Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/772c7wxWAoHWtCnwc00oI9K5PyI.roa
File: 772c7wxWAoHWtCnwc00oI9K5PyI.roa (raw, json)
Hash identifier: /qGK/OXrkl346fbitoFzDIIrwnNGovKvrPnxikY4ODo=
Subject key identifier: EF:BD:9C:EF:0C:56:02:81:D6:B4:29:F0:73:4D:28:23:D2:B9:3F:22
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01845D136827C00C32E473A577BD5DA8959D
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/772c7wxWAoHWtCnwc00oI9K5PyI.roa
Signing time: Wed 09 Nov 2022 15:47:43 +0000
ROA not before: Wed 09 Nov 2022 15:47:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 87.248.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5d:13:68:27:c0:0c:32:e4:73:a5:77:bd:5d:a8:95:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Nov 9 15:47:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efbd9cef0c560281d6b429f0734d2823d2b93f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ed:ac:9e:1b:e5:a0:ea:60:0b:6f:c3:e0:58:
4e:99:69:8d:80:cc:7b:b5:46:cf:9e:1e:f6:30:a7:
be:72:85:28:f8:21:c0:ed:52:6a:da:b6:28:18:51:
4e:76:ae:64:94:82:5c:e8:de:16:6a:12:1c:4f:20:
65:62:59:d3:0c:b7:e7:a4:ed:05:56:81:50:f5:3a:
2e:b8:3f:3f:7d:da:22:a5:ec:60:72:31:d9:db:59:
ed:47:8f:dd:1f:6e:4f:63:1c:87:09:2e:de:eb:f1:
cb:97:43:3e:b5:fe:7e:4e:78:d0:60:7c:1e:05:c5:
f1:fa:8c:da:95:5c:bb:8c:4b:9f:b0:3e:e4:b5:de:
ec:ea:7c:b5:98:2d:8d:f9:64:38:ad:24:0a:b6:9e:
56:9b:cf:52:fb:10:84:2a:69:ff:83:bd:fd:a3:09:
0c:9d:bd:07:45:1e:2f:73:ea:7e:a8:67:67:7b:18:
88:52:ae:37:95:17:55:e3:4e:f6:09:0b:8f:93:00:
b3:51:62:75:db:c9:2a:cf:ad:29:37:c5:d5:d1:5f:
5a:3f:28:47:20:49:5d:55:97:b2:fc:2c:82:14:eb:
1f:11:7c:e3:1f:5c:66:9a:40:83:b3:9f:74:fd:e6:
2e:cd:ef:89:bb:46:e4:28:1f:f5:0e:78:90:e4:e1:
8e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BD:9C:EF:0C:56:02:81:D6:B4:29:F0:73:4D:28:23:D2:B9:3F:22
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/772c7wxWAoHWtCnwc00oI9K5PyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.151.0/24
Signature Algorithm: sha256WithRSAEncryption
45:29:36:45:ec:e3:2f:d8:d6:38:82:b9:f4:4e:0e:82:33:19:
64:18:ce:a6:24:fe:da:13:f0:4d:f7:12:b8:62:65:79:fc:3f:
20:12:fb:50:e6:d7:54:3c:91:cf:53:4b:b3:2e:37:36:ad:ec:
a1:ce:0d:66:a8:d9:c0:48:3d:bf:2c:d7:f5:7e:f5:86:3f:9e:
ec:a1:f5:41:c3:05:9a:70:31:a7:41:bc:37:77:1f:b9:ff:b1:
9c:c1:0c:bf:f4:ba:97:72:d9:a5:ae:3f:5a:8b:97:7e:e6:d5:
9d:34:2c:aa:a5:9e:15:5a:34:88:01:22:93:10:e8:74:1e:8c:
06:60:0a:09:4e:a8:cc:78:b5:71:70:d0:d7:01:bf:d1:66:eb:
cf:97:21:70:f5:37:e0:23:e7:e5:44:ad:b2:82:d4:d4:bc:ce:
43:84:20:5f:f9:50:64:17:cf:39:b4:3d:39:32:a0:27:ed:e9:
62:66:37:9e:96:c2:00:0b:dc:ab:74:87:f2:42:7f:62:0d:fb:
3b:57:1c:99:a3:60:7d:3d:2a:58:33:46:f0:07:85:76:da:60:
6b:47:07:ad:27:38:3d:c9:65:e2:a4:a6:84:78:32:39:91:e1:
2e:26:24:bf:7e:8d:dc:99:8c:5f:b4:42:e3:6b:c8:f5:cc:4e:
8e:08:e4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-fra.rpki-client.org