Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/1vTwXmBQ-rVsFRY6rmnPkbxMLLQ.roa
File: 1vTwXmBQ-rVsFRY6rmnPkbxMLLQ.roa (raw, json)
Hash identifier: pOoss2GUQutFSmu30/rkTxjUHnqxPwgFc96PWRdM6WU=
Subject key identifier: D6:F4:F0:5E:60:50:FA:B5:6C:15:16:3A:AE:69:CF:91:BC:4C:2C:B4
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1CA6C08C
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/1vTwXmBQ-rVsFRY6rmnPkbxMLLQ.roa
Signing time: Sun 03 Jul 2022 08:45:25 +0000
ROA not before: Sun 03 Jul 2022 08:45:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400040
IP address blocks: 87.248.136.0/24 maxlen: 24
87.248.135.0/24 maxlen: 24
87.248.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480690316 (0x1ca6c08c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jul 3 08:45:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6f4f05e6050fab56c15163aae69cf91bc4c2cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4e:c4:1b:b6:30:dc:06:9c:22:0c:43:85:fa:
3d:db:7a:eb:c4:c0:5a:1f:ba:a4:18:5c:ae:88:41:
41:14:4b:00:93:e6:8f:94:77:c9:6d:e8:2f:e2:f3:
ef:78:76:99:7c:54:79:38:37:b5:8d:ff:c7:42:59:
12:03:ea:63:22:66:15:df:9e:07:27:9a:e6:6a:3f:
82:5d:f3:a9:d9:b8:73:e2:b7:e9:5c:fa:f1:eb:56:
62:8c:9f:a8:b9:bf:7f:8a:b6:b4:a1:0d:46:f5:db:
6e:f5:17:25:7d:c0:4e:82:fb:7a:41:f9:cf:c4:6f:
f0:80:81:2a:af:6f:e4:3c:f0:e0:fc:5c:83:e1:e2:
d6:31:f9:a6:9b:25:48:68:0f:9b:aa:7b:9d:e8:c1:
26:e2:e7:8c:e1:ed:9d:f6:c5:b8:39:0c:73:43:83:
0e:bb:cf:da:04:d2:90:21:b7:9e:3e:2c:41:a5:f5:
00:95:c6:e3:97:f7:bb:76:b3:75:ab:dd:ca:0b:05:
6f:00:84:87:40:f5:71:b0:af:33:8d:3c:6c:55:cb:
43:0f:46:a3:f2:c5:a0:21:f2:d2:73:a2:27:62:33:
ad:2b:d2:12:ee:01:d1:4f:e2:4a:fd:b3:38:06:a2:
a6:21:6a:5f:34:10:fa:85:ce:a2:48:3b:eb:e6:76:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F4:F0:5E:60:50:FA:B5:6C:15:16:3A:AE:69:CF:91:BC:4C:2C:B4
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/1vTwXmBQ-rVsFRY6rmnPkbxMLLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.135.0-87.248.136.255
87.248.144.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e4:4d:99:f5:e9:5b:c3:4d:6a:b3:be:75:bc:a7:f2:fc:a9:
11:55:13:16:61:ff:ed:56:a1:2c:4f:64:86:e9:44:db:f9:7d:
58:de:28:14:a2:30:38:c9:83:a5:ca:6c:bc:8a:54:b6:a7:0c:
40:70:47:6b:3b:d8:14:41:79:fa:32:bd:8d:b6:2a:b9:92:8d:
4c:df:ef:b2:db:90:78:8a:f3:b9:cf:4d:49:35:39:57:27:5d:
ba:20:4f:76:fa:64:60:2e:2c:04:c1:e6:4e:42:94:93:5e:d6:
6b:c5:75:46:cd:1c:f5:9a:88:21:59:26:fc:c6:46:b0:cc:24:
bd:f9:9c:ce:5c:e9:7a:7a:f1:ef:8a:09:f3:3b:de:7c:e6:48:
e7:21:cd:d5:ed:41:04:fb:2c:4f:cc:d5:a4:7e:8e:d2:5f:d6:
1b:ed:b3:ca:ad:7e:fa:48:d3:94:2b:67:47:e7:fb:2c:95:fb:
1a:86:33:7d:b6:e5:0d:25:11:c4:67:2d:4b:9c:09:74:2e:85:
71:a8:ae:59:24:0a:d1:e4:ac:e7:5f:27:8f:c4:98:3c:ba:32:
83:73:7a:48:64:d6:9a:78:08:19:5b:92:6a:19:7c:39:d3:aa:
fe:93:55:33:97:9c:5e:70:0a:b6:30:5d:84:ef:c5:fd:73:1a:
5c:a1:a2:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEHKbAjDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
N2Y2MWZjN2MwYWI0MWNlMTU0ZTdiY2IwOGVmOTYyMzUxYTQ2Nzg0MB4XDTIyMDcw
MzA4NDUyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDZmNGYwNWU2MDUw
ZmFiNTZjMTUxNjNhYWU2OWNmOTFiYzRjMmNiNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJhOxBu2MNwGnCIMQ4X6Pdt668TAWh+6pBhcrohBQRRLAJPm
j5R3yW3oL+Lz73h2mXxUeTg3tY3/x0JZEgPqYyJmFd+eByea5mo/gl3zqdm4c+K3
6Vz68etWYoyfqLm/f4q2tKENRvXbbvUXJX3AToL7ekH5z8Rv8ICBKq9v5Dzw4Pxc
g+Hi1jH5ppslSGgPm6p7nejBJuLnjOHtnfbFuDkMc0ODDrvP2gTSkCG3nj4sQaX1
AJXG45f3u3azdavdygsFbwCEh0D1cbCvM408bFXLQw9Go/LFoCHy0nOiJ2IzrSvS
Eu4B0U/iSv2zOAaipiFqXzQQ+oXOokg76+Z2hZUCAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBTW9PBeYFD6tWwVFjquac+RvEwstDAfBgNVHSMEGDAWgBR39h/HwKtBzhVO
e8sI75YjUaRnhDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RfWWZ4OENyUWM0VlRudkxDTy1XSTFHa1o0US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjQvOTIxM2VjLTg1YTktNDhkNi1hYTY5LWVkYzlkMDJmYWY1NC8x
LzF2VHdYbUJRLXJWc0ZSWTZybW5Qa2J4TUxMUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQv
OTIxM2VjLTg1YTktNDhkNi1hYTY5LWVkYzlkMDJmYWY1NC8xL2RfWWZ4OENyUWM0
VlRudkxDTy1XSTFHa1o0US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQAV/iHAwQAV/iIAwQAV/iQMA0G
CSqGSIb3DQEBCwUAA4IBAQBt5E2Z9elbw01qs751vKfy/KkRVRMWYf/tVqEsT2SG
6UTb+X1Y3igUojA4yYOlymy8ilS2pwxAcEdrO9gUQXn6Mr2Ntiq5ko1M3++y25B4
ivO5z01JNTlXJ126IE92+mRgLiwEweZOQpSTXtZrxXVGzRz1moghWSb8xkawzCS9
+ZzOXOl6evHvignzO9585kjnIc3V7UEE+yxPzNWkfo7SX9Yb7bPKrX76SNOUK2dH
5/sslfsahjN9tuUNJRHEZy1LnAl0LoVxqK5ZJArR5KznXyePxJg8ujKDc3pIZNaa
eAgZW5JqGXw506r+k1Uzl5xecAq2MF2E78X9cxpcoaKk
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:09 2023 by rpki-client on console-ams.rpki-client.org