Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/kZZhjzjxtlmga99FSkoomP8HW9c.roa
File: kZZhjzjxtlmga99FSkoomP8HW9c.roa (raw, json)
Hash identifier: uT0QxBXfNTY8DrG2vw3q9JVF30E5G98O9Wc3McPrL7A=
Subject key identifier: 91:96:61:8F:38:F1:B6:59:A0:6B:DF:45:4A:4A:28:98:FF:07:5B:D7
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0486C0A0
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/kZZhjzjxtlmga99FSkoomP8HW9c.roa
Signing time: Thu 26 May 2022 04:20:13 +0000
ROA not before: Thu 26 May 2022 04:20:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60602
IP address blocks: 83.147.36.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75940000 (0x486c0a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: May 26 04:20:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9196618f38f1b659a06bdf454a4a2898ff075bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:34:03:fe:95:6c:84:0b:d9:c1:3d:60:a1:
25:61:9c:14:f2:14:7d:bd:c1:00:48:5a:ea:41:87:
b4:1b:7f:be:bf:ac:22:cb:3b:27:73:9a:6d:cb:f8:
54:8d:a0:4f:3f:48:5e:99:27:0c:29:7d:5b:01:c4:
8c:fc:52:8b:ea:7e:22:16:70:c3:4d:7e:a7:70:19:
5a:eb:99:e7:67:52:37:52:52:7f:c0:f4:3d:ae:b9:
15:59:8a:1e:18:b0:95:20:c1:88:66:5d:26:31:6f:
20:af:33:1b:7f:be:f4:8e:77:bd:ed:ea:67:2c:8c:
5b:c0:25:60:0c:55:69:f6:cd:ac:3c:c2:c3:9d:b5:
5f:90:e6:7d:ef:49:ad:df:28:7a:e6:5c:8e:40:9e:
16:2f:78:87:9c:e1:63:3d:57:ba:71:33:48:c8:12:
97:11:f2:da:46:02:54:ee:dd:78:e9:20:82:32:37:
14:04:6a:8c:8f:bf:91:96:1f:d3:44:c6:f1:3a:81:
3d:13:67:dc:1f:6e:74:78:c5:72:a0:c3:a8:b0:51:
56:f0:b5:8f:97:08:f0:86:9c:33:27:18:89:bf:80:
40:3d:b1:bc:69:cd:d8:17:51:cf:4c:c8:0d:9f:41:
88:b4:4b:57:74:d5:67:25:61:cb:7c:e4:b2:24:21:
ce:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:96:61:8F:38:F1:B6:59:A0:6B:DF:45:4A:4A:28:98:FF:07:5B:D7
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/kZZhjzjxtlmga99FSkoomP8HW9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.36.0/22
Signature Algorithm: sha256WithRSAEncryption
26:df:b9:c6:0d:5b:3b:54:c1:10:bd:df:7f:76:44:7b:cb:83:
e3:20:73:48:b4:a5:23:e0:33:fb:a3:89:7f:fa:0a:b9:e5:27:
ec:3d:ec:72:5d:99:22:fb:90:2f:c5:66:dd:24:3c:15:95:8d:
ef:8b:b3:02:bf:6c:69:f7:47:a5:10:05:dd:19:cb:e7:a3:42:
39:27:13:a4:33:b2:f8:9d:af:11:d5:fe:c8:bd:e7:0c:7b:78:
2f:08:71:40:c7:8c:a1:c1:48:17:96:7a:60:4c:b2:15:04:19:
cc:14:33:33:3c:e7:12:64:1a:c8:18:26:6d:57:4f:eb:e2:2b:
db:b3:69:18:c4:8a:0a:04:96:78:9e:79:91:44:95:89:07:fd:
43:fe:c1:27:c6:64:8f:46:01:48:dd:0a:14:c2:99:a1:5b:9a:
aa:5f:ab:39:99:68:99:54:cb:c0:ee:53:3e:a0:d5:f9:7d:65:
32:ee:ea:93:8b:c4:e8:c6:dc:b8:38:9b:c6:99:05:70:e9:31:
0c:bd:12:e4:7c:9d:90:4e:49:96:e6:0f:eb:d2:85:89:a3:d3:
34:bd:a7:55:0c:9e:47:20:6c:c2:24:2f:f7:66:f2:ac:f5:13:
c3:a0:b9:a4:05:5b:f6:2b:91:9b:8b:ad:ea:ab:b2:6e:6f:71:
6b:47:ee:8d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBIbAoDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MTkzZmZlOWRiMzc2MjZiMTNmODVkN2NjNDU3YWFkNWMxZjMwYzlmMB4XDTIyMDUy
NjA0MjAxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTE5NjYxOGYzOGYx
YjY1OWEwNmJkZjQ1NGE0YTI4OThmZjA3NWJkNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALRnNAP+lWyEC9nBPWChJWGcFPIUfb3BAEha6kGHtBt/vr+s
Iss7J3Oabcv4VI2gTz9IXpknDCl9WwHEjPxSi+p+IhZww01+p3AZWuuZ52dSN1JS
f8D0Pa65FVmKHhiwlSDBiGZdJjFvIK8zG3++9I53ve3qZyyMW8AlYAxVafbNrDzC
w521X5Dmfe9Jrd8oeuZcjkCeFi94h5zhYz1XunEzSMgSlxHy2kYCVO7deOkggjI3
FARqjI+/kZYf00TG8TqBPRNn3B9udHjFcqDDqLBRVvC1j5cI8IacMycYib+AQD2x
vGnN2BdRz0zIDZ9BiLRLV3TVZyVhy3zksiQhzi8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSRlmGPOPG2WaBr30VKSiiY/wdb1zAfBgNVHSMEGDAWgBSBk//p2zdiaxP4
XXzEV6rVwfMMnzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2daUF82ZHMzWW1zVC1GMTh4RmVxMWNIekRKOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTcvNzZiYzFlLWI2ZjQtNDA4YS1iYjg5LTA4ZDEyNzBjMmU3MS8x
L2taWmhqemp4dGxtZ2E5OUZTa29vbVA4SFc5Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcv
NzZiYzFlLWI2ZjQtNDA4YS1iYjg5LTA4ZDEyNzBjMmU3MS8xL2daUF82ZHMzWW1z
VC1GMTh4RmVxMWNIekRKOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlOTJDANBgkqhkiG9w0BAQsFAAOC
AQEAJt+5xg1bO1TBEL3ff3ZEe8uD4yBzSLSlI+Az+6OJf/oKueUn7D3scl2ZIvuQ
L8Vm3SQ8FZWN74uzAr9safdHpRAF3RnL56NCOScTpDOy+J2vEdX+yL3nDHt4Lwhx
QMeMocFIF5Z6YEyyFQQZzBQzMzznEmQayBgmbVdP6+Ir27NpGMSKCgSWeJ55kUSV
iQf9Q/7BJ8Zkj0YBSN0KFMKZoVuaql+rOZlomVTLwO5TPqDV+X1lMu7qk4vE6Mbc
uDibxpkFcOkxDL0S5HydkE5JluYP69KFiaPTNL2nVQyeRyBswiQv92byrPUTw6C5
pAVb9iuRm4ut6quybm9xa0fujQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org