Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/VXjpzNNM30xZLVEikT0k0LFDhTA.roa
File: VXjpzNNM30xZLVEikT0k0LFDhTA.roa (raw, json)
Hash identifier: i6Ox8THxiVk3m7ZSqkxiJio4LbAKyQp1rOi9+DrETWY=
Subject key identifier: 55:78:E9:CC:D3:4C:DF:4C:59:2D:51:22:91:3D:24:D0:B1:43:85:30
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1BF393EC
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/VXjpzNNM30xZLVEikT0k0LFDhTA.roa
Signing time: Mon 02 May 2022 01:28:39 +0000
ROA not before: Mon 02 May 2022 01:28:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47843
IP address blocks: 87.248.132.0/23 maxlen: 24
87.248.128.0/24 maxlen: 24
87.248.138.0/24 maxlen: 24
87.248.143.0/24 maxlen: 24
87.248.148.0/24 maxlen: 24
87.248.155.0/24 maxlen: 24
87.248.156.0/24 maxlen: 24
87.248.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468947948 (0x1bf393ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: May 2 01:28:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5578e9ccd34cdf4c592d5122913d24d0b1438530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:87:73:a9:a2:6e:07:3f:d4:22:f4:be:f1:aa:
0a:c8:af:1c:25:19:35:71:a0:93:46:e4:d0:a8:da:
5f:73:f2:62:ff:0d:8d:be:4d:36:6d:e9:67:5b:2c:
83:df:ab:a8:e5:30:0c:a3:6d:d7:5d:7a:ed:fb:0a:
06:f0:35:41:df:61:0c:f1:1f:af:48:58:ac:69:10:
6e:3a:e8:cb:33:c2:88:03:b1:f6:a9:58:1f:7d:96:
9f:9c:28:45:9f:4f:d2:16:ec:86:bf:5c:f7:a2:0a:
df:9f:5a:ba:ef:64:00:6f:14:c7:cf:c3:b3:d1:1f:
ed:de:30:90:71:4f:56:28:11:22:c5:92:6f:37:9c:
92:3d:b5:ac:ed:c0:53:14:93:1c:8d:be:ea:9a:2e:
f2:10:57:81:b9:3d:f7:c4:77:33:9a:2b:8e:39:bd:
ac:2e:8a:4f:d4:02:6e:05:cd:0e:bb:ea:cb:16:c9:
dc:31:3f:65:06:cc:b3:08:e3:6c:15:93:19:61:64:
36:8e:96:04:00:98:49:b5:dd:00:92:9e:d0:e4:d8:
66:80:4d:46:40:93:97:6f:b6:fe:6e:ac:b7:68:10:
07:4a:39:8a:ef:92:19:e0:4b:85:ff:03:e6:e7:4b:
d1:27:ec:87:c0:40:2d:44:3b:a6:20:00:56:5c:0f:
77:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:78:E9:CC:D3:4C:DF:4C:59:2D:51:22:91:3D:24:D0:B1:43:85:30
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/VXjpzNNM30xZLVEikT0k0LFDhTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.128.0/24
87.248.132.0/23
87.248.138.0/24
87.248.143.0/24
87.248.148.0/24
87.248.155.0-87.248.157.255
Signature Algorithm: sha256WithRSAEncryption
78:d1:69:38:50:e9:e2:27:1d:b2:ba:31:34:49:64:6f:b9:5b:
c8:77:aa:5f:a3:f3:36:fd:76:48:c1:f0:ce:96:1f:a0:27:00:
df:a3:80:0e:36:44:79:ee:8f:67:ed:bf:f9:03:d9:2b:b3:ef:
