Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/vVLB4s6ChCJJaVf6nAF0l-QdMug.roa
File: vVLB4s6ChCJJaVf6nAF0l-QdMug.roa (raw, json)
Hash identifier: 6ymLnWP0KshjHf31iiBHD2IHNiXMVAziwimmF18KkN4=
Subject key identifier: BD:52:C1:E2:CE:82:84:22:49:69:57:FA:9C:01:74:97:E4:1D:32:E8
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0475AA8A
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/vVLB4s6ChCJJaVf6nAF0l-QdMug.roa
Signing time: Wed 18 May 2022 20:17:18 +0000
ROA not before: Wed 18 May 2022 20:17:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 83.147.44.0/22 maxlen: 24
83.147.40.0/22 maxlen: 24
83.147.48.0/22 maxlen: 24
83.147.60.0/23 maxlen: 24
83.147.4.0/22 maxlen: 24
83.147.8.0/21 maxlen: 24
83.147.16.0/20 maxlen: 24
83.147.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74820234 (0x475aa8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: May 18 20:17:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd52c1e2ce828422496957fa9c017497e41d32e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:99:96:4e:45:fd:55:2e:34:c4:dd:d6:be:2c:
03:c3:56:ae:2f:21:31:1e:a0:4f:c5:11:0b:ba:56:
9c:1d:d3:a9:d8:e8:9f:7b:bd:e7:a9:1b:7b:41:39:
4a:66:17:e2:b0:2f:c4:0c:b1:89:eb:59:0f:98:15:
91:e1:0d:d1:33:50:b6:57:c6:c0:05:97:5c:d1:32:
6c:26:45:63:da:8e:a9:57:c5:82:5b:43:ab:3b:75:
28:d4:2f:60:3c:fa:84:3b:05:c7:2f:a5:66:3a:cf:
df:7d:2a:84:12:40:20:0d:f6:87:ab:88:70:5c:fc:
f3:4b:7f:c1:c4:3a:ab:ab:66:02:6c:5a:10:1a:b1:
e2:cc:56:ff:3b:28:18:46:6a:17:46:f6:7a:41:48:
bf:54:1d:7a:ff:95:14:b6:b5:88:b5:7b:73:7e:19:
39:71:29:5c:28:c9:f3:6e:07:7b:95:62:82:ef:af:
ba:e1:93:68:24:ea:af:6a:34:17:27:ab:ea:5c:c5:
23:32:48:d1:94:7c:a1:c2:1d:f1:14:fd:b1:90:06:
b4:2e:83:42:ea:bc:06:5e:89:74:41:e4:41:05:92:
c3:95:4c:db:18:2b:c9:c1:92:da:cd:4e:75:0a:d5:
b2:0b:05:8f:ff:cc:26:94:ad:a1:da:d3:5c:9f:28:
96:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:52:C1:E2:CE:82:84:22:49:69:57:FA:9C:01:74:97:E4:1D:32:E8
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/vVLB4s6ChCJJaVf6nAF0l-QdMug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.4.0-83.147.35.255
83.147.40.0-83.147.51.255
83.147.60.0/23
Signature Algorithm: sha256WithRSAEncryption
51:5a:fd:40:86:2e:83:40:98:c0:1c:72:4e:ea:36:e6:f9:9c:
4f:9c:78:da:db:48:32:88:d6:47:bf:a5:44:83:a9:cf:e0:d1:
ac:ee:ed:9c:19:4b:88:8d:1e:7b:41:9e:50:45:9b:10:35:63:
8e:b7:9a:9c:ce:1d:56:dd:99:37:72:ba:81:98:24:b7:e7:23:
b7:d0:26:76:14:d3:cf:2d:ab:ea:03:87:ce:0e:3f:43:cf:a4:
a1:57:56:32:14:c4:22:97:34:e6:a3:fe:e8:91:9a:ee:6a:ed:
e6:0d:14:d4:72:f5:37:92:0a:a8:8f:46:75:ca:a9:1b:70:2b:
03:f6:74:02:7b:2b:57:b1:8b:99:f5:2e:9d:ed:60:84:35:81:
35:df:c3:29:49:47:71:36:47:f9:1a:9c:9c:a9:91:b6:cb:e4:
5d:e0:fc:97:b4:34:f3:2c:9c:1c:9e:67:1b:58:3d:77:29:4c:
61:3c:a4:79:c4:71:0e:f8:b2:f3:9a:da:f1:2c:cf:6f:cb:22:
bb:ce:e1:f6:16:5a:e1:62:6d:e8:87:ee:47:7d:f4:8e:ff:3f:
9a:47:a2:e8:f0:75:63:6b:62:25:cd:31:a9:b7:67:cd:1f:d5:
72:b0:44:6e:d5:df:9c:bd:ec:ac:80:ce:3c:36:6e:da:f3:9e:
d5:a6:7d:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org