Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/Pi9Q6tU3ZtT_Bl8bh44InBQRtI0.roa
File: Pi9Q6tU3ZtT_Bl8bh44InBQRtI0.roa (raw, json)
Hash identifier: QzISQloQZ8B9bmk1gQ2ivoRo++trCH5CTr4z1kr2h1c=
Subject key identifier: 3E:2F:50:EA:D5:37:66:D4:FF:06:5F:1B:87:8E:08:9C:14:11:B4:8D
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 0182A60E0DCBCD2559958B33E013FF3C2C84
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/Pi9Q6tU3ZtT_Bl8bh44InBQRtI0.roa
Signing time: Tue 16 Aug 2022 09:48:35 +0000
ROA not before: Tue 16 Aug 2022 09:48:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47843
IP address blocks: 87.248.128.0/24 maxlen: 24
87.248.129.0/24 maxlen: 24
87.248.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a6:0e:0d:cb:cd:25:59:95:8b:33:e0:13:ff:3c:2c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Aug 16 09:48:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e2f50ead53766d4ff065f1b878e089c1411b48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:bc:3f:77:2d:27:4e:32:74:f5:37:77:40:
67:a1:12:03:6e:e7:a2:03:3b:68:86:75:c6:a9:28:
01:52:96:45:2d:8f:38:79:f7:38:00:94:50:d6:ef:
60:d2:5c:8d:7c:1f:a2:82:c1:27:f8:40:00:c6:1a:
71:76:ab:36:a6:e2:a8:4b:30:aa:dc:bc:4e:96:d7:
a0:74:12:4c:54:ff:90:3f:24:48:89:96:f7:8c:56:
0e:ba:84:a0:72:bb:f7:77:de:fa:b0:85:3b:7c:93:
ea:2d:be:33:a6:aa:8a:61:ce:7e:5b:f4:d4:49:82:
be:ca:5f:07:24:94:f3:01:e0:df:75:63:b2:ce:7d:
4b:e3:2d:55:24:41:85:92:e2:92:2a:cf:4a:13:fa:
59:4b:31:e2:ff:6a:34:53:f9:df:8f:4e:37:15:b7:
df:67:7a:52:da:91:31:a3:97:38:78:25:38:a3:f2:
3a:c8:60:5e:f8:f2:1d:57:ed:dd:81:3a:78:d8:a3:
3a:f6:47:6a:c3:4c:16:24:bd:d1:a2:70:56:f9:18:
ce:e4:c7:cf:a1:59:75:ce:79:fd:f9:28:44:70:89:
00:fb:a3:00:c9:c5:29:36:e5:be:1d:e2:0e:95:a9:
8a:71:f1:2c:fb:f4:9e:74:2a:0b:10:db:dc:76:11:
07:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2F:50:EA:D5:37:66:D4:FF:06:5F:1B:87:8E:08:9C:14:11:B4:8D
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/Pi9Q6tU3ZtT_Bl8bh44InBQRtI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.128.0/23
87.248.150.0/24
Signature Algorithm: sha256WithRSAEncryption
57:52:6d:7e:f3:74:8b:d8:a4:49:ff:65:80:3c:dc:8f:63:c1:
83:3a:09:dc:cc:f5:6c:02:cf:86:cd:51:e7:fe:57:57:bb:1d:
af:ac:e9:da:a0:14:95:5b:06:1a:ea:ed:33:b8:e3:e1:de:95:
11:56:3c:7d:f9:b9:66:1f:72:cb:6c:75:b4:cb:e4:82:5e:36:
00:04:47:8b:be:e4:8e:d1:e5:f6:0e:cb:47:1c:db:5a:24:3b:
6a:1c:d1:ba:2a:a5:7b:d8:e1:d2:4c:f6:91:8d:59:3a:9c:5c:
d7:9b:f6:4e:ab:7d:ab:ab:52:42:77:22:cd:26:39:ae:7d:f2:
d1:bd:6f:59:f8:b4:00:bc:28:9c:5d:1c:9b:82:39:93:3b:a6:
9d:13:7e:77:54:7c:11:c7:ea:08:4e:5c:fa:b5:dd:23:ef:cf:
e0:14:24:9e:25:e5:ce:b1:82:91:3d:6c:17:e6:34:78:f4:d9:
af:06:f3:22:83:e9:3d:99:06:09:2b:67:b3:99:98:7b:b4:0c:
ff:af:28:e0:86:5c:e3:9a:48:f8:58:6b:cf:fc:e3:4e:a9:c0:
f8:66:75:7f:f0:5b:ea:3b:fa:38:22:56:73:ce:3b:87:b8:99:
f8:c5:ec:65:e6:46:0f:5c:4c:ab:2e:12:ef:ae:bf:c6:8e:2a:
6c:5b:3d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:26 2024 by rpki-client on console-ams.rpki-client.org