Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/9MnzXtbudKpjy0aKzjPG9R_mwBM.roa
File: 9MnzXtbudKpjy0aKzjPG9R_mwBM.roa (raw, json)
Hash identifier: ly4d09PQpz+XNnFtGpDHUZ3zW/JiLJ7vd+ubAr0PFIE=
Subject key identifier: F4:C9:F3:5E:D6:EE:74:AA:63:CB:46:8A:CE:33:C6:F5:1F:E6:C0:13
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 38056570
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/9MnzXtbudKpjy0aKzjPG9R_mwBM.roa
Signing time: Sat 01 Jan 2022 11:02:21 +0000
ROA not before: Sat 01 Jan 2022 11:02:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 87.251.3.0/24 maxlen: 24
87.251.6.0/24 maxlen: 24
87.251.24.0/24 maxlen: 24
87.251.28.0/24 maxlen: 24
87.251.29.0/24 maxlen: 24
87.251.30.0/24 maxlen: 24
87.251.31.0/24 maxlen: 24
87.251.26.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939877744 (0x38056570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Jan 1 11:02:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4c9f35ed6ee74aa63cb468ace33c6f51fe6c013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:eb:eb:e5:25:c7:24:57:6d:2d:64:6f:58:
ee:42:7a:e4:31:e3:9d:31:49:fb:b9:a0:fb:4e:07:
24:b2:5c:a8:07:9e:2f:2e:33:7a:68:b4:11:cd:7e:
0c:47:92:f5:31:7c:3c:a8:67:20:15:de:ca:27:c5:
a1:48:d3:71:00:ed:c8:24:13:1f:5e:4a:5d:5a:6d:
8c:23:1a:60:29:64:42:7a:6c:10:90:cf:a6:fb:7b:
d6:8c:a7:7a:97:74:3f:3d:39:f8:8f:a8:7a:34:25:
08:b3:98:f7:ee:98:8e:78:c4:c9:6c:0c:83:b7:91:
b9:b6:ba:95:6a:a4:0b:56:d0:c7:a8:8e:a5:29:79:
e1:33:4f:9d:b4:0c:1f:84:36:09:e7:24:78:90:79:
1c:e4:78:31:b9:74:ea:f7:e5:bc:0f:51:11:4b:9b:
a1:59:35:ec:ce:6a:c3:68:63:cf:ea:62:fc:d1:ed:
3f:e6:c4:0a:12:44:21:12:e0:b7:f5:55:ce:20:d8:
33:0d:92:fd:89:7f:83:94:0f:5e:af:85:7d:7b:2d:
25:b6:e3:e1:d5:2c:ed:31:c5:6f:ef:cc:24:c8:e5:
cc:c7:55:a9:37:63:b5:4c:fa:07:25:85:11:b8:a4:
35:21:c8:87:31:64:93:69:60:77:b3:bc:9a:34:6d:
c4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C9:F3:5E:D6:EE:74:AA:63:CB:46:8A:CE:33:C6:F5:1F:E6:C0:13
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/9MnzXtbudKpjy0aKzjPG9R_mwBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.3.0/24
87.251.6.0/24
87.251.24.0/24
87.251.26.0-87.251.31.255
Signature Algorithm: sha256WithRSAEncryption
34:32:b4:d7:77:a7:56:7d:1c:d2:8c:e4:0c:c3:72:ad:c6:44:
96:9b:bb:e4:a9:f4:b8:d5:6b:2b:ed:4b:12:0c:b4:27:ea:57:
c7:22:88:27:d3:6f:a4:9f:46:4c:f8:37:3b:3d:b7:7d:49:b6:
0b:8f:53:02:d5:08:85:4f:71:d3:0c:5d:e7:81:6b:85:57:67:
9b:eb:09:e9:79:dc:b6:3a:ef:48:bd:5d:89:59:8d:6c:19:0f:
3e:53:54:9c:08:05:9c:a5:8c:40:ea:5a:56:3a:18:da:10:6b:
a5:74:0e:e3:67:f8:77:be:14:64:60:b4:b7:0a:58:44:2e:ae:
88:d9:3c:8e:a7:ab:2a:d9:94:e5:4c:8b:78:7f:45:d9:5e:77:
eb:d8:83:9c:40:fa:68:e0:b6:91:00:ed:c4:6f:9f:94:58:79:
7c:47:ea:71:8f:94:94:6e:97:79:29:31:44:e8:48:fc:35:5f:
65:1c:c7:94:c4:86:7e:7b:7a:29:69:4f:2b:16:75:5b:bc:23:
de:49:8c:fb:2c:88:9e:91:55:fa:91:eb:fd:1e:32:15:cf:96:
95:4c:a2:14:6b:6b:5a:25:96:78:d9:4a:18:fe:ee:e3:a6:e0:
29:15:5f:77:9f:13:55:20:da:5c:89:c4:4b:c3:f9:12:6b:01:
22:52:df:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:44 2023 by rpki-client on console-ams.rpki-client.org