Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/e9A-_SF4YUMIEx-1bAac4SIP6HY.roa
File: e9A-_SF4YUMIEx-1bAac4SIP6HY.roa (raw, json)
Hash identifier: un7zVfI8TZkcX671fp+hT7gDC1ZcRZ4g+So0U/GUd4M=
Subject key identifier: 7B:D0:3E:FD:21:78:61:43:08:13:1F:B5:6C:06:9C:E1:22:0F:E8:76
Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial: 0187C7E4ED8128EE765C60FA38ED0498979F
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/e9A-_SF4YUMIEx-1bAac4SIP6HY.roa
Signing time: Fri 28 Apr 2023 12:44:41 +0000
ROA not before: Fri 28 Apr 2023 12:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41960
IP address blocks: 87.239.96.0/21 maxlen: 24
87.239.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:e4:ed:81:28:ee:76:5c:60:fa:38:ed:04:98:97:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Validity
Not Before: Apr 28 12:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bd03efd2178614308131fb56c069ce1220fe876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:28:0d:23:80:86:37:85:4f:e8:39:fb:f8:
ca:80:92:e8:55:dd:98:82:dc:4e:e1:4d:b6:b6:85:
e6:41:a0:da:7d:cd:64:06:df:36:c6:6f:7d:9f:d7:
e2:4f:1f:16:e7:e5:66:d9:8d:2d:b4:65:04:f9:c8:
3c:0e:12:e9:71:0f:1e:d2:0f:c3:66:a0:5b:b1:f8:
d7:cb:b7:ad:7e:d3:50:1d:e7:f3:29:31:5c:7f:b9:
e2:4b:bd:7d:0f:44:7b:94:3c:f2:b7:09:eb:00:b6:
b0:7f:e8:87:9f:bf:4f:08:fd:02:86:fa:29:5f:d6:
02:ba:31:e2:6f:44:a4:a8:6f:53:bb:a7:54:99:6b:
67:a5:dd:a1:57:f6:5d:13:92:62:5d:3d:6a:f7:03:
da:df:cb:ae:9a:44:2e:9a:5d:01:84:e1:00:78:71:
ca:4c:b9:e8:56:7c:98:c0:da:34:94:6e:96:73:59:
21:50:cd:30:ce:96:ad:bb:cd:c7:56:d5:2e:57:26:
05:da:cd:25:1c:89:42:56:dc:f2:93:d1:33:5e:28:
d5:37:e6:fa:10:eb:16:ea:90:13:07:50:d6:a4:d8:
ef:09:ce:b0:2e:e2:2e:97:53:04:a0:fd:5b:4d:8d:
7b:35:fc:c2:6d:6b:c4:1a:59:57:d4:14:ef:b4:90:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D0:3E:FD:21:78:61:43:08:13:1F:B5:6C:06:9C:E1:22:0F:E8:76
X509v3 Authority Key Identifier:
keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/e9A-_SF4YUMIEx-1bAac4SIP6HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.96.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:f2:25:6d:e5:7a:46:54:f7:59:af:eb:12:ec:f2:a6:74:45:
83:fa:91:8e:bd:d2:65:8a:ee:c5:da:8c:21:81:5f:40:df:3a:
7d:7c:14:15:24:59:cd:d3:c8:d6:20:29:9f:68:6a:e5:a9:68:
82:c8:1b:ab:71:0b:37:e4:94:25:bd:f7:a1:a0:79:7d:f7:08:
70:37:40:c5:a9:a5:cf:33:0c:d1:c3:0e:a3:bf:b5:d1:50:3e:
e5:50:f2:95:91:d6:13:fb:38:85:fa:25:7b:f3:1e:29:16:68:
1d:40:cf:dc:74:d3:c1:8f:c5:33:6e:59:68:1a:63:ba:3c:14:
a8:1d:5a:05:2d:77:49:a7:60:af:8b:a4:c8:2e:f7:1c:10:b8:
5a:58:29:7a:af:01:46:42:14:e7:53:98:cb:07:a0:78:10:5a:
d9:c9:b0:a6:93:26:ef:cd:55:f2:c6:15:3a:c0:e6:e5:16:9b:
17:b7:08:46:2f:98:92:52:4a:38:5a:2a:cc:bf:23:ee:25:00:
94:d7:4c:82:b8:91:3e:15:6b:76:6c:b8:3f:6d:94:8b:b4:9f:
c9:b5:0b:ab:ec:5f:f9:5d:1a:1c:f2:4f:a8:9f:a9:07:03:4f:
e4:74:5c:42:4a:eb:1e:12:58:72:49:51:30:20:7d:17:b8:e9:
49:1f:e5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:21:25 2025 by rpki-client