Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/RrGUW0ox5is5eVd0Gex91yL7m60.roa
File: RrGUW0ox5is5eVd0Gex91yL7m60.roa (raw, json)
Hash identifier: 5TIr9xIC3MOPjixEndN2mss7BHjXt4pS2u7DOJHyxLw=
Subject key identifier: 46:B1:94:5B:4A:31:E6:2B:39:79:57:74:19:EC:7D:D7:22:FB:9B:AD
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018290A6BD612ACE2870A8DA695BFCD0EB30
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/RrGUW0ox5is5eVd0Gex91yL7m60.roa
Signing time: Fri 12 Aug 2022 06:03:42 +0000
ROA not before: Fri 12 Aug 2022 06:03:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 87.248.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:90:a6:bd:61:2a:ce:28:70:a8:da:69:5b:fc:d0:eb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Aug 12 06:03:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46b1945b4a31e62b3979577419ec7dd722fb9bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:42:25:da:21:b5:5d:9d:6d:2e:f2:e9:5d:ba:
5e:52:89:dc:48:fd:70:ae:8e:f3:58:c9:99:7b:72:
1d:c3:f8:87:69:c5:e2:50:b6:26:f8:93:70:45:40:
7c:1d:0d:04:5f:d5:8f:27:c9:59:72:ed:51:e4:0e:
55:4e:6a:b3:cd:6d:57:69:21:f0:1f:68:d7:8f:f8:
b6:70:0a:8d:9d:21:0b:1e:d4:74:04:5d:40:b5:4e:
1b:97:c7:9d:bb:33:50:c8:c7:95:62:e7:09:2b:57:
11:38:8a:d5:ee:bf:63:b3:a9:10:1a:25:b9:5f:db:
75:25:b3:e5:29:e8:52:fb:70:53:f5:40:12:76:a4:
99:3d:ea:fd:ef:df:9e:f5:69:46:91:33:7a:34:8f:
8e:4f:cd:5e:f0:79:d7:1f:7d:e4:2f:75:66:aa:a2:
4e:ae:8b:d9:a6:ea:9d:9d:a5:21:36:09:29:cc:15:
31:64:c2:a3:a2:b1:c0:41:90:4f:aa:67:3f:e2:a5:
73:1a:3f:de:55:c1:6f:d6:08:c1:bb:e5:52:18:52:
21:29:9a:87:b7:9b:d8:e0:0c:bb:a8:fa:6e:c5:04:
73:8c:c6:2f:14:c0:81:c1:7e:e4:21:fa:41:fd:45:
ff:02:8d:75:d6:a9:f3:7c:cd:21:4e:db:1e:b2:7c:
88:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B1:94:5B:4A:31:E6:2B:39:79:57:74:19:EC:7D:D7:22:FB:9B:AD
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/RrGUW0ox5is5eVd0Gex91yL7m60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.156.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:5f:32:c4:2f:4f:28:fa:d8:75:c3:bd:6b:1e:82:07:58:5a:
d8:b3:bf:09:f6:d4:83:48:69:18:c6:8e:4e:41:ef:b5:0c:88:
a8:1b:a1:5d:c9:ac:b8:b3:a7:a7:00:15:e7:3e:17:e4:2d:a3:
24:4b:fd:11:51:4f:97:cd:62:09:8b:09:5f:7b:5d:a3:8f:39:
a6:10:bf:58:73:4b:6e:a4:c5:05:02:3f:39:df:54:07:b5:5e:
72:3a:13:81:66:1f:b5:be:e5:db:d8:80:83:5e:42:8a:e2:0e:
2c:6f:4b:ec:da:12:d8:e2:ca:42:ff:73:f9:ad:a5:87:09:8b:
b2:8c:53:1a:fc:2c:c9:49:55:bf:9f:49:95:84:81:71:af:42:
8d:7a:a2:0b:7b:70:a8:ee:f2:44:62:e7:9e:65:7d:35:84:8f:
5c:e6:ed:49:01:d5:cf:a0:3f:bd:f2:e6:c1:d5:ef:8c:f1:f2:
26:71:23:85:98:6d:b2:e0:11:60:36:72:8d:c9:e1:22:c0:73:
7c:32:29:8f:d5:9c:89:33:f1:4a:89:89:57:16:92:2f:33:72:
d0:a7:74:df:0b:50:ca:2c:83:8a:1a:b5:dd:ee:49:b2:05:fd:
a8:ef:38:76:19:5b:d2:11:1e:f0:3b:6c:e2:2b:a0:5f:b4:1c:
ce:31:55:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKQpr1hKs4ocKjaaVv80OswMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjIwODEyMDYwMzQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmIxOTQ1YjRhMzFlNjJiMzk3OTU3NzQxOWVjN2RkNzIyZmI5YmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEIl2iG1XZ1tLvLpXbpeUoncSP1w
ro7zWMmZe3Idw/iHacXiULYm+JNwRUB8HQ0EX9WPJ8lZcu1R5A5VTmqzzW1XaSHw
H2jXj/i2cAqNnSELHtR0BF1AtU4bl8eduzNQyMeVYucJK1cROIrV7r9js6kQGiW5
X9t1JbPlKehS+3BT9UASdqSZPer979+e9WlGkTN6NI+OT81e8HnXH33kL3VmqqJO
rovZpuqdnaUhNgkpzBUxZMKjorHAQZBPqmc/4qVzGj/eVcFv1gjBu+VSGFIhKZqH
t5vY4Ay7qPpuxQRzjMYvFMCBwX7kIfpB/UX/Ao111qnzfM0hTtsesnyIvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEaxlFtKMeYrOXlXdBnsfdci+5utMB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvUnJHVVcwb3g1aXM1ZVZkMEdleDkxeUw3bTYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/icMA0G
CSqGSIb3DQEBCwUAA4IBAQAPXzLEL08o+th1w71rHoIHWFrYs78J9tSDSGkYxo5O
Qe+1DIioG6Fdyay4s6enABXnPhfkLaMkS/0RUU+XzWIJiwlfe12jjzmmEL9Yc0tu
pMUFAj8531QHtV5yOhOBZh+1vuXb2ICDXkKK4g4sb0vs2hLY4spC/3P5raWHCYuy
jFMa/CzJSVW/n0mVhIFxr0KNeqILe3Co7vJEYueeZX01hI9c5u1JAdXPoD+98ubB
1e+M8fImcSOFmG2y4BFgNnKNyeEiwHN8MimP1ZyJM/FKiYlXFpIvM3LQp3TfC1DK
LIOKGrXd7kmyBf2o7zh2GVvSER7wO2ziK6BftBzOMVXv
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:09 2023 by rpki-client on console-ams.rpki-client.org