44:af:7e:0d:ae:fa:58:31:98:26:77:b8:bd:ae:03:52:0c:f0:
dd:cc:67:51:49:d3:7c:ec:46:f5:c1:0f:d7:2b:e0:89:f7:57:
f5:16:eb:ba:f9:9c:6a:a0:7d:aa:11:aa:5c:de:b3:4f:53:57:
60:62:91:aa:cd:7b:ec:09:56:62:52:92:bb:9f:28:db:c4:eb:
5f:0c:cb:03:c3:d5:94:92:b9:95:ab:6e:e4:6f:65:df:6b:16:
61:29:7c:b9:39:e4:3f:74:d6:45:87:b2:28:12:5e:e8:1f:71:
c8:98:51:a2:7a:31:b9:7a:54:18:5e:e7:79:08:bc:51:02:ce:
64:1e:3a:61:73:ce:aa:56:9e:a5:df:51:9d:4a:05:d3:ae:12:
b1:07:41:7b:db:c8:0a:dc:2a:0c:0e:46:62:27:c2:3b:b8:27:
58:de:54:25:15:cd:7d:4d:bc:1e:26:77:7e:fe:e7:ba:3e:e7:
95:2c:dc:5d:b0:f5:c4:e9:73:03:d3:de:99:d6:b0:9e:8e:d0:
70:1d:82:15
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIEG/OT7DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
N2Y2MWZjN2MwYWI0MWNlMTU0ZTdiY2IwOGVmOTYyMzUxYTQ2Nzg0MB4XDTIyMDUw
MjAxMjgzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTU3OGU5Y2NkMzRj
ZGY0YzU5MmQ1MTIyOTEzZDI0ZDBiMTQzODUzMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJCHc6mibgc/1CL0vvGqCsivHCUZNXGgk0bk0KjaX3PyYv8N
jb5NNm3pZ1ssg9+rqOUwDKNt11167fsKBvA1Qd9hDPEfr0hYrGkQbjroyzPCiAOx
9qlYH32Wn5woRZ9P0hbshr9c96IK359auu9kAG8Ux8/Ds9Ef7d4wkHFPVigRIsWS
bzeckj21rO3AUxSTHI2+6pou8hBXgbk998R3M5orjjm9rC6KT9QCbgXNDrvqyxbJ
3DE/ZQbMswjjbBWTGWFkNo6WBACYSbXdAJKe0OTYZoBNRkCTl2+2/m6st2gQB0o5
iu+SGeBLhf8D5udL0Sfsh8BALUQ7piAAVlwPd7sCAwEAAaOCAi8wggIrMB0GA1Ud
DgQWBBRVeOnM00zfTFktUSKRPSTQsUOFMDAfBgNVHSMEGDAWgBR39h/HwKtBzhVO
e8sI75YjUaRnhDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RfWWZ4OENyUWM0VlRudkxDTy1XSTFHa1o0US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjQvOTIxM2VjLTg1YTktNDhkNi1hYTY5LWVkYzlkMDJmYWY1NC8x
L1ZYanB6Tk5NMzB4WkxWRWlrVDBrMExGRGhUQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQv
OTIxM2VjLTg1YTktNDhkNi1hYTY5LWVkYzlkMDJmYWY1NC8xL2RfWWZ4OENyUWM0
VlRudkxDTy1XSTFHa1o0US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBF
BggrBgEFBQcBBwEB/wQ2MDQwMgQCAAEwLAMEAFf4gAMEAVf4hAMEAFf4igMEAFf4
jwMEAFf4lDAMAwQAV/ibAwQBV/icMA0GCSqGSIb3DQEBCwUAA4IBAQB40Wk4UOni
Jx2yujE0SWRvuVvId6pfo/M2/XZIwfDOlh+gJwDfo4AONkR57o9n7b/5A9krs+9E
r34NrvpYMZgmd7i9rgNSDPDdzGdRSdN87Eb1wQ/XK+CJ91f1Fuu6+ZxqoH2qEapc
3rNPU1dgYpGqzXvsCVZiUpK7nyjbxOtfDMsDw9WUkrmVq27kb2XfaxZhKXy5OeQ/
dNZFh7IoEl7oH3HImFGiejG5elQYXud5CLxRAs5kHjphc86qVp6l31GdSgXTrhKx
B0F728gK3CoMDkZiJ8I7uCdY3lQlFc19TbweJnd+/ue6PueVLNxdsPXE6XMD096Z
1rCejtBwHYIV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:35 2024 by rpki-client on console-fra.rpki-client.org