Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/aHL6TTYU6i5DscSKFmL-F79yW20.roa
File: aHL6TTYU6i5DscSKFmL-F79yW20.roa (raw, json)
Hash identifier: dlX3evUWLI2JxGkGgxvwJ7THguxN7IToRdj+P0bHAmY=
Subject key identifier: 68:72:FA:4D:36:14:EA:2E:43:B1:C4:8A:16:62:FE:17:BF:72:5B:6D
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0181DBFAEC1CAAC1DC848D7F24F4F1E8A50E
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/aHL6TTYU6i5DscSKFmL-F79yW20.roa
Signing time: Fri 08 Jul 2022 04:04:23 +0000
ROA not before: Fri 08 Jul 2022 04:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 83.147.44.0/22 maxlen: 24
83.147.40.0/22 maxlen: 24
83.147.60.0/23 maxlen: 24
83.147.16.0/20 maxlen: 24
83.147.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:db:fa:ec:1c:aa:c1:dc:84:8d:7f:24:f4:f1:e8:a5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jul 8 04:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6872fa4d3614ea2e43b1c48a1662fe17bf725b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7e:93:90:2e:f8:77:ca:03:f3:09:f5:5f:91:
11:90:74:32:0c:42:9d:a3:2f:e6:9f:79:b7:e7:5f:
05:15:43:d0:86:8a:46:04:78:8d:b0:51:ec:de:ec:
ba:17:09:b5:33:43:92:1d:da:ba:aa:ad:62:37:46:
9b:26:fc:45:85:11:ae:97:9d:0b:46:00:46:51:18:
9d:b4:70:81:ca:f8:c9:26:55:a9:ea:7c:df:06:5d:
17:e2:0c:2a:8e:f9:00:c0:81:c2:1d:05:6c:9e:16:
05:f5:f3:77:1c:05:f7:5b:1f:fd:34:e1:59:00:7d:
a9:0e:87:c7:6b:8f:9a:97:39:88:c3:51:60:73:3f:
c3:a4:97:46:53:8f:40:63:5e:e1:c8:ae:69:6a:17:
cc:d6:6c:31:88:16:f6:30:f3:c3:ff:28:db:41:80:
b3:cf:fa:ab:bf:b0:14:4d:96:c7:3a:50:e1:af:64:
02:66:e7:74:14:94:54:36:20:c0:c3:7b:66:d0:58:
f0:06:58:ab:3a:f6:88:93:b4:78:b5:56:13:09:40:
f7:95:16:ea:9b:ab:44:0e:2c:8b:e2:db:3f:b7:c5:
c9:72:67:ec:be:15:10:b0:af:8a:0f:a0:9e:65:f3:
20:c0:2d:c5:e1:46:34:9a:4e:80:49:06:69:f3:b1:
68:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:72:FA:4D:36:14:EA:2E:43:B1:C4:8A:16:62:FE:17:BF:72:5B:6D
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/aHL6TTYU6i5DscSKFmL-F79yW20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.16.0-83.147.35.255
83.147.40.0/21
83.147.60.0/23
Signature Algorithm: sha256WithRSAEncryption
79:a7:ef:21:e8:c2:e5:0f:d1:bb:dd:fb:e0:15:d0:08:8c:9a:
8d:51:1f:1c:17:2b:b9:34:08:40:86:57:17:89:23:30:8f:c5:
c0:64:b5:7c:f8:50:a6:08:b4:91:f0:19:2a:70:83:75:fc:3f:
07:47:29:e8:3f:af:1a:da:23:be:c3:11:89:97:49:ee:c1:a5:
24:90:ec:75:cd:7c:b4:aa:06:da:32:be:d7:51:7a:f9:64:c8:
cb:6d:93:64:c2:a6:d5:aa:72:7c:93:47:f5:2f:cf:21:2b:ae:
bb:a9:4d:b6:ea:42:da:32:a9:13:bd:47:79:ac:fb:e6:3e:73:
fd:11:7c:fb:ec:b9:c4:c8:96:e2:88:27:44:b2:49:27:17:06:
25:be:fc:51:1c:67:c9:44:d8:c1:15:c1:e7:54:5d:59:d6:cc:
5f:22:a4:61:e3:36:36:01:e7:dd:ac:35:be:f9:70:48:4c:c3:
b5:a4:61:57:9b:b6:c5:6b:ad:57:39:07:da:20:fd:4b:38:62:
8b:95:40:44:7f:e6:ad:79:fd:56:de:71:8c:9a:ba:69:4c:66:
0b:ac:e9:5e:92:91:2b:fa:4f:07:55:dc:87:57:d9:d9:3a:e2:
ba:de:3f:aa:6d:46:81:44:b0:38:be:7f:a7:07:ea:4b:a5:3a:
17:33:86:ee
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYHb+uwcqsHchI1/JPTx6KUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjIwNzA4MDQwNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODcyZmE0ZDM2MTRlYTJlNDNiMWM0OGExNjYyZmUxN2JmNzI1YjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln6TkC74d8oD8wn1X5ERkHQyDEKd
oy/mn3m3518FFUPQhopGBHiNsFHs3uy6Fwm1M0OSHdq6qq1iN0abJvxFhRGul50L
RgBGURidtHCByvjJJlWp6nzfBl0X4gwqjvkAwIHCHQVsnhYF9fN3HAX3Wx/9NOFZ
AH2pDofHa4+alzmIw1Fgcz/DpJdGU49AY17hyK5pahfM1mwxiBb2MPPD/yjbQYCz
z/qrv7AUTZbHOlDhr2QCZud0FJRUNiDAw3tm0FjwBlirOvaIk7R4tVYTCUD3lRbq
m6tEDiyL4ts/t8XJcmfsvhUQsK+KD6CeZfMgwC3F4UY0mk6ASQZp87FomQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFGhy+k02FOouQ7HEihZi/he/clttMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvYUhMNlRUWVU2aTVEc2NTS0ZtTC1GNzl5VzIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBARTkxAD
BAJTkyADBANTkygDBAFTkzwwDQYJKoZIhvcNAQELBQADggEBAHmn7yHowuUP0bvd
++AV0AiMmo1RHxwXK7k0CECGVxeJIzCPxcBktXz4UKYItJHwGSpwg3X8PwdHKeg/
rxraI77DEYmXSe7BpSSQ7HXNfLSqBtoyvtdRevlkyMttk2TCptWqcnyTR/UvzyEr
rrupTbbqQtoyqRO9R3ms++Y+c/0RfPvsucTIluKIJ0SySScXBiW+/FEcZ8lE2MEV
wedUXVnWzF8ipGHjNjYB592sNb75cEhMw7WkYVebtsVrrVc5B9og/Us4YouVQER/
5q15/VbecYyaumlMZgus6V6SkSv6TwdV3IdX2dk64rreP6ptRoFEsDi+f6cH6kul
Ohczhu4=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:32 2023 by rpki-client on console-ams.rpki-client.org