Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/4BCSgl7oZ1p9s9sHkPxj9Iy9weo.roa
File: 4BCSgl7oZ1p9s9sHkPxj9Iy9weo.roa (raw, json)
Hash identifier: pz1cK+mAORW7UD6/4lAOc0Sx4u1nJP27Dz1IaIGo7/c=
Subject key identifier: E0:10:92:82:5E:E8:67:5A:7D:B3:DB:07:90:FC:63:F4:8C:BD:C1:EA
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018487E2966A45955BF6B69D47D989DF54C3
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/4BCSgl7oZ1p9s9sHkPxj9Iy9weo.roa
Signing time: Thu 17 Nov 2022 23:18:04 +0000
ROA not before: Thu 17 Nov 2022 23:18:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 83.147.40.0/22 maxlen: 24
83.147.44.0/22 maxlen: 24
83.147.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:87:e2:96:6a:45:95:5b:f6:b6:9d:47:d9:89:df:54:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 17 23:18:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e01092825ee8675a7db3db0790fc63f48cbdc1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:e4:3d:13:46:fa:4e:74:0d:b6:ee:a7:dc:
a9:9f:16:e2:80:b1:8d:c5:6b:ea:5f:85:60:58:df:
40:e6:12:7d:41:19:a3:36:f9:80:06:e6:05:b2:26:
9e:96:77:26:33:17:f7:4f:09:68:98:96:6e:ef:6e:
a5:ec:20:2c:f3:1a:11:f2:03:96:7d:26:9b:7c:29:
8e:48:2c:fe:f1:5b:d6:32:8c:87:91:dd:cb:f0:b4:
d5:2e:51:ca:5d:ee:98:8d:86:3a:ce:f1:cd:51:1d:
99:19:01:59:ee:65:83:8a:ad:ab:1e:3a:f2:f9:f8:
5b:f7:a4:ab:50:c2:76:c2:41:9d:02:6c:f8:9d:29:
6e:52:c9:84:d0:fd:d3:f0:c9:ae:f6:88:50:e4:7b:
84:fd:67:47:d6:b0:b9:95:c9:17:64:ae:d5:70:56:
22:36:2b:3f:95:6f:a4:f1:35:74:d0:1b:a9:74:46:
d2:14:f9:ba:16:bf:28:42:7a:e1:8e:98:f6:3a:dd:
66:08:e8:a0:e0:52:56:71:9f:0c:c1:60:81:c4:27:
01:61:cb:cc:02:46:c9:da:2a:d6:01:c6:37:53:9e:
1f:70:82:13:0c:60:b1:a0:34:c5:cb:df:bc:dd:79:
ef:e4:3a:55:62:a0:da:1b:a8:4a:e9:98:e7:f7:de:
53:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:10:92:82:5E:E8:67:5A:7D:B3:DB:07:90:FC:63:F4:8C:BD:C1:EA
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/4BCSgl7oZ1p9s9sHkPxj9Iy9weo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.32.0/22
83.147.40.0/21
Signature Algorithm: sha256WithRSAEncryption
30:78:53:2b:6a:d5:cc:0d:33:7c:fe:22:42:46:cc:26:08:37:
4e:ac:fd:ca:30:21:b7:18:7d:55:56:05:4d:d1:1c:45:a6:2b:
1b:84:98:6a:a0:d1:9e:6b:b4:73:c5:6e:6f:c7:85:89:98:fa:
6f:a6:79:dd:f2:2f:a2:3e:b7:0d:37:bd:7e:de:75:4d:db:97:
dc:12:c5:be:0f:51:8d:03:ea:58:9a:e1:6d:98:ed:86:ce:22:
24:76:2c:91:22:19:75:38:d5:7a:ce:78:04:67:dc:bc:36:bd:
5b:06:28:27:a5:1a:ae:03:45:3e:e0:eb:47:06:63:1e:03:05:
b7:37:99:ef:9e:f1:9e:ba:b4:cb:8f:94:b0:fc:85:20:b7:b8:
53:7c:ae:9d:c6:c5:f2:23:97:8d:5b:0a:d4:f4:1a:18:e4:6d:
d4:f9:20:b0:d7:cc:d9:63:a6:78:95:25:39:ca:b5:47:1c:1c:
0f:ef:d0:e4:31:0e:56:fd:55:7d:a0:dc:4e:1f:77:03:35:58:
52:c0:c3:63:39:fe:c2:75:19:3e:77:6e:f1:f8:0e:c5:1e:d6:
2c:4a:85:af:a4:21:d5:8e:8e:91:88:d1:77:d9:91:8e:84:84:
09:35:ff:31:80:db:11:7d:41:cf:13:11:55:5f:27:b7:e7:95:
0c:db:39:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org