Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/grRArV7aWqUfH4BRPowjIrZaqKQ.roa
File: grRArV7aWqUfH4BRPowjIrZaqKQ.roa (raw, json)
Hash identifier: PhUG0JC8zH0lXQtc3dtoxUFSuf59yLjwrkfAzaXGkhU=
Subject key identifier: 82:B4:40:AD:5E:DA:5A:A5:1F:1F:80:51:3E:8C:23:22:B6:5A:A8:A4
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0181DBFBD635C1F5325326A1C9D9235AFD61
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/grRArV7aWqUfH4BRPowjIrZaqKQ.roa
Signing time: Fri 08 Jul 2022 04:05:23 +0000
ROA not before: Fri 08 Jul 2022 04:05:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 83.147.0.0/22 maxlen: 24
83.147.24.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:db:fb:d6:35:c1:f5:32:53:26:a1:c9:d9:23:5a:fd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jul 8 04:05:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82b440ad5eda5aa51f1f80513e8c2322b65aa8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:aa:2e:0e:00:46:16:9c:89:29:1d:d2:66:
fc:27:f0:44:d9:86:c4:eb:9d:5d:e8:0e:bb:d8:fa:
f6:86:28:ff:2b:ef:8a:97:99:d6:97:d9:6b:6c:57:
ec:b7:9d:9d:55:2f:a9:e4:1d:da:9a:18:12:49:ab:
67:8d:ea:bf:3e:93:e4:90:82:44:a5:32:c7:ff:dc:
4d:c7:d0:d6:0d:ec:1e:06:47:d0:8f:11:05:83:05:
15:0d:ad:9c:44:59:e5:e4:69:da:1e:ed:a6:a8:cc:
a5:f8:54:7e:21:91:f6:ee:bb:06:42:0f:11:ee:f2:
fd:2d:cf:8f:04:2f:89:f5:d3:eb:7e:3b:0d:8d:44:
69:86:c9:40:73:42:2e:fb:c9:0a:2b:a3:18:6b:51:
95:2a:a8:76:b9:42:79:88:d7:59:18:6c:4c:68:99:
ec:ac:df:a7:2b:ef:75:d2:03:30:5d:24:d9:57:e7:
f8:85:05:36:68:25:85:78:73:6f:5a:33:7f:ef:d0:
ce:cd:d8:03:08:18:9f:55:b6:df:80:50:fb:84:c3:
12:05:e0:19:d4:11:44:ce:a6:3f:bb:26:0c:aa:15:
4d:7c:b2:9a:37:69:24:19:06:68:5e:9c:63:16:39:
10:ad:65:21:ed:df:2a:39:35:1a:4b:55:e4:76:0c:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B4:40:AD:5E:DA:5A:A5:1F:1F:80:51:3E:8C:23:22:B6:5A:A8:A4
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/grRArV7aWqUfH4BRPowjIrZaqKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.0.0/22
83.147.24.0/22
Signature Algorithm: sha256WithRSAEncryption
13:5a:7f:d0:9b:d0:25:97:2b:7b:58:3c:f1:ec:c3:6c:10:88:
48:c2:02:db:42:5a:42:d8:b9:98:fa:cc:ed:a2:98:45:4b:ed:
5e:c7:ad:3d:53:1d:4d:f1:b0:38:31:1b:20:08:fc:a4:72:5a:
11:24:87:62:00:89:f9:02:78:35:84:84:f2:b1:fe:62:b9:fc:
36:70:fa:fa:6f:60:82:cd:fc:f6:e1:28:ce:f7:49:9f:cd:34:
b4:9d:42:7c:7c:f7:e1:c0:05:18:58:c8:0d:9e:46:ec:05:32:
97:93:1f:43:03:73:99:55:25:38:1f:72:21:9e:05:63:96:e4:
75:b2:7e:a3:00:6b:99:a1:62:75:bb:34:b9:a1:20:3f:21:f1:
a2:fa:51:97:0c:d4:b1:ce:1f:dc:86:54:44:d4:a4:85:37:68:
7e:a3:7c:7d:1e:d1:cc:4d:4e:68:c7:a7:25:0a:a8:cb:a7:40:
55:ef:1a:57:f9:34:44:3b:ae:a1:dd:7f:c7:21:a0:d1:31:9d:
99:4b:fa:ae:4b:c0:80:ae:b3:fc:d4:ff:98:06:a0:c6:f1:37:
fd:f1:3d:57:a3:c9:4e:74:17:16:f8:38:9e:23:ed:d8:47:67:
de:48:0f:51:f2:b3:7f:fc:a0:a9:2e:cd:b5:57:90:33:e3:71:
b9:d8:95:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org