Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/khnhIg0fc8jWfk4oAoRPu773hQo.roa
File: khnhIg0fc8jWfk4oAoRPu773hQo.roa (raw, json)
Hash identifier: cwUL1p6m3vU8ztzgW8Y8zkVRZmYzHSSJVSyemCcIrOo=
Subject key identifier: 92:19:E1:22:0D:1F:73:C8:D6:7E:4E:28:02:84:4F:BB:BE:F7:85:0A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C601F55
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/khnhIg0fc8jWfk4oAoRPu773hQo.roa
Signing time: Sat 01 Jan 2022 01:02:27 +0000
ROA not before: Sat 01 Jan 2022 01:02:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35448
IP address blocks: 87.120.225.0/24 maxlen: 24
87.120.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476061525 (0x1c601f55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9219e1220d1f73c8d67e4e2802844fbbbef7850a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:82:0e:bd:38:47:91:d2:45:ea:1c:55:b1:d5:
a7:44:e7:8b:42:5a:8b:9f:ab:38:48:f7:ee:6a:69:
bb:0f:3d:0c:8e:23:6f:96:82:ab:a3:d3:cc:3a:de:
9d:77:be:b6:cd:69:6b:07:c4:14:aa:46:9b:0f:5d:
a7:56:66:53:d4:4a:2c:71:0a:cb:65:8c:46:1e:33:
14:a7:12:e7:21:9b:11:9b:f0:a8:c0:1f:9b:fd:d7:
0a:6b:b0:f1:7d:11:a3:cf:0f:0b:4e:8c:81:98:df:
99:0d:1a:43:24:86:21:79:92:dd:01:5f:7d:f2:3c:
a4:a1:c6:6f:aa:05:9c:6f:7c:34:f8:5b:47:92:fa:
84:e3:3e:3d:68:a8:56:fa:a9:35:1c:32:c5:ff:68:
c0:c8:8e:ed:ea:5d:02:b0:8d:6d:82:44:92:85:50:
11:b0:fb:87:53:23:e9:c5:65:68:bb:d4:7c:44:67:
04:0a:12:65:7f:0a:74:ec:fe:6f:70:ad:75:dd:50:
75:94:c6:af:4b:cb:48:51:60:0b:51:f9:8c:ab:9c:
a0:65:42:c1:7e:83:3b:5a:8b:59:a2:cf:81:93:10:
b8:02:10:6c:53:a7:d6:c3:5c:81:20:bb:be:dd:c1:
53:d1:8a:45:48:53:e6:e3:41:47:ff:76:05:64:72:
69:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:19:E1:22:0D:1F:73:C8:D6:7E:4E:28:02:84:4F:BB:BE:F7:85:0A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/khnhIg0fc8jWfk4oAoRPu773hQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.225.0/24
87.120.227.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:51:f1:8b:96:5f:1d:37:ea:d2:34:ec:c3:76:08:05:d9:e3:
1c:6f:c6:e8:1d:7a:96:33:3c:8d:a6:08:41:bd:c2:99:78:38:
c0:b4:8f:fd:ad:97:84:a1:c5:b3:52:f4:50:88:ef:73:c5:f3:
33:02:cc:a9:b8:4f:b2:7b:78:8f:49:d6:0b:8e:ff:4f:7a:12:
62:85:75:c4:d3:ba:d5:e8:17:67:85:21:d3:4a:90:25:3f:1a:
d8:a4:58:63:d0:df:ce:51:8e:39:7d:e3:91:61:93:cc:38:32:
ad:f0:42:f0:43:77:1e:47:15:39:52:f7:42:33:40:57:c1:fb:
36:bd:6e:b0:1e:93:b3:af:ae:ed:87:02:b7:da:34:dc:6c:49:
e3:b0:62:02:c4:e8:15:13:c3:fe:a4:89:5b:c2:f4:43:51:59:
d8:8f:b3:62:d9:80:a8:55:5b:00:ba:ec:12:be:4e:9c:77:e8:
6d:5c:a1:ed:b1:7a:e8:e8:89:01:41:ee:6d:61:b2:4b:ea:64:
94:98:9e:1f:71:7a:ca:39:fd:8b:2f:bd:cd:e5:c4:fe:ad:41:
77:7e:c5:ed:91:55:0d:b3:cb:8a:d1:4e:62:2c:fd:e7:8a:06:
8a:06:1d:ce:57:b1:01:18:c2:bd:07:e3:38:06:61:6c:fd:a2:
2b:6d:17:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:18 2024 by rpki-client on console-fra.rpki-client.org