Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/RttKq9rnC3yGtS9HEEB7AF7brEY.roa
File: RttKq9rnC3yGtS9HEEB7AF7brEY.roa (raw, json)
Hash identifier: s7xcFOdGYqvHtf9V4KsoyF2EPWbDQPv2ovrXtYRLGuc=
Subject key identifier: 46:DB:4A:AB:DA:E7:0B:7C:86:B5:2F:47:10:40:7B:00:5E:DB:AC:46
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 0182692CE35407867F5477128F793DA30969
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/RttKq9rnC3yGtS9HEEB7AF7brEY.roa
Signing time: Thu 04 Aug 2022 14:05:25 +0000
ROA not before: Thu 04 Aug 2022 14:05:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210538
IP address blocks: 87.248.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:69:2c:e3:54:07:86:7f:54:77:12:8f:79:3d:a3:09:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Aug 4 14:05:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46db4aabdae70b7c86b52f4710407b005edbac46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c0:47:90:e2:47:bc:c5:70:f8:c9:76:76:ce:
39:ce:32:72:43:fe:65:cf:3f:5d:c3:6d:8b:ca:43:
f9:26:e8:34:27:53:fa:37:c7:43:5f:eb:3f:9e:92:
81:d8:e5:7a:d0:c1:dc:ea:19:d1:d5:98:fa:50:f2:
26:a3:ee:ae:ff:6f:6d:a0:c8:f0:4e:4a:25:56:4c:
8d:32:e9:7c:51:22:63:64:7d:71:31:34:b8:ca:ff:
16:92:d4:d7:63:10:df:98:1d:fd:a2:30:f7:6f:e6:
c1:20:13:ff:ec:99:32:8f:6d:1d:ba:ca:58:4d:0d:
cf:25:78:7a:08:18:31:bc:63:b3:ea:a1:da:1d:94:
3b:eb:c2:30:d5:c8:46:54:c1:a2:4f:48:f3:b0:b7:
f7:e0:bc:2f:c8:dd:31:76:49:a4:44:4d:dd:c0:c2:
24:0b:48:a4:20:24:d3:1f:35:ed:6a:14:d7:aa:bc:
99:e1:4b:d9:5e:e5:27:80:26:70:d8:78:d6:da:bc:
c2:05:3c:8a:f9:ee:0e:5e:c9:36:e0:ae:65:be:c3:
8e:47:37:89:42:66:16:93:d6:33:16:bf:f8:c1:89:
e0:02:b7:c2:03:e8:46:6a:64:3d:21:af:4e:7a:6b:
3c:d2:e0:fc:30:e8:cb:8c:fc:90:e9:53:50:7f:ff:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DB:4A:AB:DA:E7:0B:7C:86:B5:2F:47:10:40:7B:00:5E:DB:AC:46
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/RttKq9rnC3yGtS9HEEB7AF7brEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.133.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:4e:8b:2b:3e:21:65:ff:d9:04:34:a1:31:16:c7:25:39:1e:
b5:0a:af:9e:43:29:6c:cc:29:88:d7:da:ce:ea:7a:f9:b2:be:
67:fe:81:10:4f:ad:f6:c9:76:e0:24:e4:7c:ac:3f:08:33:e4:
30:90:61:40:2a:57:d6:93:3d:2f:15:d0:4d:2d:02:b3:ef:66:
4e:56:a7:80:4a:41:dc:3b:4a:90:be:ae:5e:97:d2:5d:1c:bf:
98:48:6a:b9:fd:91:07:d5:67:a2:65:e5:71:2b:bb:8c:33:82:
87:76:87:44:a6:3e:de:41:f4:ee:d5:9b:54:13:80:6f:1b:ea:
b6:3f:5a:9d:67:90:0b:20:a5:6c:38:e4:37:81:5a:92:71:83:
cb:7c:a5:10:69:ce:c1:45:ff:85:12:4f:7d:ef:a4:a0:78:30:
9f:8b:38:5e:67:61:b3:16:44:6d:11:5c:51:2f:65:ee:a3:61:
ea:c4:69:70:64:62:5f:fd:53:62:f1:f4:ba:5e:17:1f:78:cb:
9a:4c:ad:57:31:50:a8:06:d0:3d:18:02:9f:0b:ff:28:c7:ee:
60:49:07:76:ac:89:30:ee:d9:d8:ff:c2:8a:3a:49:b3:a6:4e:
fb:bc:42:da:4e:92:34:74:b0:8e:f2:6d:71:02:8c:50:49:69:
16:e1:11:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJpLONUB4Z/VHcSj3k9owlpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjIwODA0MTQwNTI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmRiNGFhYmRhZTcwYjdjODZiNTJmNDcxMDQwN2IwMDVlZGJhYzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMBHkOJHvMVw+Ml2ds45zjJyQ/5l
zz9dw22LykP5Jug0J1P6N8dDX+s/npKB2OV60MHc6hnR1Zj6UPImo+6u/29toMjw
TkolVkyNMul8USJjZH1xMTS4yv8WktTXYxDfmB39ojD3b+bBIBP/7Jkyj20duspY
TQ3PJXh6CBgxvGOz6qHaHZQ768Iw1chGVMGiT0jzsLf34LwvyN0xdkmkRE3dwMIk
C0ikICTTHzXtahTXqryZ4UvZXuUngCZw2HjW2rzCBTyK+e4OXsk24K5lvsOORzeJ
QmYWk9YzFr/4wYngArfCA+hGamQ9Ia9Oems80uD8MOjLjPyQ6VNQf/9LgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEbbSqva5wt8hrUvRxBAewBe26xGMB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvUnR0S3E5cm5DM3lHdFM5SEVFQjdBRjdickVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iFMA0G
CSqGSIb3DQEBCwUAA4IBAQAMTosrPiFl/9kENKExFsclOR61Cq+eQylszCmI19rO
6nr5sr5n/oEQT632yXbgJOR8rD8IM+QwkGFAKlfWkz0vFdBNLQKz72ZOVqeASkHc
O0qQvq5el9JdHL+YSGq5/ZEH1WeiZeVxK7uMM4KHdodEpj7eQfTu1ZtUE4BvG+q2
P1qdZ5ALIKVsOOQ3gVqScYPLfKUQac7BRf+FEk9976SgeDCfizheZ2GzFkRtEVxR
L2Xuo2HqxGlwZGJf/VNi8fS6XhcfeMuaTK1XMVCoBtA9GAKfC/8ox+5gSQd2rIkw
7tnY/8KKOkmzpk77vELaTpI0dLCO8m1xAoxQSWkW4RG1
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-fra.rpki-client.org