Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/9n9E_9uUwHNP0JG4_Pe_UPBA2wc.roa
File: 9n9E_9uUwHNP0JG4_Pe_UPBA2wc.roa (raw, json)
Hash identifier: B/jJ+sOSufRlkETM0MfnlNEKCTpq7S5uJgERoHP+fM4=
Subject key identifier: F6:7F:44:FF:DB:94:C0:73:4F:D0:91:B8:FC:F7:BF:50:F0:40:DB:07
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1C0D72A0
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/9n9E_9uUwHNP0JG4_Pe_UPBA2wc.roa
Signing time: Mon 09 May 2022 13:27:26 +0000
ROA not before: Mon 09 May 2022 13:27:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47843
IP address blocks: 87.248.132.0/23 maxlen: 24
87.248.128.0/24 maxlen: 24
87.248.143.0/24 maxlen: 24
87.248.155.0/24 maxlen: 24
87.248.156.0/24 maxlen: 24
87.248.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470643360 (0x1c0d72a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: May 9 13:27:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f67f44ffdb94c0734fd091b8fcf7bf50f040db07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:ce:b9:71:8f:61:c7:f0:d6:e7:dd:33:ac:
ca:95:85:fd:9f:5f:d0:32:68:a9:67:ba:aa:34:7a:
7f:35:e6:b9:86:fb:a4:99:a1:5f:79:5e:97:2a:d5:
0e:e3:7a:aa:e6:53:0c:3d:22:75:13:86:21:0e:13:
51:20:25:ca:4e:11:51:ef:60:17:3f:3d:14:04:a8:
b1:7f:a6:b4:18:4a:fd:ff:34:24:ec:a0:ca:70:f3:
eb:e3:c7:6f:3d:ef:e0:3b:90:8a:6a:f1:6d:d6:c7:
51:b7:2c:18:28:c6:7d:09:d4:ee:3c:5a:53:d4:22:
a6:87:08:06:84:3f:72:6e:43:ec:e4:ff:c1:1b:17:
f7:9e:29:32:e5:17:c5:27:8a:7b:65:3f:77:b3:87:
f1:80:83:61:46:5c:30:10:df:44:fa:4e:d3:49:9f:
d9:84:b1:da:50:d9:83:ae:18:b8:72:f9:76:52:11:
93:d6:c9:cd:bd:3e:35:24:40:a9:94:0e:16:81:e5:
6d:f5:3d:78:13:d4:e7:9a:eb:41:a7:88:5a:72:98:
db:01:6a:db:32:34:c7:e4:f0:30:d1:a9:a9:9b:06:
7f:6f:1e:36:b9:2b:3c:48:9b:49:09:ac:08:91:6e:
6b:63:51:55:3d:be:8d:91:46:37:05:fa:c3:6b:d9:
81:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7F:44:FF:DB:94:C0:73:4F:D0:91:B8:FC:F7:BF:50:F0:40:DB:07
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/9n9E_9uUwHNP0JG4_Pe_UPBA2wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.128.0/24
87.248.132.0/23
87.248.143.0/24
87.248.155.0-87.248.157.255
Signature Algorithm: sha256WithRSAEncryption
3f:d8:34:c4:dc:ee:be:01:f3:e5:e8:13:d6:0a:03:2a:29:72:
8b:73:69:76:5d:31:f1:70:16:29:a6:e7:10:fd:00:3b:a5:24:
3a:14:83:35:7e:ab:b3:3d:f1:44:b7:75:76:a0:07:42:9f:8e:
5d:d4:95:2e:28:0f:ef:e6:a6:11:90:e1:2d:3e:a0:d2:a9:60:
0e:09:08:ef:6f:db:07:4c:c3:a7:fe:5a:f2:b4:9d:35:b7:33:
11:fc:da:e2:bb:af:36:6f:75:c6:bf:c5:b1:3d:84:5e:97:f4:
51:d0:2d:b8:09:50:05:cc:75:b0:f6:77:34:2e:d6:88:e7:a2:
83:0c:cf:d3:fa:a7:f6:00:cf:6f:92:74:d9:f6:67:36:5a:d7:
1a:a7:d6:c6:b3:6b:27:4b:f5:24:81:b1:56:47:a4:0c:78:c6:
dc:98:72:f1:d3:12:b6:80:a7:90:ce:7a:1c:ae:7e:c6:c9:ad:
d7:ea:95:c7:46:5e:85:57:3a:92:2f:9f:da:77:24:e6:eb:32:
f2:d7:9e:30:eb:89:a5:fa:20:b8:58:88:63:25:44:c3:ec:c6:
b5:89:dc:f7:e4:6e:58:bf:26:4e:b0:30:b0:0b:87:07:47:ed:
69:02:61:a6:58:fc:be:b7:e7:02:a2:6b:48:5b:a1:dc:6f:7e:
bf:03:a3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:09 2023 by rpki-client on console-ams.rpki-client.org