Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/k50w5MT1bEihvzxcg5X4YjJKASg.roa
File: k50w5MT1bEihvzxcg5X4YjJKASg.roa (raw, json)
Hash identifier: 4cRBxg+dAfKQk79yFYWPk+vVl5EyhyYZdtqETZKf1b0=
Subject key identifier: 93:9D:30:E4:C4:F5:6C:48:A1:BF:3C:5C:83:95:F8:62:32:4A:01:28
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018487E2971064CD6420EA67A8ADFAC4228D
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/k50w5MT1bEihvzxcg5X4YjJKASg.roa
Signing time: Thu 17 Nov 2022 23:18:04 +0000
ROA not before: Thu 17 Nov 2022 23:18:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 83.147.13.0/24 maxlen: 24
83.147.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:87:e2:97:10:64:cd:64:20:ea:67:a8:ad:fa:c4:22:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 17 23:18:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=939d30e4c4f56c48a1bf3c5c8395f862324a0128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:94:10:c3:c9:08:20:fa:9d:49:a2:dc:c2:
10:3b:88:45:85:7c:ab:5d:81:5f:3a:c5:58:66:81:
90:35:ec:53:be:85:7b:3e:4e:ea:d3:c8:f1:2f:2a:
d3:33:80:af:4a:08:50:d6:94:6e:40:8e:48:40:3a:
a2:f1:d1:fd:9b:bf:ad:50:b8:29:39:5f:de:65:bb:
14:4f:66:62:fa:67:1e:51:f1:77:96:2a:e1:86:c2:
c5:5f:4e:90:e4:6b:d7:56:08:fc:57:cd:02:49:d2:
75:8e:1c:4a:a4:5a:45:e7:c2:60:a6:d6:1a:a2:f3:
81:9e:a5:20:8d:47:4d:d0:16:04:14:a7:97:65:6f:
27:a2:c2:10:c3:46:cc:bc:d9:1f:d1:6f:e4:78:d0:
30:a0:1f:87:1a:cb:72:29:d5:8b:ac:46:cf:87:81:
aa:96:85:df:d3:bb:b1:8f:c7:b2:a7:e0:5f:2f:4b:
31:ce:ed:1f:56:18:ac:44:0b:aa:47:b8:78:21:e1:
98:85:23:88:6e:ae:2a:8c:7c:ae:69:73:3e:60:25:
94:07:01:c6:55:db:0c:d4:96:e0:cd:bd:2b:52:9c:
be:85:2a:34:9a:9b:75:2a:90:e5:a8:ad:5e:57:6d:
84:46:bc:c7:7e:d6:5e:5b:12:93:9d:dd:35:c0:91:
3c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9D:30:E4:C4:F5:6C:48:A1:BF:3C:5C:83:95:F8:62:32:4A:01:28
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/k50w5MT1bEihvzxcg5X4YjJKASg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.13.0/24
83.147.23.0/24
Signature Algorithm: sha256WithRSAEncryption
10:78:0a:85:c3:c8:62:2f:41:fd:c9:5b:cc:f5:5f:b6:4e:14:
25:63:4e:8b:26:86:68:bb:d4:28:43:e0:42:6d:88:a9:a6:44:
62:45:e7:7b:0b:33:0d:06:3e:96:ca:fc:be:44:39:78:e2:98:
7e:b5:da:3a:ef:4f:02:88:e5:fc:14:5c:38:07:52:2c:36:ef:
fb:f3:3f:78:cd:f5:c3:21:d1:62:a9:02:00:d4:bc:b9:a8:87:
e1:af:bb:ce:ba:d1:ba:c5:8a:cb:54:f9:38:53:24:e7:2b:3d:
83:75:46:09:eb:5e:65:52:2c:09:77:9d:82:87:bc:33:11:55:
19:52:24:e8:ac:db:68:ae:3b:78:f4:06:0d:98:d5:ad:ba:eb:
40:e4:18:1f:dd:57:80:ad:ce:85:e5:00:29:24:7f:cb:4b:8f:
a5:85:c8:1d:f0:68:07:01:30:73:49:cd:4d:9f:44:c4:8b:f5:
a6:f4:ea:64:dd:31:31:e9:cc:82:b0:a8:81:5e:6a:87:ab:e0:
fb:cf:47:4a:68:c1:38:d7:44:c2:eb:92:27:0f:41:07:d6:cc:
bf:66:b5:2e:87:63:3c:cc:4f:a3:2f:fc:5d:79:73:da:ee:02:
b7:25:80:9c:21:95:c6:07:5b:be:63:aa:43:bd:dc:20:2e:21:
a5:a7:15:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org