Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/6fa3-ceuCjxWZJvwmlQkZecaD1U.roa
File: 6fa3-ceuCjxWZJvwmlQkZecaD1U.roa (raw, json)
Hash identifier: KeKdBEV9UWor3hLGs/rIeu5595pd1FV51c/6wTWFaCs=
Subject key identifier: E9:F6:B7:F9:C7:AE:0A:3C:56:64:9B:F0:9A:54:24:65:E7:1A:0F:55
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 04354DC1
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/6fa3-ceuCjxWZJvwmlQkZecaD1U.roa
Signing time: Mon 25 Apr 2022 05:33:45 +0000
ROA not before: Mon 25 Apr 2022 05:33:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 83.147.44.0/22 maxlen: 24
83.147.40.0/22 maxlen: 24
83.147.48.0/22 maxlen: 24
83.147.60.0/23 maxlen: 24
83.147.62.0/24 maxlen: 24
83.147.4.0/22 maxlen: 24
83.147.8.0/21 maxlen: 24
83.147.16.0/20 maxlen: 24
83.147.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70602177 (0x4354dc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Apr 25 05:33:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9f6b7f9c7ae0a3c56649bf09a542465e71a0f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:76:d2:81:ef:d6:f9:c7:47:ed:46:9a:27:73:
00:c9:a8:c3:a1:cf:70:3f:ce:ba:83:38:b3:2e:c9:
d6:26:4e:26:39:46:70:2c:8c:b0:c3:14:9d:85:20:
d0:b6:26:f0:59:29:cc:ab:70:66:16:e8:62:e2:aa:
54:9b:a4:b1:b4:8d:e6:a7:73:e4:57:ac:6e:66:c1:
fb:e7:ce:5b:98:20:e5:37:45:da:9a:39:02:38:63:
fd:93:8f:ed:e7:b4:4d:37:d1:0e:b2:e7:7f:95:67:
a5:b9:12:90:b1:0e:8b:c4:5d:23:1d:79:d8:98:b8:
56:e1:e9:d3:c5:fb:10:3a:2a:e4:d7:37:4f:9f:ba:
e7:f3:72:1b:00:79:ab:a1:6d:34:c1:54:4d:7a:69:
a6:be:b9:2a:09:50:73:63:67:ab:30:a1:cf:b8:c5:
3f:30:06:94:45:a0:8e:ee:ab:7c:56:8c:93:61:94:
21:79:6a:d0:6a:c6:d3:69:52:74:3d:44:57:c7:75:
2f:f7:e2:ba:39:27:17:4c:2a:79:df:89:9d:f6:13:
5b:62:bb:ca:62:77:3e:66:ed:12:7c:10:ba:7a:52:
90:b5:43:fe:79:1b:75:df:58:81:c4:a0:a1:f3:19:
0d:b5:56:ec:40:11:77:6e:95:29:0b:fe:08:27:0f:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F6:B7:F9:C7:AE:0A:3C:56:64:9B:F0:9A:54:24:65:E7:1A:0F:55
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/6fa3-ceuCjxWZJvwmlQkZecaD1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.4.0-83.147.35.255
83.147.40.0-83.147.51.255
83.147.60.0-83.147.62.255
Signature Algorithm: sha256WithRSAEncryption
bf:e4:1c:40:b2:48:1c:69:6e:d2:63:36:d6:54:6a:e8:77:db:
94:bf:67:49:b6:db:5d:2e:ee:e5:f4:13:de:00:83:36:2b:88:
1a:dc:b0:de:a5:26:8a:58:67:11:e5:30:73:6a:65:f5:61:92:
