Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/G2skPTWSfV_TCZKm5Dbx100NUDA.roa
File: G2skPTWSfV_TCZKm5Dbx100NUDA.roa (raw, json)
Hash identifier: FUsTQhkFOQ4HB9voVgOgVPaj4jM+kq9WkVOegSsTisk=
Subject key identifier: 1B:6B:24:3D:35:92:7D:5F:D3:09:92:A6:E4:36:F1:D7:4D:0D:50:30
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 034D3C26
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/G2skPTWSfV_TCZKm5Dbx100NUDA.roa
Signing time: Wed 26 Jan 2022 05:23:42 +0000
ROA not before: Wed 26 Jan 2022 05:23:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 83.147.14.0/23 maxlen: 24
83.147.22.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55393318 (0x34d3c26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 26 05:23:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b6b243d35927d5fd30992a6e436f1d74d0d5030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:34:aa:f0:0e:6f:b0:38:ac:de:34:09:42:cc:
3e:40:8c:83:4d:e1:ea:8a:5d:c1:e3:e3:09:08:9a:
39:e8:38:99:fc:e8:aa:43:8d:4a:8f:2e:fc:c4:0d:
30:70:dc:b2:48:f7:ae:e9:be:6c:c4:df:32:bd:9f:
ea:c1:17:1e:fc:02:21:6d:06:3e:f6:bd:50:00:ed:
6f:f1:ff:9f:79:1a:f0:b4:24:fa:53:af:75:f8:60:
71:63:66:48:4a:20:44:b6:86:be:24:97:c5:ec:ca:
40:53:2c:8d:d5:93:ea:c6:25:6c:8e:72:64:af:85:
3a:0c:d6:d7:30:63:58:4e:3d:e2:93:c0:21:2f:60:
a7:0f:c8:c9:aa:6c:2d:8f:c4:82:39:7c:08:f2:53:
67:bc:7c:6a:96:e3:96:5e:7b:1b:e9:77:dd:21:01:
e2:ee:81:57:8d:3e:a1:1c:60:6c:0f:a3:2d:7f:b6:
9f:f9:a5:33:b6:b4:5c:8a:d6:35:d3:2a:7f:b5:30:
01:6d:cc:7a:e2:27:db:5c:5a:3a:a1:69:e7:74:57:
44:22:14:c4:34:60:75:8b:00:e5:f0:dc:6f:85:cd:
93:a4:82:63:6c:0e:6d:fd:47:ce:02:ed:2d:a0:4b:
50:6d:f9:77:15:b4:85:71:af:88:47:ac:8b:10:b4:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6B:24:3D:35:92:7D:5F:D3:09:92:A6:E4:36:F1:D7:4D:0D:50:30
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/G2skPTWSfV_TCZKm5Dbx100NUDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.14.0/23
83.147.22.0/23
Signature Algorithm: sha256WithRSAEncryption
02:33:e6:96:0d:d5:b3:95:a4:8f:a2:da:60:9b:8e:39:eb:5a:
74:69:ba:df:f7:20:2a:88:e5:a8:8a:c4:9e:0d:f5:a3:a2:37:
8d:b8:93:96:96:79:5e:b8:ba:8c:e9:27:6b:2f:23:96:81:bc:
76:96:0a:b3:6f:76:90:08:18:78:13:42:f1:c9:fa:97:bb:a6:
1e:8e:f1:a6:3d:8a:df:75:dc:fd:6b:86:a8:e6:1a:78:69:43:
d1:28:b4:88:a0:08:32:d0:24:dd:22:ba:ac:33:51:ba:c5:4e:
6e:a6:24:72:dc:a6:cd:dd:df:50:cf:f9:96:ba:5f:07:9c:1c:
93:cb:70:c1:54:90:8b:6d:4a:1f:2f:08:bc:bd:aa:5a:32:9e:
a0:d7:82:67:03:6f:6e:b2:7a:60:58:61:d6:c5:68:05:24:a9:
06:d8:11:87:66:00:20:21:55:50:b9:ce:de:fe:fa:c1:06:29:
1e:d0:41:03:8b:cd:8b:e2:0c:2e:b6:0a:60:8b:5a:a7:46:31:
4a:15:e8:cc:ab:66:e2:15:19:bd:11:bb:6b:23:1b:5d:db:1d:
43:20:8f:ee:09:30:03:e3:e8:a4:29:70:06:5a:2e:34:aa:aa:
68:09:6a:18:32:7d:1d:50:24:fc:18:3b:32:23:3e:d0:e4:c5:
8f:f6:04:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org