Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/TzPT_vQ8nSLeMS2gkAI93PAAy68.roa
File: TzPT_vQ8nSLeMS2gkAI93PAAy68.roa (raw, json)
Hash identifier: og/iEaTZZK+ET2LDGLk4MQSJdczzaKKFL4xyPgnTXV8=
Subject key identifier: 4F:33:D3:FE:F4:3C:9D:22:DE:31:2D:A0:90:02:3D:DC:F0:00:CB:AF
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 04DFC31B
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/TzPT_vQ8nSLeMS2gkAI93PAAy68.roa
Signing time: Fri 01 Jul 2022 09:29:25 +0000
ROA not before: Fri 01 Jul 2022 09:29:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 83.147.61.0/24 maxlen: 24
83.147.4.0/22 maxlen: 24
83.147.15.0/24 maxlen: 24
83.147.29.0/24 maxlen: 24
83.147.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81773339 (0x4dfc31b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jul 1 09:29:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f33d3fef43c9d22de312da090023ddcf000cbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:89:92:d5:94:09:d4:cd:2b:d4:65:2a:4d:
a7:f5:57:8b:95:e3:44:c0:0d:bb:f3:bf:a2:2e:5a:
77:f9:c2:c2:65:00:18:2b:f9:28:37:9a:12:ad:fa:
de:cd:64:eb:a8:db:ac:16:d4:1c:74:33:2f:ce:b4:
53:d6:cf:20:fc:a0:68:8b:c6:76:43:00:af:8c:a2:
aa:35:1a:a6:f0:61:05:e3:54:cf:f6:dc:43:1a:71:
9a:12:9b:bd:4b:19:9b:8d:9b:b8:da:58:67:c1:d7:
97:2e:fa:24:0f:1a:d8:0d:99:25:86:b2:6c:d5:01:
8f:73:c3:09:31:92:f6:9a:74:3d:d5:7f:72:2b:06:
94:bf:f0:4d:ec:cc:d8:f0:9e:18:3d:a5:bb:7b:19:
91:69:20:8b:fa:b0:0c:9a:80:51:ff:07:62:74:df:
2c:f8:93:3e:92:6c:7e:64:1c:5c:a5:44:9c:89:0a:
98:ce:f2:44:27:4a:9c:63:06:e2:63:d8:f1:6b:b7:
8c:e9:1d:cb:d4:c9:2b:76:45:cc:bb:36:75:43:8e:
2c:07:6a:d0:ca:5f:b1:72:02:a6:32:bd:cd:76:f7:
bb:fc:8d:88:81:8a:05:b6:2e:65:57:d5:b7:08:b3:
4d:3d:ce:9c:27:24:8d:0f:9c:ed:0d:b0:2b:87:a9:
6d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:33:D3:FE:F4:3C:9D:22:DE:31:2D:A0:90:02:3D:DC:F0:00:CB:AF
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/TzPT_vQ8nSLeMS2gkAI93PAAy68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.4.0/22
83.147.15.0/24
83.147.28.0/23
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
37:08:36:4b:c4:2f:8b:c3:3e:e6:06:04:d4:1a:d2:37:8d:7d:
4a:ae:e8:89:f4:74:26:23:50:78:57:61:bf:5d:0c:38:ec:b9:
b4:8f:fb:62:bb:eb:b1:8b:18:42:66:69:bc:df:a0:04:b8:64:
bb:16:8e:b0:93:5b:8e:79:8b:d6:de:15:67:41:9c:e8:45:51:
cf:0d:f0:fc:9b:f4:a8:28:7d:95:1b:83:1d:ce:b2:55:d9:42:
93:4b:6a:33:f1:02:ab:e8:1d:08:05:52:1b:07:69:fa:8f:e7:
ca:a4:f7:91:e0:9b:0b:bc:98:af:8b:8f:a7:2a:63:55:d0:1d:
91:e0:03:a3:a1:f8:21:63:9d:c8:9a:6f:e5:73:14:7a:d7:b4:
40:64:e8:06:d7:9f:ee:13:9a:f7:91:20:9b:7f:46:e8:e4:60:
d9:cf:89:d5:55:d9:a2:eb:87:c5:fb:58:16:17:e3:e0:d0:e3:
73:48:b3:27:a6:26:0d:0b:dc:b5:32:9d:22:9f:cf:a4:79:6e:
04:15:d6:48:14:35:cf:e1:15:52:4c:76:ad:d2:c8:82:d5:4c:
ea:d6:12:ed:83:3e:41:76:2b:8b:bb:e4:15:5b:0f:a3:be:be:
d9:95:a7:c8:2f:ec:1b:a3:a5:89:61:05:54:3f:f5:db:03:db:
44:4a:d5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org