Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/A_7gQY_8wAq_p3GhfZ2tY5amr4o.roa
File: A_7gQY_8wAq_p3GhfZ2tY5amr4o.roa (raw, json)
Hash identifier: eQEpbp8NJcCydulTv+BX2FJC+dm+017V0D/o1KzPbyY=
Subject key identifier: 03:FE:E0:41:8F:FC:C0:0A:BF:A7:71:A1:7D:9D:AD:63:96:A6:AF:8A
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01890AC51F92E449E842AA0969DC1E52B433
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/A_7gQY_8wAq_p3GhfZ2tY5amr4o.roa
Signing time: Fri 30 Jun 2023 05:27:18 +0000
ROA not before: Fri 30 Jun 2023 05:27:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 83.147.44.0/22 maxlen: 24
83.147.61.0/24 maxlen: 24
83.147.11.0/24 maxlen: 24
83.147.9.0/24 maxlen: 24
83.147.14.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
83.147.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0a:c5:1f:92:e4:49:e8:42:aa:09:69:dc:1e:52:b4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jun 30 05:27:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03fee0418ffcc00abfa771a17d9dad6396a6af8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d5:18:d5:e6:f3:26:8f:74:14:8d:5b:64:4e:
34:83:ed:f6:a4:05:af:ae:45:cc:cc:66:c7:8a:29:
02:70:09:27:b8:c4:25:ee:64:22:f4:69:fb:45:86:
50:01:11:80:3e:fe:76:d4:af:44:2d:bc:c3:fd:65:
94:6e:1f:64:88:11:86:c0:29:f8:53:4a:e2:5a:9f:
d6:fb:b7:f3:0b:2e:01:7c:16:57:b8:96:33:66:34:
48:cc:54:1b:1c:be:ba:bb:18:f2:3d:e6:60:d7:b1:
e4:dc:93:7f:58:af:67:30:96:45:1e:8b:8c:9d:90:
34:0d:67:1f:39:76:38:82:52:11:9c:ad:40:33:60:
6c:9d:29:d1:1d:16:fd:0f:9b:78:fd:e1:b2:85:aa:
1b:50:f9:f7:32:5c:a2:41:f5:04:76:e6:4d:70:1a:
4c:c7:e8:04:f6:18:f3:0d:e0:c9:1b:dc:ea:77:ac:
e3:35:4c:2d:17:23:5d:69:c8:7f:34:81:db:5e:0c:
90:4a:3c:3c:bf:23:c2:4e:17:23:92:bf:6b:28:ab:
ea:b8:31:13:a8:d5:67:8d:91:9b:c9:35:51:c2:6a:
b1:e2:30:85:b5:50:37:ab:31:f4:f2:7d:0f:c6:c7:
a4:06:15:03:d8:d5:51:49:94:4c:41:0a:6e:d2:b0:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FE:E0:41:8F:FC:C0:0A:BF:A7:71:A1:7D:9D:AD:63:96:A6:AF:8A
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/A_7gQY_8wAq_p3GhfZ2tY5amr4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.9.0/24
83.147.11.0/24
83.147.14.0/24
83.147.27.0-83.147.31.255
83.147.44.0/22
83.147.61.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:8a:c1:e7:e7:85:b6:9a:77:94:1d:4f:d7:50:4e:96:ec:a8:
d2:a2:20:3c:4e:7d:8a:b0:6f:00:8f:cd:35:5b:65:53:6d:f6:
93:66:4a:e9:83:9b:eb:e1:a7:85:3b:59:d0:56:fb:c3:2d:1a:
86:82:0d:a0:37:f1:78:6b:7f:25:27:fe:31:c0:f0:5a:54:13:
20:b5:04:6d:45:9a:16:62:34:09:c2:95:1f:d6:ad:28:4b:1e:
14:89:1a:df:bf:0d:d3:d7:0c:57:8c:36:05:b6:7b:69:d2:2d:
68:bf:40:e0:ca:c2:97:08:bf:ce:31:39:33:a2:2d:12:69:b3:
fe:08:03:5a:78:b1:02:0f:64:0e:4a:95:4c:df:f6:c8:32:29:
65:cd:8c:6d:9c:68:8c:d0:78:f8:12:80:51:e1:7e:f2:58:b4:
ca:a1:b7:b0:8f:65:35:03:d0:e7:52:1d:58:58:8d:56:e7:1a:
7f:39:10:c6:90:eb:d8:57:08:2e:0b:08:2f:39:9f:bd:ed:a9:
97:b9:f4:5e:bb:9d:c8:39:b7:7f:25:8b:69:79:a9:51:11:64:
45:34:16:33:e3:14:c5:08:c0:df:75:d7:66:bb:2e:64:b4:48:
5d:c1:22:af:30:49:8f:6c:e4:c1:e6:c6:49:4c:57:e4:a6:c9:
dc:20:85:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:58:08 2025 by rpki-client