Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/42dF_YBl6DTNbh5T_fEjkDYLu2o.roa
File: 42dF_YBl6DTNbh5T_fEjkDYLu2o.roa (raw, json)
Hash identifier: E0omXoYpyZ9mxzCusRt3T+M9A12fdJKoVyQ/hk46oic=
Subject key identifier: E3:67:45:FD:80:65:E8:34:CD:6E:1E:53:FD:F1:23:90:36:0B:BB:6A
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 040B9571
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/42dF_YBl6DTNbh5T_fEjkDYLu2o.roa
Signing time: Fri 08 Apr 2022 03:56:25 +0000
ROA not before: Fri 08 Apr 2022 03:56:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 83.147.61.0/24 maxlen: 24
83.147.15.0/24 maxlen: 24
83.147.29.0/24 maxlen: 24
83.147.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67868017 (0x40b9571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Apr 8 03:56:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e36745fd8065e834cd6e1e53fdf12390360bbb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:66:f0:03:ea:79:d4:e5:51:85:97:ca:26:
ee:e3:b7:e5:07:cd:f4:e6:0a:73:13:04:6d:12:63:
ca:c6:1d:ec:73:cb:c5:f8:7a:33:d1:99:81:1b:b4:
19:66:66:5b:39:a2:25:6e:5e:22:6f:77:fd:11:bb:
01:da:c1:4b:98:8d:49:a2:69:fc:83:92:d2:9e:16:
64:09:1a:4b:73:1c:d0:68:44:e7:3d:7d:63:76:1a:
3a:f7:a3:d5:09:04:43:43:49:0a:76:b2:30:c6:9f:
3c:f4:db:7e:d6:b2:eb:72:c1:73:b3:5e:92:b8:c0:
70:4d:bc:ce:99:9a:c9:11:04:41:74:64:f9:3d:fa:
f4:3a:41:28:3c:1d:1c:5b:0c:28:69:7b:80:74:16:
4d:e7:3f:80:33:a7:bd:60:cb:0a:16:7c:ae:e9:54:
be:a6:ac:db:ad:c9:35:28:71:92:6b:4a:0a:11:50:
fe:95:94:6a:d0:19:b5:38:23:d3:5f:57:28:98:f7:
25:ff:3e:a0:b5:f4:00:fd:bf:4d:ea:38:d8:35:fb:
0e:39:f1:29:8c:4e:c4:c9:a6:22:a8:5c:64:b3:90:
62:f3:c4:b0:3b:51:77:57:cf:4a:f4:89:9f:b7:3a:
83:0b:a0:84:3a:b2:d0:ac:83:db:23:56:7c:3a:b8:
5b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:67:45:FD:80:65:E8:34:CD:6E:1E:53:FD:F1:23:90:36:0B:BB:6A
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/42dF_YBl6DTNbh5T_fEjkDYLu2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.15.0/24
83.147.28.0/23
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
98:2d:ed:0e:3d:48:db:43:42:02:67:31:d5:75:c5:bc:33:28:
84:5b:0f:58:98:98:5e:cd:1a:e6:56:de:b5:96:85:83:7c:fc:
ea:0f:8a:f7:34:56:a6:e1:6a:bc:76:4f:13:32:e2:82:b2:51:
04:69:08:90:81:54:e4:23:9a:3d:a2:db:ec:9e:6d:3c:31:b0:
7b:cf:7c:a3:72:fb:66:2c:4d:4b:4c:b2:49:92:03:f8:36:58:
42:49:a7:f1:02:3e:0f:61:03:35:b3:d6:63:68:e5:fd:1c:da:
3d:98:8d:20:2d:98:07:19:be:8c:e8:dd:43:3a:9f:f4:27:e0:
29:43:b7:dc:5c:bb:49:23:80:0f:77:29:ec:9b:d7:e2:78:cd:
0e:ed:bd:48:34:58:9d:a0:ef:59:5d:c6:e9:d0:d8:54:43:78:
a5:b5:70:1e:2a:9a:c2:7e:e4:98:98:34:0c:e6:47:7a:0c:f1:
50:81:f0:cc:f7:9b:40:99:b4:b5:b0:d0:47:41:e6:a5:3f:2e:
36:71:be:77:58:c4:6e:98:81:01:3d:94:b9:0c:6c:ef:bb:bd:
43:97:cf:75:f3:c3:b9:91:0a:ab:ab:25:2b:f7:31:20:da:cf:
06:17:03:98:8e:4e:84:0c:5f:1c:af:c0:32:9b:41:f4:54:ae:
39:29:6b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org