Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/1hKYdkvNGdJp_aBdPHAY4xacH9I.roa
File: 1hKYdkvNGdJp_aBdPHAY4xacH9I.roa (raw, json)
Hash identifier: 2UUqqwF5MP2NAGOM0gL8FmC8ixbSqh8uN0mN5BYtdJU=
Subject key identifier: D6:12:98:76:4B:CD:19:D2:69:FD:A0:5D:3C:70:18:E3:16:9C:1F:D2
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01826D3DCE50C38EB229BEA2EF73AE6A0815
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/1hKYdkvNGdJp_aBdPHAY4xacH9I.roa
Signing time: Fri 05 Aug 2022 09:02:23 +0000
ROA not before: Fri 05 Aug 2022 09:02:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 87.248.158.0/24 maxlen: 24
87.248.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:3d:ce:50:c3:8e:b2:29:be:a2:ef:73:ae:6a:08:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Aug 5 09:02:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d61298764bcd19d269fda05d3c7018e3169c1fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:04:12:7b:12:fa:03:61:fc:ff:a7:19:f0:25:
93:2a:d6:21:fd:1f:e6:82:fc:af:94:c5:74:b9:31:
f8:88:b6:09:e9:8a:f7:11:55:fa:46:95:b7:f1:d1:
47:fd:d7:bf:13:81:62:d3:19:48:c3:f4:44:ac:6a:
11:cf:1d:d2:e6:bc:b5:59:80:b8:93:ce:70:c6:2a:
b4:79:48:a3:ce:31:13:eb:64:a6:9a:20:c5:4d:b1:
97:a4:ec:c8:88:b5:8d:fb:c6:06:a1:76:9a:55:2f:
98:44:de:fd:cb:18:6f:8f:79:46:e0:f7:e0:df:1f:
fa:2a:fd:83:90:e9:09:51:17:1b:8e:10:05:9f:7b:
26:2b:dc:9c:3e:c9:94:67:1e:ca:cd:1c:fe:3a:95:
ff:e1:11:d6:0f:62:5b:94:c1:03:63:69:51:1c:2c:
fd:ec:42:69:0c:1f:f0:38:2c:76:a0:91:ca:46:af:
e3:e1:32:2e:fd:34:0b:99:55:de:2e:80:c4:01:13:
2c:51:d1:04:ce:08:d1:66:b9:ea:06:b0:60:29:17:
bd:c9:53:2c:fa:5a:de:dc:ad:8f:eb:90:38:b6:8a:
21:21:bb:a2:f8:c3:93:2d:07:35:d2:e7:62:64:04:
0b:b7:bc:8d:89:66:d5:da:72:a3:cc:da:06:8f:12:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:12:98:76:4B:CD:19:D2:69:FD:A0:5D:3C:70:18:E3:16:9C:1F:D2
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/1hKYdkvNGdJp_aBdPHAY4xacH9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.156.0/24
87.248.158.0/24
Signature Algorithm: sha256WithRSAEncryption
10:de:d7:16:df:47:21:4c:bf:bb:43:4d:e6:07:3d:d7:5d:0b:
be:31:d3:02:f7:ea:35:82:b1:09:e2:40:d1:ad:6e:59:99:49:
fb:3e:a4:52:a0:70:5d:df:e0:6b:95:fd:99:a7:23:c3:08:65:
cb:9e:dc:26:a0:27:ca:89:7f:fc:6f:1c:b6:41:63:19:f3:cb:
4b:7e:5d:a8:99:dd:bb:31:93:2a:83:8b:7a:bc:44:0e:79:51:
07:40:76:26:ab:d7:c8:17:e2:ca:f5:f8:46:29:e0:98:df:04:
5b:f2:3e:db:61:87:be:1f:7e:6a:3a:5d:f9:3b:d1:68:3e:aa:
42:86:55:9f:dc:f7:e5:50:75:e6:da:69:75:3a:a3:a5:8b:01:
3a:4a:78:db:ca:a9:8f:e9:cd:c6:f0:36:26:9d:f7:87:92:2f:
3b:6d:f4:36:d5:36:97:77:fc:05:cf:46:39:ef:1b:9a:f4:dc:
85:4e:8f:51:f2:49:48:9d:55:08:5c:ca:11:88:d2:09:99:4c:
72:31:7a:ac:a1:7b:17:80:bd:ec:4f:e0:c7:93:d6:3a:57:a6:
cc:cc:08:fe:78:1f:f1:41:12:77:ec:e8:f1:ce:60:87:42:c3:
c5:03:5e:23:ad:94:b5:ad:8c:c5:da:64:b7:5e:b6:56:ad:50:
ea:8f:f5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:09 2023 by rpki-client on console-ams.rpki-client.org