Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7IOR46sN0DReAk_zSA18giAgtQ4.roa
File: 7IOR46sN0DReAk_zSA18giAgtQ4.roa (raw, json)
Hash identifier: LOlYyDXUVIdVNcBNJPitqNP1EZYGycRDX1tcc7FioAI=
Subject key identifier: EC:83:91:E3:AB:0D:D0:34:5E:02:4F:F3:48:0D:7C:82:20:20:B5:0E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C4FEFA2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7IOR46sN0DReAk_zSA18giAgtQ4.roa
Signing time: Sat 01 Jan 2022 01:02:18 +0000
ROA not before: Sat 01 Jan 2022 01:02:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8717
IP address blocks: 87.121.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475000738 (0x1c4fefa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec8391e3ab0dd0345e024ff3480d7c822020b50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fa:bb:9d:fa:db:91:e5:4f:1b:b3:32:8a:f2:
26:e7:c1:86:41:63:ae:84:92:f5:16:ca:31:b3:8f:
43:ff:68:d7:1b:fe:6b:a3:a6:7c:da:30:3b:97:6c:
9d:8a:da:99:bd:64:d4:fd:7e:70:2d:ce:ca:12:26:
e0:12:a2:da:60:b4:9c:c7:33:86:23:b3:5d:7a:1b:
5a:c4:21:05:e1:db:41:1f:ad:62:12:86:86:7e:6f:
63:f5:45:5c:3e:9f:62:68:d3:50:d3:6d:d5:f8:6c:
20:33:b0:b3:02:27:f9:39:03:dd:f9:13:0f:6b:a6:
13:82:cc:d0:69:78:ec:93:32:f8:29:5d:81:d5:51:
40:97:9e:fd:59:13:d8:92:a2:ad:81:03:79:cb:32:
a6:20:ea:a6:03:49:43:10:ec:4d:c1:c0:68:c6:85:
d6:50:78:6a:89:52:7a:97:ed:ef:6e:57:84:b4:18:
27:41:2d:75:ce:54:72:2c:24:bb:6d:cf:49:a7:25:
dd:24:da:84:c0:65:63:0b:99:a9:f2:70:a5:6d:f2:
5c:ad:00:9d:ad:ce:37:74:53:b3:07:3e:b4:1e:83:
af:9a:7a:3e:7b:85:8a:71:90:f4:f9:3d:56:e1:af:
cd:9f:32:79:3b:a6:b1:09:1c:ba:76:c2:c1:b0:f2:
df:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:83:91:E3:AB:0D:D0:34:5E:02:4F:F3:48:0D:7C:82:20:20:B5:0E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7IOR46sN0DReAk_zSA18giAgtQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.223.0/24
Signature Algorithm: sha256WithRSAEncryption
65:77:94:6c:09:f3:2d:41:c9:8d:ae:4f:59:3f:52:52:1f:c7:
f2:9f:48:17:10:46:85:85:26:82:fc:e2:bd:4b:7b:50:9c:a5:
eb:a5:b0:54:e9:c5:a2:35:e2:cd:08:b9:a4:17:50:c1:43:ca:
74:eb:ce:9e:dd:bf:cf:f1:89:b3:88:98:25:9c:8f:c4:1a:d8:
65:5b:15:25:1b:0d:f3:60:df:f1:b4:eb:0e:d6:81:83:a6:21:
60:60:85:81:ad:2a:1d:42:94:67:32:4e:6a:e9:02:17:ce:45:
b9:ca:63:ad:11:aa:f3:f2:54:b9:ca:56:4c:8d:a3:ed:ab:a9:
ed:ea:b0:b0:bf:db:4f:b4:de:48:ac:be:5d:4b:d4:0e:a8:e0:
c2:1c:8e:09:b1:d2:c5:aa:7c:cd:12:2f:60:28:6e:31:49:c3:
89:5d:87:8a:4f:e5:fe:e2:94:6d:41:38:7e:9d:e9:20:a9:ec:
bf:a8:81:d6:9a:b1:89:67:05:f2:83:25:82:1c:59:ca:0a:07:
f0:58:52:fa:22:3e:a5:ec:bc:43:79:80:c6:e1:2a:f5:f0:96:
0b:e9:2d:70:01:0c:9d:15:a2:6b:51:8d:2d:51:09:1d:cd:8e:
96:23:b6:7e:e0:43:a1:38:fa:d2:76:85:7c:2d:93:7a:ca:b4:
df:72:e6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:38 2023 by rpki-client on console-fra.rpki-client.org