Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Oe5irxS3WOUPTSfGThoarvZIaZI.roa
File: Oe5irxS3WOUPTSfGThoarvZIaZI.roa (raw, json)
Hash identifier: gpH+AzyW10NEBNGBo9C7G4HavAoyqQsDBKgaLQl5bRg=
Subject key identifier: 39:EE:62:AF:14:B7:58:E5:0F:4D:27:C6:4E:1A:1A:AE:F6:48:69:92
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018316096E2523AE3EBA4132042495E21C9A
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Oe5irxS3WOUPTSfGThoarvZIaZI.roa
Signing time: Wed 07 Sep 2022 03:41:00 +0000
ROA not before: Wed 07 Sep 2022 03:41:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 83.147.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:16:09:6e:25:23:ae:3e:ba:41:32:04:24:95:e2:1c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Sep 7 03:41:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39ee62af14b758e50f4d27c64e1a1aaef6486992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ef:f5:dc:80:0f:51:ec:f3:f4:9b:06:21:dc:
dd:cc:5b:01:a8:76:99:c7:e7:96:73:f1:66:77:90:
4f:b5:2b:55:dd:44:b1:37:12:1d:51:e0:07:ab:07:
ca:24:ac:76:8a:b8:fd:16:e3:86:db:63:ef:98:ff:
50:2b:9c:ad:55:e7:f0:0f:95:bc:e8:1b:c2:45:3d:
c0:a8:40:04:36:bf:3b:38:1a:af:db:c8:85:0f:a7:
64:60:8c:d6:ca:aa:01:bc:0c:85:c3:f7:af:bb:c5:
8a:00:dd:24:e1:a2:c2:fa:0a:0b:e7:3a:5b:cc:1e:
26:0d:1b:58:4e:58:f8:c4:1d:02:a0:0f:22:a6:4f:
a2:5c:07:53:18:67:88:19:4a:be:55:3c:b3:51:94:
ef:2d:e1:54:1d:0f:55:0b:f7:bd:39:b4:3b:9a:56:
2c:e8:50:7f:76:f2:ea:23:06:ed:26:e3:6f:bf:4f:
9f:6d:21:62:cf:52:21:2f:5d:16:6c:d5:4e:8d:75:
d8:ef:93:77:e2:37:43:a6:b9:91:98:77:01:d8:cd:
1b:59:03:c6:19:dd:bd:26:05:28:06:91:08:b0:c6:
1c:73:77:9e:2f:2d:73:38:29:50:0f:78:6a:52:d5:
4c:fe:00:56:e1:ba:7e:24:6a:17:85:ba:63:cb:2d:
3a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EE:62:AF:14:B7:58:E5:0F:4D:27:C6:4E:1A:1A:AE:F6:48:69:92
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Oe5irxS3WOUPTSfGThoarvZIaZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.24.0/22
Signature Algorithm: sha256WithRSAEncryption
58:70:9b:25:ab:f9:d5:92:bb:02:d4:58:fd:20:97:f4:34:4b:
b0:f2:80:71:ad:aa:87:f7:7b:b1:30:ff:d0:49:08:a5:d6:9f:
10:10:0b:13:82:d1:60:84:db:d5:de:e6:6e:e8:88:c7:b1:81:
db:aa:9b:9e:f9:5c:3b:f4:e1:0d:2d:e0:cd:66:c3:a3:cd:f0:
4c:60:a8:27:5f:08:53:5f:a4:cb:29:a6:47:f1:f7:3a:0d:9a:
24:16:4d:21:ab:19:c3:55:bb:1f:95:00:31:a9:e3:b6:4f:55:
3e:e6:e7:41:2f:d4:9a:2c:ba:46:f5:09:49:3c:b6:d0:2c:3e:
54:66:31:60:21:ed:63:01:7f:84:9f:67:05:ab:21:5f:df:a9:
bb:6a:fb:bb:62:57:8f:e8:42:5a:4a:5b:ec:35:b4:c5:87:1f:
ae:21:26:01:58:a8:87:40:60:a5:e9:0e:c0:2b:f9:83:ab:de:
5a:9f:21:35:19:e9:89:6a:be:e9:06:01:3f:6e:c2:e6:c4:85:
1a:a7:3e:e4:01:1f:8a:b9:54:be:68:58:3b:c0:1e:c2:3b:cf:
26:54:da:76:7f:65:f2:cc:ab:4a:c8:8f:5c:f7:a6:13:00:e4:
b0:b7:e9:82:c1:dc:dc:04:fb:b2:3f:bf:36:3a:f5:23:42:c6:
5a:6c:8e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:42 2023 by rpki-client on console-fra.rpki-client.org