Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ZglojUPe5Lpi_u7Y8FYmM9EVkBk.roa
File: ZglojUPe5Lpi_u7Y8FYmM9EVkBk.roa (raw, json)
Hash identifier: RufpLecbtoXyt8WFg5wSLrrsSySx2z9Uiv7XwyS7cqo=
Subject key identifier: 66:09:68:8D:43:DE:E4:BA:62:FE:EE:D8:F0:56:26:33:D1:15:90:19
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0182860FDEFF187957D760EE604CF57FAB73
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ZglojUPe5Lpi_u7Y8FYmM9EVkBk.roa
Signing time: Wed 10 Aug 2022 04:42:43 +0000
ROA not before: Wed 10 Aug 2022 04:42:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 83.147.61.0/24 maxlen: 24
83.147.4.0/22 maxlen: 24
83.147.8.0/24 maxlen: 24
83.147.15.0/24 maxlen: 24
83.147.29.0/24 maxlen: 24
83.147.28.0/24 maxlen: 24
83.147.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:86:0f:de:ff:18:79:57:d7:60:ee:60:4c:f5:7f:ab:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Aug 10 04:42:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6609688d43dee4ba62feeed8f0562633d1159019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:07:54:97:c7:0d:c6:6b:3d:a5:ce:d9:f0:
eb:6e:5b:6a:2b:15:be:78:a9:38:0c:54:d2:33:15:
e3:66:b4:f9:9c:dc:7c:f1:88:c9:d4:88:f3:0e:94:
0a:c4:df:d2:d3:ff:4f:e4:e7:27:83:09:ee:fe:10:
d8:8b:c7:e1:c2:e1:42:37:fb:64:13:7a:4a:80:f4:
b7:e5:8f:b0:0e:90:a5:bd:0c:d0:c8:44:f1:08:a6:
34:1b:d1:dd:9b:61:71:ca:d7:2d:98:9d:f6:3e:a8:
53:d8:8d:24:9f:c2:ad:ab:ae:77:3e:65:e8:43:67:
50:fa:7f:ec:1c:04:23:67:6e:a4:98:68:66:d7:1f:
73:bf:f0:56:96:f8:52:9d:f6:2e:f8:46:de:9d:7f:
29:bb:74:a6:6e:99:6f:63:20:68:82:1a:94:40:97:
e1:89:48:b6:ca:4a:fa:8b:12:76:15:35:88:5f:53:
0f:44:41:26:28:1a:cd:5d:45:d1:4b:7c:db:b6:4e:
e3:74:b6:f3:78:04:66:c6:bb:54:32:03:42:4e:ff:
49:53:b0:85:02:b6:b5:c3:f0:03:22:5d:c7:d2:48:
de:ff:5d:e4:04:f7:8f:25:7f:fd:cd:73:26:a1:ca:
8c:73:62:b1:57:95:81:35:d5:1e:8a:2c:94:37:ac:
3e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:09:68:8D:43:DE:E4:BA:62:FE:EE:D8:F0:56:26:33:D1:15:90:19
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ZglojUPe5Lpi_u7Y8FYmM9EVkBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.4.0-83.147.8.255
83.147.15.0/24
83.147.28.0/23
83.147.31.0/24
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:1f:8d:c9:7c:a7:f9:83:47:ca:87:fd:6d:44:50:0d:cc:78:
35:59:62:a5:aa:d4:24:b3:20:50:ec:38:ba:8e:62:ca:29:92:
fb:49:e8:4f:9a:30:f1:9f:be:08:03:a3:34:38:3a:e7:a0:9d:
aa:94:b5:48:9e:d5:e4:33:61:8f:f2:dc:1b:a8:12:bb:0e:88:
5f:a6:0b:15:00:c3:47:78:34:f4:2f:88:f2:f8:f1:37:6c:cf:
57:ae:eb:39:a8:0b:f7:0d:dc:a8:d0:ec:bd:52:8c:59:1c:74:
0c:54:bd:5e:97:52:6e:38:37:63:15:37:5f:32:ca:cc:1f:96:
32:f0:be:5c:d9:8c:8b:2d:65:e3:ea:c5:3e:af:3c:49:85:2f:
5d:a3:b6:b9:12:a5:a6:33:b9:d2:8f:8e:96:8e:ac:1d:91:6a:
c8:c9:a8:0b:40:e8:5f:d8:55:af:1c:5c:7f:1f:bd:07:3d:9e:
cf:72:86:b1:4e:4b:c4:07:22:70:e8:65:7d:5a:74:18:fb:da:
a6:c7:79:d0:10:1c:7a:e0:64:06:aa:39:88:da:e4:e8:80:6e:
93:e4:c7:3a:84:c3:9a:95:66:5a:63:6d:05:fb:d7:90:55:9c:
8a:14:5a:10:72:f3:90:a3:5a:f0:a4:d6:69:75:a4:77:4b:b4:
1e:31:f7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:32 2023 by rpki-client on console-ams.rpki-client.org