Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/D7bV_9PuGvwdVWrdRUI6ZhmDnGE.roa
File: D7bV_9PuGvwdVWrdRUI6ZhmDnGE.roa (raw, json)
Hash identifier: btYJN970jlDN6Q7PD/qDxSkSqIQvlpIEGiNiLdv2+vw=
Subject key identifier: 0F:B6:D5:FF:D3:EE:1A:FC:1D:55:6A:DD:45:42:3A:66:19:83:9C:61
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1BC00157
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/D7bV_9PuGvwdVWrdRUI6ZhmDnGE.roa
Signing time: Fri 15 Apr 2022 18:08:09 +0000
ROA not before: Fri 15 Apr 2022 18:08:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 87.248.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465568087 (0x1bc00157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Apr 15 18:08:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0fb6d5ffd3ee1afc1d556add45423a6619839c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:95:12:32:db:0d:de:35:93:ae:49:9d:4c:d1:
1e:e8:8a:68:d5:91:51:a9:76:1a:16:f5:85:1b:9b:
d8:7d:02:3d:d7:96:4f:04:0c:79:88:8c:78:d4:17:
4a:4f:a2:5f:fa:d3:bd:4c:77:e9:40:e0:18:7b:ef:
76:e9:92:95:3d:25:55:00:08:c5:3a:61:6f:7f:22:
16:69:76:ee:c6:39:e5:69:d6:0e:9a:a2:43:b6:3c:
90:22:8f:7f:65:39:d7:8e:cc:c5:d7:82:c2:e9:01:
31:6f:f0:4e:9c:ce:08:54:d8:be:e8:72:fe:ab:9f:
dd:a3:10:e5:23:4f:60:4f:b0:a6:0e:9d:e3:2e:5a:
be:a8:55:82:22:39:55:8e:62:76:75:86:0e:99:c3:
4b:93:50:2a:1f:e8:ca:14:cd:c4:ea:ae:9e:9e:87:
69:3c:e5:2d:6a:29:07:65:04:37:7c:3e:a0:b0:9f:
12:fa:85:f0:87:b9:10:73:16:dd:6d:23:94:a9:5d:
a1:ba:dc:66:4a:f9:33:fd:4d:2d:21:42:ac:eb:a2:
d5:7c:61:ac:1a:23:6b:c4:73:40:d3:9f:5a:85:b7:
35:9b:9c:47:87:c9:6f:ed:e0:4f:12:61:ab:7c:3b:
d9:32:07:da:18:82:da:cb:93:e8:ba:53:1b:a0:37:
f8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B6:D5:FF:D3:EE:1A:FC:1D:55:6A:DD:45:42:3A:66:19:83:9C:61
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/D7bV_9PuGvwdVWrdRUI6ZhmDnGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.151.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:de:da:93:ff:44:b1:59:35:75:d6:17:0f:43:33:86:21:c8:
7f:7f:82:f9:ad:db:e3:47:46:16:7b:fe:95:3c:f2:e3:9e:80:
ef:38:07:af:47:bf:31:8f:14:c0:89:ad:17:4a:e4:b1:62:db:
b1:bc:fb:29:6e:01:ab:89:d6:b9:83:bd:38:90:77:10:2a:77:
a8:f4:05:45:5e:37:7f:3c:ce:3c:27:18:5d:3a:ed:a9:c0:58:
e7:fc:97:8e:f3:79:27:e0:6e:3a:5c:e5:86:8f:4d:48:52:80:
70:c3:61:78:1d:0f:6a:be:2e:0b:3c:ef:f9:f2:c1:54:ab:d4:
a6:65:e8:a9:80:6c:dd:ab:db:33:d1:0b:fc:2d:18:d5:0a:bc:
ea:b5:1e:bd:2b:28:ea:4e:53:fc:da:18:79:34:45:83:d1:29:
76:87:44:4c:1b:f5:ce:fe:df:ef:59:dc:90:31:57:7e:1a:12:
85:0b:fd:1a:0c:1a:85:ae:21:d9:87:65:1b:6b:ed:4c:ae:d6:
87:50:c1:b7:cf:ee:24:9f:4c:f6:73:2a:b6:64:d2:c8:15:db:
9e:07:71:86:6e:bb:a9:59:8c:10:d0:45:de:c9:e3:0d:ed:0c:
c2:d9:ca:ad:25:45:71:e6:cd:75:bc:d4:df:c9:2b:2a:29:c7:
7b:ba:cd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-fra.rpki-client.org