Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/GzBIQkS8ZvF8PXEoGYcIWbyuVkE.roa
File: GzBIQkS8ZvF8PXEoGYcIWbyuVkE.roa (raw, json)
Hash identifier: 8ijXLhw8e2dFVKxJMxIFuF2XcGa6YkEVaLgtCekoatU=
Subject key identifier: 1B:30:48:42:44:BC:66:F1:7C:3D:71:28:19:87:08:59:BC:AE:56:41
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1B8CD207
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/GzBIQkS8ZvF8PXEoGYcIWbyuVkE.roa
Signing time: Fri 25 Mar 2022 20:27:37 +0000
ROA not before: Fri 25 Mar 2022 20:27:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 87.248.130.0/24 maxlen: 24
87.248.144.0/24 maxlen: 24
87.248.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462213639 (0x1b8cd207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Mar 25 20:27:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b30484244bc66f17c3d712819870859bcae5641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:ab:0a:6f:f9:ba:2e:3d:66:93:c3:a6:9b:
29:5c:aa:9f:40:f7:19:5e:cd:d9:99:cb:0c:04:91:
f2:c6:9b:f5:70:a0:56:02:1f:67:98:16:83:b5:81:
ce:da:8a:a6:73:49:fa:e6:67:b3:e4:a6:87:90:ed:
92:d9:58:b6:d4:08:8b:d9:a2:19:77:d9:a9:d3:e2:
88:a3:85:53:5b:6e:c4:a7:10:99:f6:9e:6c:cd:da:
22:1a:4c:ff:0d:99:1a:cd:9b:fe:b5:2a:7e:93:03:
f7:91:9e:9d:ac:d7:0d:3c:24:33:3f:3c:4f:08:a5:
62:c9:79:93:fc:de:eb:14:c1:0c:66:ce:23:c0:12:
e3:84:ab:09:4d:0b:71:52:c4:5d:24:51:2a:ad:94:
8e:87:2c:0e:f9:15:d7:f0:0a:d3:87:0c:bc:8f:d5:
e9:22:3c:45:f2:98:21:4b:07:84:64:35:7b:fb:eb:
17:ad:ea:ee:95:2d:04:30:50:cd:0f:39:3b:f9:fb:
a8:ff:40:69:12:37:7f:32:a1:b6:c6:12:dc:33:5e:
46:f2:4a:77:a4:df:50:c9:5b:e8:d3:42:64:e8:62:
29:8c:80:81:d9:8a:93:75:1b:55:74:23:c3:ae:09:
f5:d8:7e:32:ea:e9:5a:13:22:69:cc:a1:cc:34:7a:
a1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:30:48:42:44:BC:66:F1:7C:3D:71:28:19:87:08:59:BC:AE:56:41
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/GzBIQkS8ZvF8PXEoGYcIWbyuVkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.130.0/24
87.248.144.0/24
87.248.158.0/24
Signature Algorithm: sha256WithRSAEncryption
70:8c:58:f9:c9:5f:63:5b:16:87:d4:b7:b3:57:33:ec:21:e1:
69:3e:b9:ab:43:52:ce:dd:0f:be:eb:45:34:6b:e1:9c:65:d4:
b4:0a:ce:6c:79:96:25:25:dd:d2:11:05:84:de:17:1b:47:f6:
94:c5:85:07:1e:30:0e:ba:cb:05:4b:a0:af:60:55:8d:15:7b:
11:74:44:8f:cd:d6:96:86:6e:ab:2e:f8:c2:15:34:89:3c:aa:
b3:a3:60:0f:3b:5e:ad:fe:1f:bd:92:9a:da:13:3e:86:66:69:
1b:29:3e:84:b0:b1:53:a2:ed:eb:eb:29:9b:cd:6b:a7:46:14:
23:73:8d:07:56:aa:87:43:40:d7:d8:dd:b9:69:55:45:e1:ec:
2c:53:3a:f3:bc:5e:62:cf:36:e2:13:7b:d6:2f:f1:a5:ab:6f:
d8:b9:a8:a3:2a:46:56:58:1f:a0:5d:a3:20:f6:55:f3:a8:73:
91:b1:49:0e:bf:a9:b0:c3:b8:0a:28:62:7e:8b:aa:5b:e7:33:
57:ee:63:7e:1a:8b:c1:a8:1b:75:ef:e2:da:3d:fe:b4:5b:4b:
9d:ff:db:20:ea:37:0a:d0:8c:91:79:ec:d2:08:ca:74:11:11:
4a:5b:4d:9b:46:f6:7f:44:8e:2e:77:da:45:95:53:88:b6:2e:
7c:7e:c8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:09 2023 by rpki-client on console-ams.rpki-client.org