Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/PQtL-BbDE5GVSzxEs1Yz-7Rrs3s.roa
File: PQtL-BbDE5GVSzxEs1Yz-7Rrs3s.roa (raw, json)
Hash identifier: JJmo36JAGW5UkUscLi3eBP333vLnioTop8Mu3NgYBqw=
Subject key identifier: 3D:0B:4B:F8:16:C3:13:91:95:4B:3C:44:B3:56:33:FB:B4:6B:B3:7B
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01825D7EBCD20A7DBC808BEB3B93DC86DB52
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/PQtL-BbDE5GVSzxEs1Yz-7Rrs3s.roa
Signing time: Tue 02 Aug 2022 07:39:23 +0000
ROA not before: Tue 02 Aug 2022 07:39:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205220
IP address blocks: 83.147.52.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5d:7e:bc:d2:0a:7d:bc:80:8b:eb:3b:93:dc:86:db:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Aug 2 07:39:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d0b4bf816c31391954b3c44b35633fbb46bb37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:10:a6:7b:c3:39:d3:34:26:4c:a8:8d:fd:ec:
91:80:74:a3:52:3a:da:81:f2:d3:0a:b8:80:ff:5c:
5e:55:84:23:dd:f5:b2:49:7b:7d:1d:84:e6:e3:90:
94:eb:a0:19:21:21:01:99:64:b4:f8:ee:cd:70:da:
78:e1:bd:f5:a3:df:b8:64:f2:6c:23:d1:e2:6f:62:
d9:38:b3:bf:1c:d5:61:9c:45:c0:f2:d5:d4:bf:0e:
da:5e:83:5a:69:33:8b:1a:3e:de:38:38:e8:66:28:
17:99:bc:db:76:fd:eb:e3:46:0f:ed:58:7f:fd:1b:
26:01:58:ad:9a:6a:6e:9b:cb:3d:60:ce:6e:5d:08:
1a:e2:bc:ac:f9:94:a7:fd:ea:90:0f:75:a5:b3:d8:
62:2c:14:e6:3b:77:1e:ba:be:c4:ff:f2:38:28:92:
a7:c6:5c:62:5c:2a:03:3a:4e:bc:42:e6:0c:ba:d1:
1a:df:c2:04:9b:78:8e:39:01:a9:5e:99:dd:f3:fe:
5d:fe:33:5c:97:97:7d:d2:19:f5:93:4f:64:a4:8b:
2b:ef:c0:5b:96:be:01:1c:b7:d3:e3:c2:e2:d5:17:
f5:86:a3:f0:0b:91:b7:bf:e3:00:19:6c:cc:32:a8:
c8:73:ed:0b:f3:b1:eb:c1:b0:99:8d:c4:bf:99:bc:
2b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0B:4B:F8:16:C3:13:91:95:4B:3C:44:B3:56:33:FB:B4:6B:B3:7B
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/PQtL-BbDE5GVSzxEs1Yz-7Rrs3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.52.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:dc:b8:f1:0f:ed:5f:b8:3f:1b:4a:4c:8b:19:10:25:97:4f:
4e:66:89:27:12:f3:f7:ce:fe:06:da:02:7a:03:4c:d4:6f:46:
b5:e0:55:c8:40:72:8c:40:cc:05:85:25:61:12:f6:d2:6e:3a:
3c:20:ae:2d:b1:de:dd:3d:2b:ba:d0:f5:78:49:3b:ac:25:bd:
33:98:b7:58:7a:ba:5e:e3:d0:fe:31:a0:91:5a:a0:2e:d6:fa:
7f:dd:e8:ae:a8:1f:c7:4f:51:4a:6b:72:d6:b0:31:b2:90:72:
db:1a:35:c8:3d:50:86:ef:1e:df:b3:09:7a:0b:29:66:af:1c:
7c:88:69:80:cc:e7:56:fe:65:00:e6:d4:e9:6d:43:59:63:b7:
41:cf:c6:9c:44:47:c5:85:13:0d:f2:af:18:b7:fc:af:13:b1:
7f:94:c3:da:b7:d0:8b:94:6f:bb:e8:b8:14:34:ff:76:84:f5:
17:95:22:aa:ff:97:2a:87:dc:6d:90:58:6c:7c:c0:62:5d:60:
27:b1:05:2d:8b:34:c9:fe:25:de:c1:79:24:39:dc:e5:76:21:
7c:0a:47:cc:85:20:91:2e:a8:1e:f7:63:68:fd:43:33:47:33:
65:99:d6:47:50:19:33:45:f3:cc:58:7e:43:19:82:e2:1a:7c:
6e:68:4e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org