Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Ky8GCNRclNY153yuBOJzMA1EydY.roa
File: Ky8GCNRclNY153yuBOJzMA1EydY.roa (raw, json)
Hash identifier: vZKUW4RTwP7UShyD7uEs4XtxynFCozaMTnmCmb6oRIc=
Subject key identifier: 2B:2F:06:08:D4:5C:94:D6:35:E7:7C:AE:04:E2:73:30:0D:44:C9:D6
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 03E90746
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Ky8GCNRclNY153yuBOJzMA1EydY.roa
Signing time: Tue 29 Mar 2022 05:01:21 +0000
ROA not before: Tue 29 Mar 2022 05:01:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 83.147.48.0/22 maxlen: 24
45.156.58.0/23 maxlen: 24
83.147.4.0/22 maxlen: 24
83.147.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65603398 (0x3e90746)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Mar 29 05:01:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b2f0608d45c94d635e77cae04e273300d44c9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:ef:55:fd:ef:2a:b4:9a:70:90:68:a0:d0:
b1:d0:2d:4e:8f:f8:87:84:a4:07:a5:cc:b0:43:7b:
03:80:89:56:1e:0e:df:a2:eb:56:2b:bd:34:aa:40:
70:74:91:ec:4d:ae:c0:4d:cf:23:ce:ed:15:b4:1c:
d5:34:a8:1c:4a:62:26:15:17:62:33:2c:8a:77:b1:
93:d1:30:8a:71:b1:48:59:32:f6:0c:3c:f5:dd:6f:
47:88:e9:44:39:80:01:31:d7:96:5c:62:17:15:63:
47:ec:97:7c:06:8e:c0:8a:c8:54:00:7f:df:15:47:
6b:89:42:2a:23:dc:be:e3:96:3a:3e:24:a0:66:89:
a2:41:1a:3a:c1:b4:5c:ec:62:2d:8c:6f:a0:c0:8a:
50:31:0f:4d:a3:72:75:bf:be:c5:b3:e5:f2:eb:4d:
de:49:52:ee:06:90:f4:16:1d:bc:e9:5b:e1:aa:51:
f7:35:dc:0f:a1:2b:35:9b:cd:79:94:ec:a9:48:e1:
8d:35:0a:b1:19:1e:f2:d0:43:03:55:39:c6:27:87:
eb:72:63:60:b5:6b:20:f9:5e:9d:1a:fb:89:99:99:
2c:85:34:c9:7a:57:8f:82:6f:2b:57:71:44:80:62:
1f:b3:d9:3d:19:11:a9:83:ef:a6:5a:0c:a1:2d:14:
5d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2F:06:08:D4:5C:94:D6:35:E7:7C:AE:04:E2:73:30:0D:44:C9:D6
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Ky8GCNRclNY153yuBOJzMA1EydY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.58.0/23
83.147.4.0/22
83.147.24.0/22
83.147.48.0/22
Signature Algorithm: sha256WithRSAEncryption
62:2f:e5:75:8b:1e:3c:4a:2c:43:d9:d0:66:07:c7:5b:bf:97:
c6:c4:fc:49:92:6f:05:f8:d9:3a:00:26:69:9f:2a:5e:1d:0b:
4a:cc:98:25:43:3e:7a:c7:24:ba:53:e1:a8:1a:33:52:3a:62:
13:30:19:ff:cc:e4:72:98:61:62:4b:5e:37:94:8a:22:ec:8f:
5c:4a:17:a0:03:4f:91:d1:b5:06:57:1e:e5:9f:b9:87:2d:d3:
0e:3e:d5:86:4e:2b:79:5f:ab:d1:1f:2e:0e:9b:f7:b9:b3:01:
bc:bd:17:df:9a:78:a7:a5:5b:cc:3f:4b:68:ce:2f:87:2f:37:
b5:a3:32:4f:54:33:55:4b:73:07:bb:fe:cb:40:86:9d:fe:07:
6b:42:8d:48:76:4d:5f:a3:15:df:25:95:cc:b5:38:44:ec:5c:
7a:b1:8c:0c:38:86:5b:a5:04:95:5c:6e:c8:21:a1:5c:a7:07:
50:4c:8b:b8:ee:e6:f4:e8:45:24:58:88:34:a2:c1:3c:d2:ba:
23:c5:b3:10:ca:f5:04:c6:36:20:1b:41:ac:04:59:0f:35:8c:
18:6e:23:5e:46:c3:d1:b8:49:60:15:8c:49:53:c9:12:19:88:
45:2e:ba:01:b1:3c:36:fe:6c:89:a3:c3:c7:65:6a:16:f3:8c:
6f:2c:ce:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org