Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/KEVeBFQyYaPAtGUQm8akiGN7FhA.roa
File: KEVeBFQyYaPAtGUQm8akiGN7FhA.roa (raw, json)
Hash identifier: 3s5kbbD6cRAHWOHYYE/5QZW2O5+U34kLtnZTkzhnyNc=
Subject key identifier: 28:45:5E:04:54:32:61:A3:C0:B4:65:10:9B:C6:A4:88:63:7B:16:10
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01852986289379B748BD9AF646D1B917A15C
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/KEVeBFQyYaPAtGUQm8akiGN7FhA.roa
Signing time: Mon 19 Dec 2022 08:35:36 +0000
ROA not before: Mon 19 Dec 2022 08:35:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39521
IP address blocks: 83.147.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:86:28:93:79:b7:48:bd:9a:f6:46:d1:b9:17:a1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Dec 19 08:35:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28455e04543261a3c0b465109bc6a488637b1610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:98:50:fa:ed:aa:d6:d6:cb:aa:c5:8f:cb:
88:84:65:bd:45:42:2a:6f:4e:37:13:9e:25:5e:22:
7b:73:ac:35:82:b0:f5:7b:2c:55:4f:0f:a5:d2:c2:
7d:97:5c:5f:8d:d0:a9:33:5f:4a:d5:9f:17:87:ac:
ab:a0:db:e7:a2:b4:a1:9a:42:29:b8:7f:b3:1d:33:
6c:55:eb:0b:85:0f:8b:f4:a0:ca:e0:b1:f9:32:4d:
65:5b:e9:4b:09:8a:55:1d:ed:da:00:e6:02:8d:7a:
0c:66:1d:08:93:be:1a:98:83:83:97:be:e2:e9:f7:
63:3d:35:a3:12:3e:bd:96:30:34:b3:ad:ac:88:4f:
48:31:33:4b:de:b4:95:e5:5d:29:33:c4:35:2a:a8:
d9:13:e6:3b:6d:de:fe:45:17:09:4e:96:34:ab:45:
86:84:22:32:e1:f3:51:05:54:d2:01:02:19:b1:95:
1a:23:b3:d9:d2:99:75:fb:32:27:a5:e9:31:34:c1:
c2:c2:91:21:58:bc:28:bf:7b:49:0c:61:a4:85:6c:
46:1a:89:17:69:5e:62:4d:a8:da:37:07:4d:ba:5b:
86:d5:27:ca:cb:fa:50:af:4a:c0:93:f8:02:2c:8b:
5f:ce:f2:2a:14:0b:03:98:ea:91:c2:3f:78:18:2f:
f0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:45:5E:04:54:32:61:A3:C0:B4:65:10:9B:C6:A4:88:63:7B:16:10
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/KEVeBFQyYaPAtGUQm8akiGN7FhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.48.0/22
Signature Algorithm: sha256WithRSAEncryption
39:3b:aa:cb:4d:05:41:ca:d2:d6:0d:64:23:ae:cd:3e:9d:52:
28:66:6d:b5:f5:0f:87:c0:91:10:7b:37:04:54:af:50:2a:b7:
f8:fa:dc:d3:01:21:2d:b2:2d:2b:84:0d:cb:04:c4:6a:6d:04:
16:6b:1b:b7:ae:58:9e:fe:c7:63:5a:bb:1d:5d:d1:3d:58:d4:
85:30:e5:67:7f:48:e4:d5:e3:65:e5:b1:f7:1e:23:49:72:2d:
00:44:c0:94:12:7e:f5:f5:34:bb:26:7c:cc:e2:84:21:c1:9e:
b4:5e:4d:ed:06:16:27:e7:ae:fb:63:4e:75:c3:a1:5c:87:a5:
4f:31:60:72:2c:ac:8e:ba:ef:51:02:9f:2c:dc:2a:82:55:17:
4d:27:12:79:d8:5a:d2:aa:33:ab:bf:2d:df:0f:7f:da:32:0a:
c3:f4:6a:91:ab:aa:e6:5f:f4:7f:38:b2:a1:84:ff:d3:d2:33:
74:20:a4:fe:e6:dd:6f:c8:71:bd:74:4d:22:9f:cb:ad:0a:8c:
8a:47:b8:82:c0:ee:04:85:5a:f7:ed:ea:cc:6b:71:1a:45:72:
06:e5:2b:5e:e3:e6:18:6d:fd:f7:d3:1f:01:a5:ab:52:f9:68:
21:17:2f:90:e7:89:04:c9:93:16:18:fe:24:23:89:fb:0f:89:
ea:35:7e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org