Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/erkvewwYfqB5O30m1SFLyZV5Bf8.roa
File: erkvewwYfqB5O30m1SFLyZV5Bf8.roa (raw, json)
Hash identifier: Flz+6H33yz22WAvE9fnKNvOw93nz7oH4a/qY/vrHbAo=
Subject key identifier: 7A:B9:2F:7B:0C:18:7E:A0:79:3B:7D:26:D5:21:4B:C9:95:79:05:FF
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 057C6B97
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/erkvewwYfqB5O30m1SFLyZV5Bf8.roa
Signing time: Sat 01 Jan 2022 05:01:17 +0000
ROA not before: Sat 01 Jan 2022 05:01:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49697
IP address blocks: 87.237.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92040087 (0x57c6b97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 05:01:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ab92f7b0c187ea0793b7d26d5214bc9957905ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:79:1f:d7:57:51:7c:81:e0:80:6a:57:94:f7:
bd:68:5a:be:56:53:c5:bc:e2:d6:8d:c4:69:4a:29:
35:93:f3:8f:8b:6c:c7:56:7e:8d:85:8c:ca:93:d9:
42:ca:1c:8b:46:f0:ee:43:9d:4a:9c:34:a7:1a:97:
03:ec:db:41:f0:ce:fd:cb:21:d5:2f:55:dd:4e:ab:
b3:8a:79:44:57:b3:d3:42:da:4b:f3:75:e4:47:b4:
27:3c:ee:63:e4:da:62:a0:12:e2:2a:65:63:72:af:
3b:f9:2e:c4:b2:e4:42:af:18:72:dd:5c:fa:c4:c1:
9c:54:6c:f4:9b:56:d3:9e:81:cc:d0:94:01:58:54:
cc:87:fa:80:40:95:da:97:2b:51:64:74:97:fc:1f:
ff:dc:ce:01:ab:8d:a7:e7:20:7b:64:25:3f:69:04:
c9:7e:d6:9e:0c:46:41:09:d1:24:df:a7:06:29:ae:
a8:8a:e0:bb:82:f0:7b:80:9b:ce:f3:03:dd:99:e7:
61:d3:65:01:68:aa:4b:72:b9:ec:08:96:e5:6b:44:
ab:a7:ef:7f:00:2a:cc:84:3e:cf:67:d1:7d:0f:70:
0c:9f:ad:6d:0a:56:e9:d4:14:46:7f:8e:df:52:7f:
b9:1b:fb:c6:8f:ea:5e:20:9a:c4:66:53:b4:ba:16:
76:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B9:2F:7B:0C:18:7E:A0:79:3B:7D:26:D5:21:4B:C9:95:79:05:FF
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/erkvewwYfqB5O30m1SFLyZV5Bf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.165.0/24
Signature Algorithm: sha256WithRSAEncryption
25:35:0b:29:8a:b7:20:52:5d:9f:5b:4a:00:d9:b7:2b:e7:fa:
9c:49:30:6c:79:69:d4:1a:c5:97:ee:8a:52:82:d5:2a:fa:4e:
6b:9c:e4:ae:73:3a:c2:44:11:bc:21:0a:f3:fa:b3:e0:77:7d:
ee:b4:c1:53:07:36:ff:7f:93:a1:b1:61:9f:fe:d5:9c:49:4e:
46:1e:e6:b0:34:76:fc:ea:7b:d0:00:e8:dc:17:b4:e9:65:d8:
73:5d:4b:a7:78:1b:1b:5f:bf:b8:44:42:21:4a:b4:a9:3d:11:
48:08:0f:fd:1e:2f:8c:c0:bf:0d:fe:57:cb:c2:1f:74:2a:31:
22:e9:34:de:7c:c6:fa:1d:3a:95:51:03:b3:78:ed:c7:d4:95:
b2:5f:b6:3a:02:c6:35:12:59:19:b6:20:75:0d:8f:cc:e8:78:
ac:fa:b2:0c:5b:36:05:9d:60:0b:18:c6:bb:d9:98:2b:62:4b:
18:27:63:e4:71:4b:03:11:63:e1:03:62:9b:62:cd:70:cf:0a:
6f:3b:f0:d2:bd:8b:85:ef:71:8f:72:87:a0:fc:b9:ca:2b:36:
dd:55:e7:f7:81:ab:c5:38:90:c6:9f:cf:0d:89:ac:17:43:62:
44:99:e3:3f:30:00:6a:ff:6c:35:53:e1:c2:0e:4b:c3:fd:e8:
47:f1:50:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:11 2023 by rpki-client on console-fra.rpki-client.org