Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/HzZq_tadH8zvH7S_m9gkYfLL9MA.roa
File: HzZq_tadH8zvH7S_m9gkYfLL9MA.roa (raw, json)
Hash identifier: i1X2yIFcWkWljjjJog3u4Hm/qcw5KujuAuDoxcT3D1k=
Subject key identifier: 1F:36:6A:FE:D6:9D:1F:CC:EF:1F:B4:BF:9B:D8:24:61:F2:CB:F4:C0
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1C2B08A2
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/HzZq_tadH8zvH7S_m9gkYfLL9MA.roa
Signing time: Sat 14 May 2022 07:32:41 +0000
ROA not before: Sat 14 May 2022 07:32:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 87.248.132.0/24 maxlen: 24
87.248.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472582306 (0x1c2b08a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: May 14 07:32:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f366afed69d1fccef1fb4bf9bd82461f2cbf4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7d:a3:02:c5:44:fa:92:47:3d:3b:25:92:63:
13:07:d9:8a:c8:c5:70:73:b4:36:76:7e:81:04:a3:
3d:73:93:4a:34:fa:71:79:5c:25:a4:32:49:7b:f5:
d2:e1:08:28:9b:f8:f3:bf:2d:5b:40:b9:f1:92:99:
a7:b0:1a:db:cb:ee:ba:03:5d:0d:9a:b5:94:5c:a1:
34:79:e8:54:8c:24:73:e0:99:c3:79:d6:b2:f1:68:
f7:91:39:64:de:c4:b4:17:50:b3:1e:26:52:10:ab:
af:b0:df:c4:05:93:58:fc:16:e3:f6:6c:af:ca:b6:
e5:39:13:e1:48:cd:01:37:56:cd:60:ae:38:b6:50:
d8:0a:4d:4c:ee:5c:c4:03:c8:d6:8f:ea:d0:77:4c:
01:df:97:91:d4:82:1d:a3:77:96:5e:9b:65:ef:cc:
e9:d5:4f:40:0d:63:5a:5b:07:b5:cd:e2:4c:0e:7e:
13:28:d1:25:d5:e4:8e:26:7f:81:31:a0:3f:0d:8a:
1d:bd:e9:ce:2d:e2:2c:31:b1:3f:56:e4:b2:b9:80:
a4:c7:8d:01:99:3b:07:68:d6:34:60:25:11:63:c4:
7f:6b:5d:65:af:4b:44:5c:2d:3c:ff:48:ac:d9:ea:
05:2b:95:8e:e0:98:24:e2:c0:f3:ec:a3:79:da:ee:
30:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:36:6A:FE:D6:9D:1F:CC:EF:1F:B4:BF:9B:D8:24:61:F2:CB:F4:C0
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/HzZq_tadH8zvH7S_m9gkYfLL9MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.132.0/24
87.248.158.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a2:df:41:c5:e3:c4:bc:22:a7:6c:8d:ce:31:13:c1:9c:dc:
ce:0c:b0:38:fc:25:12:69:b4:b8:e5:1c:2c:b4:dd:b7:f4:f9:
d3:79:33:b4:af:e0:b5:bf:0b:4a:2f:2d:cd:35:a8:57:bb:e3:
4c:bc:51:71:60:b5:82:35:74:a1:11:a2:70:5f:f3:9e:b5:19:
23:f7:f0:c1:31:88:ae:d8:15:00:03:29:df:bc:e2:5c:5b:ce:
7e:6d:98:df:f2:a6:b9:4c:7a:76:99:b7:8f:02:9f:3a:b3:ba:
c4:00:cb:b8:79:8c:ff:7e:a0:8e:45:ef:73:2d:c1:88:b1:8f:
4d:8d:62:4b:b6:77:56:7b:8a:9d:a5:ab:e6:8e:59:ec:45:dd:
91:9b:5d:92:1e:8a:27:8d:59:84:4b:9d:b5:8f:0c:84:df:21:
e3:e8:88:93:35:f3:99:65:e9:db:fb:8c:10:41:9c:2b:cf:ff:
9f:4c:fc:7a:b0:99:a6:ee:8a:a6:ec:e3:29:a9:dc:bf:82:a4:
54:d6:a7:c8:fc:b2:33:b0:ba:4f:c8:1c:a7:1a:c8:c4:af:5e:
8b:25:40:89:ac:33:27:0a:b5:f1:01:aa:be:93:14:92:85:67:
57:4b:f8:d8:d5:16:67:74:a3:15:b5:22:2f:58:87:9e:3b:83:
ef:08:97:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-fra.rpki-client.org