Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C3ez-yal5WkKd2O-v2U0rPn8fSQ.roa
File: C3ez-yal5WkKd2O-v2U0rPn8fSQ.roa (raw, json)
Hash identifier: mRWcjNjnR8yjtY8qhuiLtSJT6Z6NHId7eD8pxyKvj9g=
Subject key identifier: 0B:77:B3:FB:26:A5:E5:69:0A:77:63:BE:BF:65:34:AC:F9:FC:7D:24
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0182ABCB36F9737773C6E950841EA237FC76
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C3ez-yal5WkKd2O-v2U0rPn8fSQ.roa
Signing time: Wed 17 Aug 2022 12:33:18 +0000
ROA not before: Wed 17 Aug 2022 12:33:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 87.121.124.0/23 maxlen: 24
87.121.122.0/23 maxlen: 24
193.222.99.0/24 maxlen: 24
193.47.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ab:cb:36:f9:73:77:73:c6:e9:50:84:1e:a2:37:fc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 17 12:33:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b77b3fb26a5e5690a7763bebf6534acf9fc7d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4b:77:9a:6d:02:a4:3e:ad:49:50:a2:bd:51:
b5:f1:85:5a:da:c8:c6:48:72:94:9d:0f:59:3a:9d:
bc:93:95:55:81:0d:e8:74:5b:df:17:85:40:6d:ca:
a8:71:ca:b4:ba:00:b8:45:1a:93:1d:ad:74:b9:6c:
d7:90:7c:e4:c8:fc:4d:63:2e:80:5b:3f:e9:2e:90:
14:b4:8d:a0:86:ff:38:f1:47:ad:98:71:81:6b:c1:
81:4f:1d:ad:a6:c3:3b:c7:6a:c8:de:7f:73:65:fc:
e4:15:63:c2:c2:62:5a:f1:61:2e:3e:52:d7:97:61:
10:33:f3:18:01:29:2f:c3:e7:44:f2:bf:82:b8:9e:
e2:2d:e9:5e:79:6e:8d:da:12:44:a0:f3:e1:0a:cd:
47:a4:48:af:c7:79:94:d3:4d:24:64:7e:6a:09:cf:
73:e9:07:1c:0f:05:20:fc:b4:79:99:3d:c3:4a:b6:
eb:3f:92:b6:85:a4:97:11:0b:79:53:dd:5d:ca:54:
49:72:af:5d:65:43:48:b9:92:71:6a:dc:13:5a:86:
4b:82:fe:d2:9c:85:a5:87:1f:dd:73:94:ca:f2:c0:
6a:e7:c4:fd:d4:d6:8a:01:95:98:aa:3d:58:20:a8:
5a:ad:83:0b:9a:06:39:77:6a:8c:1b:dd:66:ee:1c:
31:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:77:B3:FB:26:A5:E5:69:0A:77:63:BE:BF:65:34:AC:F9:FC:7D:24
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/C3ez-yal5WkKd2O-v2U0rPn8fSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.122.0-87.121.125.255
193.47.60.0/24
193.222.99.0/24
Signature Algorithm: sha256WithRSAEncryption
39:81:b1:b6:32:c7:3a:5c:18:e0:69:9c:e5:bd:46:60:08:90:
79:bd:1b:b7:aa:c3:8f:30:2a:2f:fe:38:a7:4d:c0:3e:71:43:
d9:ed:dd:14:e6:77:37:3f:6c:9f:3b:9c:02:95:19:e9:60:84:
6f:7e:88:7b:b0:05:68:8e:59:49:73:37:34:04:11:c4:de:dd:
13:7e:69:70:49:4f:0d:b8:db:48:26:06:38:80:27:60:3e:6e:
bd:45:4c:07:22:e4:95:6c:7f:4e:e7:a3:02:94:f5:0a:b9:a5:
a0:75:02:e8:e1:a5:e1:04:9d:7a:9e:d4:49:25:f9:ee:13:b3:
b5:87:f7:76:4e:4b:1f:db:79:38:cb:b0:05:29:47:92:e9:82:
a7:bc:d9:55:8c:37:9a:2b:ff:20:1b:cc:85:2b:a8:b4:f2:4c:
74:54:84:37:a3:e0:5a:b3:15:d0:ac:7d:6f:50:dc:0b:47:19:
af:2b:f8:3d:b6:f2:df:42:b9:00:a5:ab:8e:b6:c0:e2:e3:ec:
73:2e:be:73:74:91:6e:85:f9:62:ca:e4:a4:9f:72:be:f1:7d:
03:e7:39:57:08:8c:71:f0:ec:00:86:c8:3d:88:92:b6:f4:bd:
c3:89:d9:51:53:32:09:9c:41:6c:1c:af:3a:9d:34:40:02:fa:
65:56:bd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:33 2023 by rpki-client on console-ams.rpki-client.org