Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/9O6C9FTLQxH96Un--Oe8WCSk2Cw.roa
File: 9O6C9FTLQxH96Un--Oe8WCSk2Cw.roa (raw, json)
Hash identifier: pBipwe+Fo1rGc7vV7eRNMVQF3kK3vV5oTNPVjbENA7Y=
Subject key identifier: F4:EE:82:F4:54:CB:43:11:FD:E9:49:FE:F8:E7:BC:58:24:A4:D8:2C
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1AC6F059
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/9O6C9FTLQxH96Un--Oe8WCSk2Cw.roa
Signing time: Sat 01 Jan 2022 14:59:29 +0000
ROA not before: Sat 01 Jan 2022 14:59:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 87.248.130.0/24 maxlen: 24
87.248.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449245273 (0x1ac6f059)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 14:59:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4ee82f454cb4311fde949fef8e7bc5824a4d82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:de:d7:2f:2b:75:35:07:ff:d4:ad:55:99:
ac:41:d9:13:c7:c0:70:4c:c8:91:66:8f:cb:cc:58:
47:7c:16:74:17:d2:ad:d6:e8:e2:c9:53:98:b5:7a:
6e:b5:64:c8:ea:aa:11:3c:6b:d2:39:e7:8d:a2:2b:
86:c3:de:9b:27:03:64:f8:f5:d7:3f:fb:f7:d0:25:
a8:d3:b8:ed:78:d2:0c:76:d6:1f:bd:a3:50:1b:f2:
a5:2e:94:51:ac:f1:e0:30:7e:0f:10:06:b3:e7:dc:
f7:09:56:d1:03:d8:75:fc:b4:64:91:67:10:7d:5c:
8f:1e:08:0a:28:d8:23:fc:58:13:3c:d9:6b:49:36:
f2:23:bf:7d:00:96:c3:6d:8d:b1:67:a9:b9:67:28:
10:3f:d7:b4:0d:2a:70:3a:41:94:4b:b0:89:03:53:
4e:ce:51:49:13:da:7d:51:93:ac:aa:45:07:65:20:
a5:cd:7d:46:8a:3a:2c:4f:ad:81:82:50:2a:32:19:
71:cb:4a:5c:b8:56:9b:71:ee:a0:3c:c9:ca:0d:dd:
20:7c:43:d1:46:54:ed:72:96:9b:c4:93:a5:40:7c:
93:c0:de:d6:8a:51:7f:99:80:51:0b:fb:8e:0a:36:
82:33:d4:d2:03:46:df:a2:82:3d:ec:45:69:4b:c7:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EE:82:F4:54:CB:43:11:FD:E9:49:FE:F8:E7:BC:58:24:A4:D8:2C
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/9O6C9FTLQxH96Un--Oe8WCSk2Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.130.0/24
87.248.158.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c4:ec:68:e7:a3:25:e6:85:f2:a6:10:19:72:de:c6:8b:1e:
6a:56:00:07:f2:3b:3b:7b:6c:72:b1:62:b5:65:97:f0:22:52:
aa:8c:32:6e:81:13:a0:05:b8:85:1c:75:1f:09:d6:22:65:e2:
31:f9:c4:78:ce:5e:7e:61:e7:54:d9:ca:09:1e:6a:00:78:53:
cc:3c:5b:e5:e4:b4:6c:14:84:f6:4c:a1:5a:79:a1:fe:ff:8b:
7e:96:83:df:d8:e7:e4:8d:88:b8:99:cb:7d:63:29:49:2c:30:
ed:3f:6a:89:f2:2f:2c:2d:b4:d3:74:eb:72:72:4d:2e:ca:0e:
48:72:0f:e0:95:e5:d4:b4:db:44:e1:c5:4d:5f:bd:40:65:42:
c1:50:10:42:04:62:13:ae:b0:61:80:1c:bd:3a:2c:f4:03:7d:
c7:e8:c4:95:6f:6a:ff:62:f8:ac:b0:51:f2:7e:46:2d:96:72:
13:eb:13:c9:61:10:ff:3d:f3:fa:9e:3c:e7:e3:8f:4c:39:19:
fa:87:eb:d9:3a:ad:e2:df:26:4f:a3:5c:2e:e6:98:f2:10:ba:
26:05:98:31:33:45:aa:b7:8d:0e:6f:88:f9:91:c4:38:cd:ee:
7d:f4:60:78:9c:8a:34:e6:19:26:4c:72:48:76:8c:1e:31:7d:
50:9e:ef:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:26 2024 by rpki-client on console-ams.rpki-client.org