Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/Ibu6Ti8KU69G87lxCsdoB8JhNDw.roa
File: Ibu6Ti8KU69G87lxCsdoB8JhNDw.roa (raw, json)
Hash identifier: 4rBonHp+ap+uQfym5JXY8WtSJOt/zxoqAg00iLM97tI=
Subject key identifier: 21:BB:BA:4E:2F:0A:53:AF:46:F3:B9:71:0A:C7:68:07:C2:61:34:3C
Certificate issuer: /CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Certificate serial: 01DA5526
Authority key identifier: 47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/Ibu6Ti8KU69G87lxCsdoB8JhNDw.roa
Signing time: Sat 01 Jan 2022 13:55:11 +0000
ROA not before: Sat 01 Jan 2022 13:55:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31438
IP address blocks: 83.137.64.0/21 maxlen: 21
212.89.192.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31085862 (0x1da5526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Validity
Not Before: Jan 1 13:55:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21bbba4e2f0a53af46f3b9710ac76807c261343c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:17:8e:77:60:a9:f4:f9:f0:b7:4a:ac:85:1b:
f8:3e:84:b9:2c:30:a4:d3:6b:3d:ad:65:d8:b4:90:
0e:de:72:d1:ae:e9:13:6e:a3:47:23:ee:3d:76:29:
86:6a:57:eb:51:c1:f8:b5:21:6c:46:c8:c2:bb:02:
e8:6e:09:d2:5f:7f:7d:97:10:d3:f8:ad:c0:60:17:
37:06:3e:42:83:a0:b1:53:95:55:03:05:d7:ad:56:
f9:b0:1d:34:e6:87:a9:0a:c8:ee:92:26:89:b6:12:
bf:f3:e8:df:8c:e7:c8:4c:6c:ff:11:6c:0e:a5:54:
97:69:d0:d7:ee:b3:08:45:e3:5e:df:cd:ee:11:c3:
2e:ba:8a:54:ac:a1:ee:97:1c:f1:8a:d5:05:d4:07:
87:fa:a8:4d:92:9a:46:5e:47:87:90:32:2f:7a:ab:
3a:b5:a2:5e:9d:3a:e6:33:cd:51:4d:64:60:c2:ef:
7b:28:4f:09:7b:4d:7c:b4:3d:0b:7d:c9:5b:c5:65:
09:dd:89:8c:56:a6:fd:f7:cd:d8:cf:3f:52:1b:e4:
1f:94:5f:90:4c:7d:26:9f:6e:76:3d:d6:64:05:6a:
c3:6b:3b:51:df:08:ba:7c:99:d5:e0:d3:bf:cd:92:
93:1c:a1:1c:7b:2c:19:8d:d8:76:eb:2f:0a:26:f2:
7c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BB:BA:4E:2F:0A:53:AF:46:F3:B9:71:0A:C7:68:07:C2:61:34:3C
X509v3 Authority Key Identifier:
keyid:47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/Ibu6Ti8KU69G87lxCsdoB8JhNDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.64.0/21
212.89.192.0/19
Signature Algorithm: sha256WithRSAEncryption
37:75:b6:5b:88:74:1e:3a:1c:b0:1b:90:13:94:ec:42:ec:56:
a2:3b:e6:53:09:a4:75:1f:6d:68:f0:cf:aa:da:14:25:34:4d:
55:5b:07:6b:82:a6:18:bb:7f:90:45:cf:bf:84:4c:a7:60:16:
3b:ee:8b:85:39:33:59:22:8e:18:7f:cb:19:8b:92:fc:33:21:
32:7b:ec:b1:f0:0c:48:5b:13:a3:e8:d4:67:a7:13:33:60:9c:
38:29:2c:25:1d:e8:7d:20:7a:08:3d:e6:bc:e4:df:66:c5:e4:
47:03:da:a2:55:8b:ec:33:d4:27:48:bc:7f:9b:75:87:45:c3:
b7:83:8d:ca:75:a8:4a:04:11:2b:b2:85:cc:b7:25:94:d0:b1:
1c:43:1c:c2:37:89:2b:59:7a:44:a0:eb:da:15:ab:35:e2:ea:
5d:27:2c:15:62:c3:8a:59:b3:66:4a:86:77:d6:68:33:63:12:
6c:9e:3c:ef:a7:87:39:11:b3:e7:74:ac:cb:52:37:6d:41:1c:
f0:5d:45:e1:c2:1f:18:eb:88:41:10:48:34:84:52:46:df:34:
79:43:86:be:fe:e2:b7:9b:cb:d3:80:44:7c:3d:ed:62:bf:c1:
3c:82:d0:d7:67:01:f5:0d:54:31:a2:b0:45:c3:9a:3c:a9:e1:
c5:e5:95:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:38 2023 by rpki-client on console.sobornost.net