9f:dd:76:4e:b8:0d:e0:1c:94:82:78:1f:72:7f:7e:85:84:ed:
42:70:7c:22:ae:7b:16:38:9e:00:11:aa:67:0a:ed:7b:b0:55:
cb:ce:91:b7:e1:21:6b:c1:ca:71:e8:a7:d6:09:eb:3c:54:f7:
1f:16:25:22:5a:47:dc:8d:3c:88:cf:09:37:71:20:1b:6b:f8:
70:3d:ab:05:22:bd:1b:6f:cd:27:c1:0f:47:13:1c:25:0f:ea:
d7:ab:b1:a3:e4:95:ad:9b:85:b3:48:b0:46:5a:62:c6:d8:ae:
03:72:49:94:8c:dd:b7:6c:16:5a:2d:e9:c6:72:e4:eb:71:0a:
33:b6:ca:83:c4:11:aa:96:d2:7d:39:d0:d3:d0:cd:08:89:f5:
b9:e6:bd:05:c9:45:c6:43:aa:b8:ef:73:fe:f9:2c:08:81:75:
dd:55:af:e5:7a:d6:88:95:8f:66:a4:1e:27:26:98:63:39:ee:
e4:7a:9f:fb:a4:46:77:fc:45:1f:84:2e:56:6d:78:0a:db:8c:
64:33:97:41
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIEBDVNwTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MTkzZmZlOWRiMzc2MjZiMTNmODVkN2NjNDU3YWFkNWMxZjMwYzlmMB4XDTIyMDQy
NTA1MzM0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTlmNmI3ZjljN2Fl
MGEzYzU2NjQ5YmYwOWE1NDI0NjVlNzFhMGY1NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIp20oHv1vnHR+1GmidzAMmow6HPcD/OuoM4sy7J1iZOJjlG
cCyMsMMUnYUg0LYm8FkpzKtwZhboYuKqVJuksbSN5qdz5FesbmbB++fOW5gg5TdF
2po5Ajhj/ZOP7ee0TTfRDrLnf5VnpbkSkLEOi8RdIx152Ji4VuHp08X7EDoq5Nc3
T5+65/NyGwB5q6FtNMFUTXpppr65KglQc2NnqzChz7jFPzAGlEWgju6rfFaMk2GU
IXlq0GrG02lSdD1EV8d1L/fiujknF0wqed+JnfYTW2K7ymJ3PmbtEnwQunpSkLVD
/nkbdd9YgcSgofMZDbVW7EARd26VKQv+CCcPQQMCAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBTp9rf5x64KPFZkm/CaVCRl5xoPVTAfBgNVHSMEGDAWgBSBk//p2zdiaxP4
XXzEV6rVwfMMnzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2daUF82ZHMzWW1zVC1GMTh4RmVxMWNIekRKOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTcvNzZiYzFlLWI2ZjQtNDA4YS1iYjg5LTA4ZDEyNzBjMmU3MS8x
LzZmYTMtY2V1Q2p4V1pKdndtbFFrWmVjYUQxVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcv
NzZiYzFlLWI2ZjQtNDA4YS1iYjg5LTA4ZDEyNzBjMmU3MS8xL2daUF82ZHMzWW1z
VC1GMTh4RmVxMWNIekRKOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKjAMAwQCU5MEAwQCU5MgMAwDBANTkygD
BAJTkzAwDAMEAlOTPAMEAFOTPjANBgkqhkiG9w0BAQsFAAOCAQEAv+QcQLJIHGlu
0mM21lRq6HfblL9nSbbbXS7u5fQT3gCDNiuIGtyw3qUmilhnEeUwc2pl9WGSn912
TrgN4ByUgngfcn9+hYTtQnB8Iq57FjieABGqZwrte7BVy86Rt+Eha8HKcein1gnr
PFT3HxYlIlpH3I08iM8JN3EgG2v4cD2rBSK9G2/NJ8EPRxMcJQ/q16uxo+SVrZuF
s0iwRlpixtiuA3JJlIzdt2wWWi3pxnLk63EKM7bKg8QRqpbSfTnQ09DNCIn1uea9
BclFxkOquO9z/vksCIF13VWv5XrWiJWPZqQeJyaYYznu5Hqf+6RGd/xFH4QuVm14
CtuMZDOXQQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:42 2023 by rpki-client on console-fra.rpki-client.org