Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/KBRR2Oj78rmrMZrr1OIV05qQ6po.roa
File: KBRR2Oj78rmrMZrr1OIV05qQ6po.roa (raw, json)
Hash identifier: ar1jRXZ0TH4GnqFlvGOD57gDdBxPKobReA4I6P06cNU=
Subject key identifier: 28:14:51:D8:E8:FB:F2:B9:AB:31:9A:EB:D4:E2:15:D3:9A:90:EA:9A
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 04075918
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/KBRR2Oj78rmrMZrr1OIV05qQ6po.roa
Signing time: Thu 07 Apr 2022 05:17:44 +0000
ROA not before: Thu 07 Apr 2022 05:17:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 83.147.61.0/24 maxlen: 24
83.147.15.0/24 maxlen: 24
83.147.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67590424 (0x4075918)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Apr 7 05:17:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=281451d8e8fbf2b9ab319aebd4e215d39a90ea9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5e:57:b7:fe:68:b0:60:11:6e:f2:25:59:20:
03:0d:dc:08:ef:c1:83:ac:6d:79:89:fa:b7:fa:1d:
10:b5:c1:17:e7:f8:55:66:c2:3a:88:73:24:0a:93:
a0:f4:14:1d:a5:db:52:12:06:28:1d:02:9f:97:11:
05:d7:85:67:ac:40:43:52:3b:d2:0e:03:54:79:1c:
89:51:53:03:23:d0:c5:25:2a:3f:a5:b2:d5:3f:28:
fc:d1:dc:ed:51:0f:0f:ce:4c:49:3d:27:b7:9b:00:
a1:55:56:7d:a6:05:02:99:a6:a3:1c:b9:a5:83:6b:
31:63:05:0d:ee:45:fc:f8:ac:89:6c:ea:0e:5a:27:
7d:cc:a9:13:2a:af:2d:fd:65:af:a8:12:a1:f0:f8:
27:fb:1a:1b:67:a7:a4:da:da:ab:bd:03:63:5a:5c:
4e:67:42:10:12:bc:1b:02:17:d6:96:75:9d:d9:89:
cc:63:3a:2f:57:18:b1:bc:7c:d4:83:69:fc:a6:3b:
fa:25:8f:ad:c3:8e:e6:0d:dc:6b:88:4f:01:a1:a6:
ac:9d:f7:f8:b3:58:3a:97:6b:b8:5a:1c:6b:0d:db:
c9:e6:28:02:46:20:5c:2d:a2:33:bc:b4:8f:7e:96:
97:91:59:5b:54:52:57:a1:f2:22:25:c9:40:8b:22:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:14:51:D8:E8:FB:F2:B9:AB:31:9A:EB:D4:E2:15:D3:9A:90:EA:9A
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/KBRR2Oj78rmrMZrr1OIV05qQ6po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.15.0/24
83.147.29.0/24
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:2f:5b:ef:ac:51:8f:1f:71:eb:61:00:6e:96:83:e5:be:04:
d1:fc:af:c1:5c:3d:b6:80:5a:f4:66:cd:2b:46:9f:53:13:c8:
cf:a2:c7:34:75:f4:04:06:23:75:e5:05:1f:8f:c2:d1:01:05:
bb:6c:a0:37:b7:14:bf:bb:84:70:48:ca:6a:f3:39:ae:a9:f8:
c5:2c:c5:e0:e8:d6:70:8c:87:83:f6:cd:b5:3b:bf:77:5f:a7:
79:e0:0b:7c:64:d2:e3:a5:df:12:22:0c:c4:22:5a:67:eb:21:
b3:42:67:47:41:1e:5b:2f:39:71:b6:53:c7:57:a4:b3:13:34:
a4:9f:c1:c7:ea:c1:a1:52:d3:3c:de:89:ba:4a:f6:e6:0d:bb:
d8:a4:c1:cb:40:54:aa:c7:04:1a:ff:df:2a:ed:af:cf:0b:54:
b7:e0:61:10:b2:13:9e:1f:ce:b1:78:18:ab:d7:ed:1f:2d:25:
6e:d8:68:10:12:40:ba:d1:27:2e:c5:01:15:d4:f7:0a:f3:0b:
23:5f:84:bd:bf:84:7f:82:19:89:49:c3:25:c6:97:e9:13:a1:
d7:7d:44:75:d8:5b:87:48:cc:7d:f2:29:87:e1:aa:7b:00:cf:
df:2b:fc:ea:1f:4b:72:88:39:19:52:81:90:1c:c2:ea:98:72:
bc:02:c6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org