Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/lBWWvEG7ePBS0I4NZi_a67bYxOE.roa
File: lBWWvEG7ePBS0I4NZi_a67bYxOE.roa (raw, json)
Hash identifier: LCX8a03Amj91c0T0V19+bw9jqD3k2kQSRZiTlQdyNg0=
Subject key identifier: 94:15:96:BC:41:BB:78:F0:52:D0:8E:0D:66:2F:DA:EB:B6:D8:C4:E1
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0474FF21
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/lBWWvEG7ePBS0I4NZi_a67bYxOE.roa
Signing time: Wed 18 May 2022 20:17:18 +0000
ROA not before: Wed 18 May 2022 20:17:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 83.147.20.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74776353 (0x474ff21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: May 18 20:17:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=941596bc41bb78f052d08e0d662fdaebb6d8c4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8c:41:4f:90:63:d7:e5:df:27:54:e2:65:5f:
40:cf:af:6f:4c:f9:6b:51:1a:99:d8:3a:b1:67:7e:
99:22:23:f5:ad:2c:a2:25:12:cd:be:44:c9:30:e6:
cf:f1:19:e4:cd:cc:f9:37:51:91:90:20:91:66:1d:
21:4e:d3:81:60:bd:d3:3f:58:7d:13:5f:f5:9b:c0:
1b:19:23:bd:89:c2:17:a9:cf:f4:3b:33:b9:ff:55:
4e:da:4d:ec:ce:8e:8d:39:0a:42:6c:d8:cf:b9:a7:
a5:7a:ee:fc:bd:93:30:34:37:70:e0:77:bd:31:40:
dd:0d:be:e1:3e:fe:b3:62:73:60:bd:c8:b9:ea:40:
d8:80:a9:4b:57:dc:03:e4:7d:f8:22:2a:3f:0f:66:
63:8f:b0:16:b3:41:ca:e6:c3:f6:1a:a5:eb:d4:e3:
b6:7e:b9:01:17:c5:a7:9b:82:86:f1:6c:9d:9b:71:
a8:ac:87:0b:19:71:44:a5:99:a1:a3:b8:ab:62:ea:
a9:3a:75:66:e2:ac:47:34:0c:1c:40:4f:f6:45:6a:
ec:95:96:c4:d2:1e:30:ee:e8:e4:dc:47:53:e9:64:
e1:bb:9f:d7:06:21:a3:1b:f2:96:17:06:0f:c8:b9:
6e:2b:52:c1:d6:d6:0e:64:50:1d:e6:30:1f:ac:83:
c7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:15:96:BC:41:BB:78:F0:52:D0:8E:0D:66:2F:DA:EB:B6:D8:C4:E1
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/lBWWvEG7ePBS0I4NZi_a67bYxOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.20.0/23
83.147.31.0/24
Signature Algorithm: sha256WithRSAEncryption
61:93:8c:89:64:c8:00:a1:2f:c9:b6:d4:f3:79:b1:21:39:44:
50:9e:74:b3:56:7c:85:b4:df:9f:5c:c2:42:0f:81:9f:5d:e7:
5e:e4:30:16:98:82:a7:b6:48:a3:f8:b3:55:04:87:74:52:60:
c1:9c:d8:55:4a:66:81:14:c1:44:bc:2a:8e:95:a2:a9:6a:9e:
04:49:04:2c:be:67:a1:29:17:22:ec:55:c7:39:8a:91:e0:bb:
b1:9a:20:14:59:fa:17:98:4c:57:19:a4:bd:68:9c:6d:ed:6c:
72:4e:4e:dc:44:8d:80:ff:a1:e6:17:c4:85:d7:09:4b:fd:89:
1d:e2:8d:61:52:89:35:28:8e:af:0c:59:d8:24:b0:7e:cc:f8:
6d:1c:e6:b0:28:10:42:75:91:ae:26:1c:0c:74:3e:d6:8b:a2:
a9:fb:1e:0d:ec:d8:d5:a8:c3:23:74:92:42:bd:2a:4f:b7:7a:
83:f3:9c:36:e0:ca:65:a6:a7:c8:f4:94:c7:4a:87:6c:60:94:
02:34:d4:5a:61:e1:7d:ae:ed:31:04:7b:41:03:32:e0:75:96:
1a:2c:65:02:44:6f:69:08:06:d6:f6:2c:49:47:60:79:af:1c:
a7:4b:b1:79:d9:74:1f:58:0e:8f:db:ad:54:c7:92:cb:05:21:
99:f8:1f:6d
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBHT/ITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MTkzZmZlOWRiMzc2MjZiMTNmODVkN2NjNDU3YWFkNWMxZjMwYzlmMB4XDTIyMDUx
ODIwMTcxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTQxNTk2YmM0MWJi
NzhmMDUyZDA4ZTBkNjYyZmRhZWJiNmQ4YzRlMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMeMQU+QY9fl3ydU4mVfQM+vb0z5a1Eamdg6sWd+mSIj9a0s
oiUSzb5EyTDmz/EZ5M3M+TdRkZAgkWYdIU7TgWC90z9YfRNf9ZvAGxkjvYnCF6nP
9Dszuf9VTtpN7M6OjTkKQmzYz7mnpXru/L2TMDQ3cOB3vTFA3Q2+4T7+s2JzYL3I
uepA2ICpS1fcA+R9+CIqPw9mY4+wFrNByubD9hql69Tjtn65ARfFp5uChvFsnZtx
qKyHCxlxRKWZoaO4q2LqqTp1ZuKsRzQMHEBP9kVq7JWWxNIeMO7o5NxHU+lk4buf
1wYhoxvylhcGD8i5bitSwdbWDmRQHeYwH6yDx8kCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSUFZa8Qbt48FLQjg1mL9rrttjE4TAfBgNVHSMEGDAWgBSBk//p2zdiaxP4
XXzEV6rVwfMMnzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2daUF82ZHMzWW1zVC1GMTh4RmVxMWNIekRKOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTcvNzZiYzFlLWI2ZjQtNDA4YS1iYjg5LTA4ZDEyNzBjMmU3MS8x
L2xCV1d2RUc3ZVBCUzBJNE5aaV9hNjdiWXhPRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcv
NzZiYzFlLWI2ZjQtNDA4YS1iYjg5LTA4ZDEyNzBjMmU3MS8xL2daUF82ZHMzWW1z
VC1GMTh4RmVxMWNIekRKOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAVOTFAMEAFOTHzANBgkqhkiG9w0B
AQsFAAOCAQEAYZOMiWTIAKEvybbU83mxITlEUJ50s1Z8hbTfn1zCQg+Bn13nXuQw
FpiCp7ZIo/izVQSHdFJgwZzYVUpmgRTBRLwqjpWiqWqeBEkELL5noSkXIuxVxzmK
keC7sZogFFn6F5hMVxmkvWicbe1sck5O3ESNgP+h5hfEhdcJS/2JHeKNYVKJNSiO
rwxZ2CSwfsz4bRzmsCgQQnWRriYcDHQ+1ouiqfseDezY1ajDI3SSQr0qT7d6g/Oc
NuDKZaanyPSUx0qHbGCUAjTUWmHhfa7tMQR7QQMy4HWWGixlAkRvaQgG1vYsSUdg
ea8cp0uxedl0H1gOj9utVMeSywUhmfgfbQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:33 2023 by rpki-client on console-ams.rpki-client.org