Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/JbWSWH7X5ZEA_iJZ8Lpl6u_VUL4.roa
File: JbWSWH7X5ZEA_iJZ8Lpl6u_VUL4.roa (raw, json)
Hash identifier: cU8bHFv8XwspktbGjOCQDQodfgbJOA5sMATSnguDL1E=
Subject key identifier: 25:B5:92:58:7E:D7:E5:91:00:FE:22:59:F0:BA:65:EA:EF:D5:50:BE
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1BCBF5CE
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/JbWSWH7X5ZEA_iJZ8Lpl6u_VUL4.roa
Signing time: Tue 19 Apr 2022 17:14:44 +0000
ROA not before: Tue 19 Apr 2022 17:14:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47843
IP address blocks: 87.248.132.0/23 maxlen: 24
87.248.128.0/24 maxlen: 24
87.248.129.0/24 maxlen: 24
87.248.138.0/24 maxlen: 24
87.248.136.0/24 maxlen: 24
87.248.137.0/24 maxlen: 24
87.248.143.0/24 maxlen: 24
87.248.148.0/24 maxlen: 24
87.248.155.0/24 maxlen: 24
87.248.156.0/24 maxlen: 24
87.248.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466351566 (0x1bcbf5ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Apr 19 17:14:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25b592587ed7e59100fe2259f0ba65eaefd550be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:af:49:ca:d0:e5:93:0e:cd:ab:34:ee:88:
6d:61:62:bb:e2:f7:e9:71:fd:b9:b4:2d:63:2f:52:
76:13:c8:a3:bb:66:f4:8e:c7:21:7c:11:40:01:9b:
8d:65:44:2c:65:bd:cd:87:d0:90:ec:cc:29:26:4b:
0e:07:b6:3e:fa:03:4e:b8:01:de:86:63:32:1f:c3:
b8:f1:87:d8:4f:f7:c8:69:65:5d:cb:9b:e2:d3:c6:
3a:05:b4:0b:cb:59:ab:b0:0e:43:11:6f:00:f1:68:
b1:e8:89:d7:5d:c0:19:9b:1e:bc:47:ab:91:8f:1f:
22:ac:f0:17:83:25:60:64:b9:3a:7f:77:aa:c8:5e:
a0:c8:8e:2a:b0:fb:6c:b9:d8:e8:f0:dd:9e:bd:a6:
6a:7e:54:d2:82:5e:20:7b:4a:cd:d7:5a:0d:d9:3f:
5a:b9:f8:92:52:8b:1a:22:db:23:4a:77:1e:6d:d3:
df:12:e2:d0:77:ad:48:7e:4c:1f:24:e2:46:ea:28:
52:6d:e1:f6:dc:2b:ff:f2:5e:3c:dc:9c:ea:43:de:
2f:7c:5a:1c:14:ba:e7:1f:b8:49:63:e9:b4:bf:71:
50:70:a9:0b:05:13:b7:33:5d:f9:35:a4:06:35:a3:
62:19:d3:cd:08:5b:1a:05:cc:dc:ff:b4:d7:5e:83:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B5:92:58:7E:D7:E5:91:00:FE:22:59:F0:BA:65:EA:EF:D5:50:BE
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/JbWSWH7X5ZEA_iJZ8Lpl6u_VUL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.128.0/23
87.248.132.0/23
87.248.136.0-87.248.138.255
87.248.143.0/24
87.248.148.0/24
87.248.155.0-87.248.157.255
Signature Algorithm: sha256WithRSAEncryption
b5:ea:02:a6:e2:91:b5:db:b0:f5:5a:b5:53:65:e1:7b:58:eb:
f1:3b:dd:c8:6d:17:d9:d3:90:74:20:5e:73:c9:02:d5:21:f3:
52:96:44:37:c7:d5:2f:0b:94:d9:01:25:04:01:e6:37:a4:90:
59:00:8c:1d:56:90:bb:73:09:25:99:b4:10:6f:62:e9:c6:c8:
6d:00:3e:70:6a:4e:8c:d6:7f:5c:bd:3b:72:4d:be:0e:44:39:
fc:41:0b:42:f5:2c:80:c7:68:e0:65:07:89:92:78:2d:9f:7e:
e0:aa:57:8e:19:97:ca:ba:9b:58:46:af:c8:8d:92:cd:3b:ef:
3f:82:80:49:08:69:7e:19:ad:f5:1c:0d:a0:58:78:08:d3:19:
86:0a:d7:e4:e7:19:d1:be:fe:3e:82:71:b3:9e:fa:20:1a:f2:
cb:39:cb:77:b7:e1:15:25:9c:90:91:48:94:0c:9a:f0:60:e2:
ee:72:6c:52:55:f7:1f:2e:17:58:c3:2f:bb:fe:52:37:58:62:
7d:d0:8e:cc:12:2e:e8:a8:1c:8a:f2:93:67:bf:f5:a1:a4:a9:
1f:fe:3f:19:78:59:76:5f:67:b2:44:d1:85:95:84:8f:62:12:
f7:44:9d:7f:9d:40:e2:cf:5c:86:dd:90:82:d1:05:21:8d:19:
4c:d7:e5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:35 2024 by rpki-client on console-fra.rpki-client.org