3DQEBCwUAA4IBAQA84cqHizgZboSYA+9F4b8VArbbw4hzU7X+n/B1icNK
JC35/obK6uhvF1w8usQ2gbH4p8OhlwYdusPVPNaGos+nQeNtYb8G5QJi1wQe3veh
7vvtbZQRHa8f4lYarCIvALiKsCESRtNhcFLSNCGxbrQ2MFWwH5yQZkgGPnwDdesI
dFZ0YzbwarWn79Ph4oaByGX7YVZ1XN78GQWFyG4lcQBJn7fczODRAoHaUDiKYYRt
qzMpj4M8TpP/nisgNARz1J29f+RaaCyhZKF3QFaToEx9rh43MWHpKKrYNFt69DXe
6Ra89837lTZxvZ7CCRN2rpeS5RGVrFbDGmTImt0yg7Gb
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:32 2023 by rpki-client on console-ams.rpki-client.org