Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/9djZ9CAb-dKtHKXqT---IRPoloQ.roa
File: 9djZ9CAb-dKtHKXqT---IRPoloQ.roa (raw, json)
Hash identifier: Eox5ZFQJ1fmopKtYnNX+NGVuN4pBwNEXE2rKn7rs09c=
Subject key identifier: F5:D8:D9:F4:20:1B:F9:D2:AD:1C:A5:EA:4F:EF:BE:21:13:E8:96:84
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1C6A2100
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/9djZ9CAb-dKtHKXqT---IRPoloQ.roa
Signing time: Mon 06 Jun 2022 10:25:20 +0000
ROA not before: Mon 06 Jun 2022 10:25:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 87.248.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476717312 (0x1c6a2100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jun 6 10:25:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5d8d9f4201bf9d2ad1ca5ea4fefbe2113e89684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:8b:b9:8e:aa:83:e6:3b:74:cd:51:a0:3d:
7f:86:e6:7d:c8:ba:78:6f:47:cc:5c:23:81:66:36:
73:bf:83:94:77:c0:77:5f:70:c6:09:3a:e3:dd:1c:
50:d6:ff:4e:e9:37:8c:a2:b8:b6:7e:cf:9a:a2:ad:
ac:fa:bc:fe:89:7b:3d:c4:67:9c:ad:7b:13:e3:50:
27:1c:d5:27:57:09:18:a5:10:f3:01:01:10:af:63:
3c:82:98:43:0f:79:c6:78:b0:89:fb:3f:20:f7:0d:
b7:41:9d:57:64:ea:b2:91:80:1b:83:1a:c9:7b:03:
95:24:be:51:b1:7e:9a:38:a8:2d:34:46:57:14:78:
55:5c:68:42:51:86:c5:b4:53:bf:d7:4c:f4:9e:cf:
56:23:e9:e4:f6:eb:d2:ce:97:2e:c7:a3:23:a2:1a:
df:07:73:eb:12:c3:71:eb:af:64:7f:c8:3c:1c:c2:
cc:1c:9d:cf:27:d5:ca:10:1f:f0:79:c2:84:77:c1:
94:be:b2:5e:6a:00:b5:b7:86:92:3c:cc:cd:23:97:
2b:d1:f2:42:4e:3d:39:74:b1:fa:60:81:a9:53:94:
e0:d1:2d:9f:75:22:14:aa:de:3e:27:2c:9c:fd:50:
ef:2a:6c:f6:9e:a9:16:de:65:2e:55:ed:d5:50:18:
be:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D8:D9:F4:20:1B:F9:D2:AD:1C:A5:EA:4F:EF:BE:21:13:E8:96:84
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/9djZ9CAb-dKtHKXqT---IRPoloQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.157.0/24
Signature Algorithm: sha256WithRSAEncryption
36:e0:3d:80:32:73:de:46:98:3f:ac:37:1c:28:4b:cb:a0:f6:
4e:9d:04:03:1d:dd:6c:12:b7:ee:6e:44:1c:52:db:d0:50:df:
c6:52:ef:98:1f:49:99:d8:9d:64:09:b9:ca:f0:7b:d4:62:d1:
82:2c:46:0a:1a:b9:4e:f9:1e:27:12:d9:5b:75:d9:70:ec:da:
2a:8e:fd:ec:22:67:b6:ca:7e:76:67:dc:e6:f6:a6:03:a3:3e:
85:99:97:2e:54:7d:ec:61:dc:4e:11:6d:62:b0:49:de:2a:a3:
25:18:5d:ce:53:60:3b:50:01:52:d2:70:5f:4c:c9:a4:74:97:
0d:97:42:8b:56:2d:41:75:15:85:96:a1:fe:eb:50:8b:91:98:
ad:f5:df:a3:90:36:a9:60:5a:23:1f:52:c5:7f:83:f4:70:df:
f6:ee:73:ca:6a:79:f5:3a:e7:2f:6c:35:73:96:aa:08:d0:31:
29:56:a1:c1:54:35:08:88:aa:77:13:27:0b:48:e0:5b:9e:44:
df:a3:1c:bf:02:e2:e8:03:48:e7:2e:59:f1:74:57:6e:bd:c0:
05:df:57:77:e8:a0:6c:2f:0b:92:88:8d:5f:cf:0a:04:00:0b:
ea:79:92:7b:a5:39:3b:11:4d:f6:ab:d5:cf:b8:73:35:c8:f7:
ed:83:9c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:35 2024 by rpki-client on console-fra.rpki-client.org