Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/Di1_qf0OidtdyrIXyMVKZDh12Z4.roa
File: Di1_qf0OidtdyrIXyMVKZDh12Z4.roa (raw, json)
Hash identifier: qIR8j1l0TydO+Fb1uZxJpj+pbHA34CEcNd6WtWQfbwk=
Subject key identifier: 0E:2D:7F:A9:FD:0E:89:DB:5D:CA:B2:17:C8:C5:4A:64:38:75:D9:9E
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1BC78EE6
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/Di1_qf0OidtdyrIXyMVKZDh12Z4.roa
Signing time: Mon 18 Apr 2022 10:04:13 +0000
ROA not before: Mon 18 Apr 2022 10:04:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 87.248.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466063078 (0x1bc78ee6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Apr 18 10:04:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e2d7fa9fd0e89db5dcab217c8c54a643875d99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d5:32:bb:bf:74:1f:2b:07:cd:1e:ce:d1:2a:
5f:b8:c7:3b:c1:e0:57:28:08:e9:79:3c:4c:6c:7b:
76:a9:1a:e9:ff:02:07:3e:40:22:58:35:b3:bc:76:
7e:5e:3e:17:7f:cf:3f:ba:49:b3:1c:f6:be:70:14:
51:94:4e:bb:68:3a:d4:59:ca:70:76:97:49:5f:c6:
1d:60:19:53:09:cf:1d:5c:ed:e9:56:71:0e:be:9b:
0b:d2:59:b3:4c:b2:4c:15:fc:93:52:d4:21:45:d1:
ab:a6:ea:91:64:3c:57:2d:a4:71:e0:4a:7c:19:ad:
73:6f:81:74:5f:1a:bd:4c:08:f5:7c:55:56:1c:d9:
41:61:a1:ed:9b:e9:62:99:3f:98:e9:05:05:06:bf:
6f:1c:f3:af:cf:1a:af:7f:b1:10:d0:ea:c3:82:e4:
e5:ec:96:dc:8d:9f:19:ca:76:89:49:46:c0:60:28:
c9:a1:a7:35:c2:41:8f:b8:39:18:1a:e5:7f:75:5a:
49:be:79:73:b1:aa:45:17:7b:9a:53:92:98:9b:12:
3a:28:54:bf:5e:81:89:9e:22:91:41:ad:2d:b0:9e:
47:f4:5a:28:f6:fe:9a:f5:08:f9:ce:cf:fa:01:f6:
83:f9:0a:a4:12:e0:06:c3:d5:89:81:1a:70:37:a9:
5c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2D:7F:A9:FD:0E:89:DB:5D:CA:B2:17:C8:C5:4A:64:38:75:D9:9E
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/Di1_qf0OidtdyrIXyMVKZDh12Z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.150.0/24
Signature Algorithm: sha256WithRSAEncryption
61:d2:1c:be:87:b4:71:0d:98:77:09:a9:68:22:e3:3f:35:80:
e8:26:68:73:e6:ba:4f:aa:c4:00:f2:06:c6:69:29:c5:2c:53:
15:5f:3f:95:e1:6e:17:31:f1:5b:bf:65:fd:db:33:58:b1:e3:
a4:1c:82:3a:e4:59:d2:cc:c3:2d:b4:89:11:9b:fa:82:f4:cc:
af:a4:b0:29:94:f6:38:83:52:4a:7f:51:42:ed:7e:db:49:45:
63:63:26:d0:44:28:78:4a:a5:0d:6b:4f:1c:0c:70:24:1c:22:
00:7c:0b:01:19:96:05:64:32:e0:0b:6e:f9:cd:4a:9e:0a:a1:
26:69:fd:ca:98:c9:15:1a:67:c2:b6:d0:ef:95:ab:6b:cc:dc:
ac:70:77:66:e3:e5:70:0a:a7:dd:30:d1:3c:ba:17:d4:0d:c0:
0e:a7:9d:fb:2f:55:df:a5:52:30:c4:dd:55:94:76:02:10:fe:
79:ae:15:78:1a:4b:0d:24:e6:74:b2:79:a1:de:4f:d9:a0:3f:
c7:ad:65:8f:01:6c:4e:e2:6b:35:b7:cd:42:90:9c:fb:8d:34:
82:a6:d5:9f:36:58:78:c2:90:b5:43:cf:88:df:93:f3:9c:bb:
8f:14:ee:fa:27:9e:97:e2:b5:9a:b4:d0:b4:c2:ca:3e:7a:90:
fd:7d:91:65
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEG8eO5jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
N2Y2MWZjN2MwYWI0MWNlMTU0ZTdiY2IwOGVmOTYyMzUxYTQ2Nzg0MB4XDTIyMDQx
ODEwMDQxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGUyZDdmYTlmZDBl
ODlkYjVkY2FiMjE3YzhjNTRhNjQzODc1ZDk5ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOHVMru/dB8rB80eztEqX7jHO8HgVygI6Xk8TGx7dqka6f8C
Bz5AIlg1s7x2fl4+F3/PP7pJsxz2vnAUUZROu2g61FnKcHaXSV/GHWAZUwnPHVzt
6VZxDr6bC9JZs0yyTBX8k1LUIUXRq6bqkWQ8Vy2kceBKfBmtc2+BdF8avUwI9XxV
VhzZQWGh7ZvpYpk/mOkFBQa/bxzzr88ar3+xENDqw4Lk5eyW3I2fGcp2iUlGwGAo
yaGnNcJBj7g5GBrlf3VaSb55c7GqRRd7mlOSmJsSOihUv16BiZ4ikUGtLbCeR/Ra
KPb+mvUI+c7P+gH2g/kKpBLgBsPViYEacDepXL8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQOLX+p/Q6J213KshfIxUpkOHXZnjAfBgNVHSMEGDAWgBR39h/HwKtBzhVO
e8sI75YjUaRnhDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RfWWZ4OENyUWM0VlRudkxDTy1XSTFHa1o0US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjQvOTIxM2VjLTg1YTktNDhkNi1hYTY5LWVkYzlkMDJmYWY1NC8x
L0RpMV9xZjBPaWR0ZHlySVh5TVZLWkRoMTJaNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQv
OTIxM2VjLTg1YTktNDhkNi1hYTY5LWVkYzlkMDJmYWY1NC8xL2RfWWZ4OENyUWM0
VlRudkxDTy1XSTFHa1o0US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFf4ljANBgkqhkiG9w0BAQsFAAOC
AQEAYdIcvoe0cQ2YdwmpaCLjPzWA6CZoc+a6T6rEAPIGxmkpxSxTFV8/leFuFzHx
W79l/dszWLHjpByCOuRZ0szDLbSJEZv6gvTMr6SwKZT2OINSSn9RQu1+20lFY2Mm
0EQoeEqlDWtPHAxwJBwiAHwLARmWBWQy4Atu+c1KngqhJmn9ypjJFRpnwrbQ75Wr
a8zcrHB3ZuPlcAqn3TDRPLoX1A3ADqed+y9V36VSMMTdVZR2AhD+ea4VeBpLDSTm
dLJ5od5P2aA/x61ljwFsTuJrNbfNQpCc+400gqbVnzZYeMKQtUPPiN+T85y7jxTu
+ieel+K1mrTQtMLKPnqQ/X2RZQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-fra.rpki-client.org