Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fkyYik-7sLW5CUmxBerg1jbzLKQ.roa
File: fkyYik-7sLW5CUmxBerg1jbzLKQ.roa (raw, json)
Hash identifier: E7QNy21ikHoLCqqu7bvGtGO1rsQsnpy7I30chi9zWkM=
Subject key identifier: 7E:4C:98:8A:4F:BB:B0:B5:B9:09:49:B1:05:EA:E0:D6:36:F3:2C:A4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C561F8B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fkyYik-7sLW5CUmxBerg1jbzLKQ.roa
Signing time: Sat 01 Jan 2022 01:02:22 +0000
ROA not before: Sat 01 Jan 2022 01:02:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25374
IP address blocks: 87.120.244.0/23 maxlen: 23
87.120.244.0/24 maxlen: 24
87.120.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475406219 (0x1c561f8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e4c988a4fbbb0b5b90949b105eae0d636f32ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a7:6b:4a:46:07:20:9c:85:7c:74:8f:ee:2b:
e0:47:47:6a:bf:66:3d:8f:28:dd:dc:57:67:a0:77:
7c:aa:73:29:68:1e:8a:b5:ab:62:dc:7c:7a:06:e1:
70:17:5e:ff:cf:7e:18:8f:fa:b0:b0:a2:ea:33:58:
81:ba:b1:de:37:54:cb:59:cf:0f:30:6a:a4:c1:14:
26:bf:17:0d:6b:ec:fb:21:a6:70:b1:a0:ae:c3:8a:
ac:c1:09:54:ff:5b:ce:74:60:9a:ff:6e:40:ef:6f:
47:4b:b9:13:1a:d3:9e:8c:16:18:4b:da:8c:d9:90:
0e:41:0c:3e:b4:f3:e3:9d:a0:25:b8:dd:7c:ec:09:
18:44:cb:58:d6:1d:81:ae:08:ee:95:c5:a2:d3:64:
17:45:94:7d:7a:12:51:49:35:c5:a7:5b:50:e4:e0:
f0:d1:33:35:87:59:d8:3d:d2:82:36:92:4b:19:3b:
55:de:f5:65:61:21:2c:4b:3f:db:7c:81:eb:2b:52:
a6:66:75:22:41:76:71:98:74:79:9c:f0:24:c7:bf:
c9:7c:ac:d6:09:cd:1c:12:b6:58:3c:8e:41:13:8e:
0b:55:ef:2f:39:96:21:14:5d:44:97:c1:13:b2:65:
37:02:d1:f3:5b:3e:c7:b2:cc:be:cf:63:4e:1a:3a:
5e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4C:98:8A:4F:BB:B0:B5:B9:09:49:B1:05:EA:E0:D6:36:F3:2C:A4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fkyYik-7sLW5CUmxBerg1jbzLKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.244.0/23
Signature Algorithm: sha256WithRSAEncryption
52:2c:8d:40:48:97:60:94:ff:e6:bb:a0:09:70:b4:17:0d:51:
c6:c2:5e:bd:2a:91:9a:aa:eb:07:03:c1:5a:1a:27:09:ec:f6:
1b:91:e9:72:2e:71:3c:ed:ae:91:5a:53:8b:22:1f:1d:99:d1:
37:6a:57:de:d9:93:1d:b9:f1:62:51:76:a0:f4:fe:83:99:4d:
e8:d5:86:0c:ec:da:26:f1:c3:0f:d8:3f:29:e5:63:b2:64:8c:
b7:54:80:a3:3b:98:61:af:36:22:be:b8:23:8b:1e:2c:d4:02:
9b:0a:23:35:8e:ed:14:ca:2e:e0:0f:85:6d:77:05:60:34:9e:
cb:6e:da:6d:ea:9d:88:13:ad:75:79:12:6b:d3:53:46:be:1e:
cc:f3:ab:89:04:ce:1b:f8:aa:ed:23:4c:d7:1b:9a:33:1a:27:
32:52:55:e3:09:92:04:6c:4e:c5:4b:8e:38:7c:db:35:52:d4:
e5:16:e9:15:6a:66:32:44:f4:48:50:f1:cb:16:6f:03:f3:3b:
c9:8b:ae:bb:1a:98:c3:c6:f3:32:5d:ee:05:0d:46:48:95:f6:
34:bf:0a:9c:9c:3c:9a:cc:d8:17:81:da:8b:30:9b:ce:ed:e3:
f6:8a:f9:10:32:cb:86:e3:2b:95:1f:1f:84:3d:5a:b4:d7:85:
d0:d2:9a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org