Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/jBgkYv6flZdqiMgIVHOLS-F4SyE.roa
File: jBgkYv6flZdqiMgIVHOLS-F4SyE.roa (raw, json)
Hash identifier: 2y0qyuim67ceStT4AXY+dJRte6/m/kR6HWLpuzVt/io=
Subject key identifier: 8C:18:24:62:FE:9F:95:97:6A:88:C8:08:54:73:8B:4B:E1:78:4B:21
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0327102C
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/jBgkYv6flZdqiMgIVHOLS-F4SyE.roa
Signing time: Tue 11 Jan 2022 05:15:46 +0000
ROA not before: Tue 11 Jan 2022 05:15:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 83.147.62.0/24 maxlen: 24
83.147.14.0/24 maxlen: 24
83.147.15.0/24 maxlen: 24
83.147.20.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52891692 (0x327102c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 11 05:15:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c182462fe9f95976a88c80854738b4be1784b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:78:e4:47:69:2d:92:d5:b8:ec:c9:8b:3f:
0d:f9:2b:62:fc:d4:38:f4:57:8a:6a:63:18:df:1e:
ae:80:e0:d5:7a:6c:1b:3e:08:32:c6:d4:ab:07:b1:
14:e5:6a:ea:34:02:c1:7f:9a:b7:54:ac:17:16:e8:
e9:69:e1:d6:70:a8:6a:f6:30:0f:37:23:5f:b9:37:
08:f4:25:00:e9:13:4f:e9:b0:77:ea:62:38:9c:92:
4b:3e:6c:48:7f:62:ed:f7:c1:29:a6:da:db:66:26:
77:80:e0:ee:ae:8e:1a:0c:4c:6e:f5:ca:e4:29:a2:
19:cf:3c:d2:ec:4c:89:f7:14:e0:8b:51:9a:ff:96:
89:d4:82:81:5c:8b:61:90:81:a3:5a:ed:50:ed:cf:
9a:04:42:c8:f8:7c:a5:0c:09:cd:f2:39:cc:97:01:
6c:3c:0a:42:eb:8a:29:0b:0f:73:a6:d5:8b:8b:c4:
70:8b:1c:14:8c:ef:46:ea:08:60:f5:37:f6:3d:3c:
e7:c0:da:c3:74:cf:c7:30:2f:19:6b:e3:5c:f8:b5:
06:30:7b:68:da:d7:32:16:8e:9f:df:4b:31:33:fe:
47:31:f0:6c:14:0b:d0:66:04:d5:cd:da:41:6a:04:
fb:7a:58:cf:58:d5:dc:e6:81:49:91:1f:f3:a3:70:
dd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:18:24:62:FE:9F:95:97:6A:88:C8:08:54:73:8B:4B:E1:78:4B:21
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/jBgkYv6flZdqiMgIVHOLS-F4SyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.14.0/23
83.147.20.0/23
83.147.31.0/24
83.147.62.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ad:cb:d0:10:50:9a:55:80:46:7a:90:50:9a:3e:d8:d3:1c:
13:ad:94:aa:e8:2d:0b:86:c6:be:0a:a5:28:49:f0:7a:cd:99:
04:59:65:cb:ed:04:01:4f:1b:13:12:8e:a7:c5:87:97:31:56:
4e:2d:03:55:ae:6c:38:93:29:01:73:8a:83:f8:55:df:20:cc:
22:4b:9d:73:36:02:cd:de:d4:66:1c:12:4b:b7:e2:da:3f:05:
19:ce:8d:63:47:82:6f:45:b0:5d:0b:a1:e5:23:2e:a0:68:07:
de:c0:c1:f8:38:98:8d:1f:cd:5b:2c:6f:ac:e9:1d:ea:97:86:
0e:5f:35:31:ee:46:60:b8:90:ba:7b:7b:5e:b4:88:02:72:57:
48:d2:b3:56:29:0d:ec:73:98:16:ed:d7:a7:33:66:66:84:28:
de:fe:68:11:92:1a:85:70:e2:73:08:2f:f8:e2:18:b0:ff:1a:
77:eb:99:6b:aa:1a:ce:8f:b3:a4:94:ce:b0:b0:40:8f:6f:d3:
4c:e1:54:fb:ee:c7:81:d7:5d:77:c3:c7:d0:3a:4f:2a:31:2b:
52:2f:a3:e3:b0:e8:e2:ba:76:84:12:03:a3:fb:26:f2:ed:d1:
cd:c2:c4:64:dd:49:1a:93:90:43:3f:12:5a:19:33:32:71:80:
9f:30:e1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org