Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/4msSIGbXJ83m08XwuF3sZGLIgTk.roa
File: 4msSIGbXJ83m08XwuF3sZGLIgTk.roa (raw, json)
Hash identifier: utMtoGG7UCl8DOgwAspLxKe5UekpPNRhEX2tYDQU5xI=
Subject key identifier: E2:6B:12:20:66:D7:27:CD:E6:D3:C5:F0:B8:5D:EC:64:62:C8:81:39
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1C93C30F
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/4msSIGbXJ83m08XwuF3sZGLIgTk.roa
Signing time: Fri 24 Jun 2022 08:00:47 +0000
ROA not before: Fri 24 Jun 2022 08:00:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 87.248.145.0/24 maxlen: 24
87.248.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479445775 (0x1c93c30f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jun 24 08:00:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e26b122066d727cde6d3c5f0b85dec6462c88139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e3:f8:d3:e2:a2:3c:8e:c6:23:07:c4:f6:27:
6d:aa:7d:57:e4:55:29:cd:a3:f6:ce:e0:d1:46:0c:
91:36:cb:c1:7e:dc:39:31:03:5d:a2:4b:d9:37:af:
ea:ed:db:b5:61:de:3f:2b:f9:1e:8f:95:b3:49:56:
e9:25:8b:29:f5:6a:80:22:9a:bc:e8:40:6b:22:bc:
94:4d:1b:dd:fa:db:e4:17:df:bc:51:0f:e1:ea:2e:
6c:a6:a0:8e:73:65:2e:03:6e:44:6d:5e:e7:77:4b:
b1:c1:3c:82:b3:28:f5:89:d3:6e:7a:6c:4c:89:4e:
58:71:80:ff:6e:00:5d:58:3c:19:8d:4c:38:1b:ec:
db:84:6e:c3:b0:4c:f1:37:90:a7:94:a7:11:9f:5d:
31:43:21:b9:2f:7e:57:38:8b:fc:e5:6e:bd:11:e2:
b8:5d:d2:8f:0d:8d:32:b1:d3:18:c4:06:22:b9:3d:
d1:7f:5b:c4:18:9b:7e:ba:a9:c5:e0:f6:49:b2:5f:
73:39:4a:a7:1f:8b:be:bc:12:1c:8e:a9:10:ef:8d:
90:ff:a3:d6:1b:55:01:96:a5:67:0b:a8:46:98:1d:
64:76:41:10:dc:a7:f4:d1:9d:de:2a:70:42:6c:78:
c0:fd:a8:1d:8b:56:1d:0c:fb:f8:0b:6e:6f:1c:56:
ef:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6B:12:20:66:D7:27:CD:E6:D3:C5:F0:B8:5D:EC:64:62:C8:81:39
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/4msSIGbXJ83m08XwuF3sZGLIgTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.145.0/24
87.248.149.0/24
Signature Algorithm: sha256WithRSAEncryption
44:93:44:b2:30:c6:ab:99:35:96:35:b3:84:da:c7:df:0d:53:
c1:97:29:3d:2e:14:63:ed:6a:38:17:6b:b3:7a:ec:13:b8:53:
e5:c1:d8:4f:e2:fa:04:57:97:0a:16:69:90:c1:19:e2:7c:c5:
00:b9:7b:02:b4:72:c6:b3:e8:ba:ca:cf:7b:03:78:62:50:ca:
db:ae:a9:7f:da:47:4f:60:09:41:58:af:f7:f0:be:3c:7b:4f:
96:39:8a:53:a0:13:75:49:0a:01:a3:d6:d6:5c:2b:ba:45:1d:
39:16:28:bf:40:c8:b6:0a:ff:cf:fb:19:82:ce:a8:a5:30:53:
95:b2:c7:41:6c:9c:21:20:eb:1e:50:4f:7b:69:10:46:b7:1a:
9f:3a:f2:11:68:91:87:84:73:25:ff:0f:97:75:a9:97:c2:72:
9c:af:39:57:87:8c:dc:b3:f1:77:ee:ca:89:32:f7:77:0d:91:
be:28:2d:22:55:64:ad:ed:60:6a:c3:f0:40:d3:5d:82:48:4d:
99:04:f8:31:16:74:69:9c:12:52:d4:a3:52:52:4e:99:fd:70:
c7:e3:bd:8e:9b:48:f6:58:92:ff:cc:34:17:50:3f:98:28:2b:
0b:72:d6:f0:30:16:bb:f9:76:6b:12:10:81:2b:4d:99:3d:0c:
ea:20:55:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:26 2024 by rpki-client on console-ams.rpki-client.org