Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/rRijAajZPyerbYC8pmRkPdEdpE4.roa
File: rRijAajZPyerbYC8pmRkPdEdpE4.roa (raw, json)
Hash identifier: gPqB6BKgy9lNnYYRgkdAah0/TXfLuFumVEN9RWbraKI=
Subject key identifier: AD:18:A3:01:A8:D9:3F:27:AB:6D:80:BC:A6:64:64:3D:D1:1D:A4:4E
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0184FABD99C26E53A91B55DBFE21A6B32FDE
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/rRijAajZPyerbYC8pmRkPdEdpE4.roa
Signing time: Sat 10 Dec 2022 06:34:00 +0000
ROA not before: Sat 10 Dec 2022 06:34:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 83.147.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fa:bd:99:c2:6e:53:a9:1b:55:db:fe:21:a6:b3:2f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Dec 10 06:34:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad18a301a8d93f27ab6d80bca664643dd11da44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:32:ab:cf:b0:2e:9a:92:92:c6:4c:f4:24:34:
23:db:c0:a2:86:5f:cb:6d:1e:22:5a:e0:be:1f:30:
59:58:12:85:ec:f2:16:a5:66:24:5f:e0:c9:b2:1d:
03:f9:48:88:6d:dd:b0:00:c8:bc:90:bb:77:2d:28:
8e:26:71:90:16:8d:fc:5d:93:08:62:59:c0:45:c3:
a4:9e:5b:db:93:ae:36:48:a2:0d:6f:9c:1b:93:04:
1d:06:f7:32:ef:10:9b:34:f7:37:0d:0c:39:13:a8:
52:59:b4:6b:50:d5:66:69:6a:67:fc:0b:3f:63:24:
9f:25:08:3f:44:b1:63:39:19:b1:3d:a1:75:ae:0d:
52:8d:c4:70:a6:0b:76:16:7c:fb:91:e7:56:a6:8f:
56:16:64:59:1a:e3:b3:ba:f9:86:44:e5:fd:c8:b8:
18:a3:3a:23:0e:88:81:1a:f3:3f:5f:dc:c5:4b:2f:
2e:86:5c:8f:8e:cb:83:35:76:11:08:2a:95:04:47:
b9:91:ed:76:89:0d:3d:18:bc:8d:38:7e:ce:63:8d:
6d:60:b6:75:51:75:a1:79:7c:f1:2f:e2:96:86:2e:
ba:6d:c1:a3:b6:cf:59:88:70:53:97:fb:e3:ba:7a:
18:85:be:1f:68:eb:a4:e1:4c:b5:3a:8a:c2:5c:3e:
ed:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:18:A3:01:A8:D9:3F:27:AB:6D:80:BC:A6:64:64:3D:D1:1D:A4:4E
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/rRijAajZPyerbYC8pmRkPdEdpE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.22.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:d5:20:2d:52:61:80:0d:d1:70:0c:c7:ad:4f:d1:26:41:1a:
ea:93:f5:90:22:a7:13:e8:21:11:d9:70:9f:f1:20:67:ae:33:
58:b5:49:fa:cf:44:4c:90:63:eb:cf:44:79:4c:88:1a:24:74:
75:3e:a0:9a:5f:95:11:47:bc:59:4f:fe:a4:a2:80:74:22:ab:
0f:8d:24:85:b0:1a:27:73:20:13:a4:2f:b5:ee:57:59:29:4b:
ec:6b:af:4e:a3:f7:24:ef:88:64:a6:7e:57:f2:40:8a:fb:ed:
90:10:1e:5e:3e:3a:50:6e:52:4e:cb:34:ba:49:7e:06:e7:85:
d9:a6:81:95:12:60:73:b7:ca:7c:1f:fe:c7:3c:63:2b:19:58:
c2:bd:73:b1:ac:be:e6:09:f3:3d:17:b2:43:02:44:26:be:0d:
97:e6:9f:d1:cb:b7:c6:fa:9c:cb:d2:f8:a2:6f:17:f8:2b:e6:
19:5d:ec:3a:21:79:f6:d4:a8:1d:21:70:7c:0f:7d:6a:84:f2:
f9:b9:bc:c0:80:42:5a:99:e0:33:57:0c:d5:3e:81:4d:b8:49:
eb:7e:9f:5d:31:e6:e1:9d:d8:09:a7:e9:fa:94:f4:93:03:05:
02:ce:c4:3f:84:c7:fb:92:d0:9e:7e:36:56:b8:b4:0c:4f:08:
22:1a:16:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:50 2024 by rpki-client on console-fra.rpki-client.org