Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/XU9Gqy6IVmuw7G6KhrRpKHpIwD0.roa
File: XU9Gqy6IVmuw7G6KhrRpKHpIwD0.roa (raw, json)
Hash identifier: TNvb/6GrUzvPFzpyn9rGxSIz5g3pZ50sUPCyLZ+d9KA=
Subject key identifier: 5D:4F:46:AB:2E:88:56:6B:B0:EC:6E:8A:86:B4:69:28:7A:48:C0:3D
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1C1485BF
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/XU9Gqy6IVmuw7G6KhrRpKHpIwD0.roa
Signing time: Tue 10 May 2022 09:15:02 +0000
ROA not before: Tue 10 May 2022 09:15:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47843
IP address blocks: 87.248.132.0/23 maxlen: 24
87.248.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471107007 (0x1c1485bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: May 10 09:15:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d4f46ab2e88566bb0ec6e8a86b469287a48c03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:77:36:ec:88:0e:0e:24:5f:f9:3d:4a:48:cb:
4e:98:3a:ff:49:d1:56:41:f5:fe:b3:24:83:c0:6c:
13:be:53:07:f1:cc:dd:d0:4f:4d:93:42:02:d5:58:
53:bf:95:6f:50:41:a8:9c:fd:8f:41:d7:34:ac:11:
07:16:e7:b8:c0:63:c5:58:a3:e7:6d:8d:15:1b:ce:
a8:51:37:38:db:a6:83:98:88:20:d6:72:5b:00:07:
e5:4a:c9:2d:d0:9d:7d:76:b7:6e:af:18:d6:e2:e8:
d6:de:93:dd:e1:48:e8:f3:6a:43:6e:cf:bc:da:c0:
c5:04:ac:ec:ff:2a:06:b0:4a:25:7e:b9:77:65:73:
da:b9:1d:eb:35:32:d4:e0:9f:90:1c:df:8d:4e:43:
02:37:61:59:69:5e:ea:06:a0:7c:cf:8e:22:ab:f3:
6a:e4:ea:aa:1d:c9:65:78:4a:f2:42:49:2f:5b:2d:
00:df:47:6a:32:61:1e:86:43:a9:46:d9:5d:1c:1a:
a7:65:59:a7:25:4d:dd:39:ae:bc:bb:02:69:34:5c:
96:a8:ae:c4:fa:5c:d9:62:7e:6a:72:8f:c8:ab:b3:
c2:35:f6:ce:9a:2e:47:7e:9e:e7:76:a7:78:b4:e1:
a3:b9:97:8a:0c:26:94:61:a9:94:3d:f1:28:ed:4d:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4F:46:AB:2E:88:56:6B:B0:EC:6E:8A:86:B4:69:28:7A:48:C0:3D
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/XU9Gqy6IVmuw7G6KhrRpKHpIwD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.128.0/24
87.248.132.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:67:c6:ff:69:cd:65:c3:1d:39:9b:1e:ce:1e:3e:25:f2:03:
3c:be:52:fb:8c:84:99:c6:2a:70:65:3e:4d:51:95:58:04:02:
b3:37:89:a9:fa:ef:13:a9:f3:fa:8d:63:5b:38:27:4d:92:66:
fa:f3:7f:cc:f5:a5:80:24:cd:c0:66:bc:e8:e9:f4:7b:50:2f:
00:1f:3e:c9:ee:e4:f3:bc:6d:96:53:ff:9d:0a:3c:bb:17:8c:
b0:27:56:ab:af:db:d3:01:1b:3e:ba:bd:92:e8:ad:7c:82:5e:
5f:de:73:2e:46:27:cc:63:12:29:c0:79:17:a3:88:c6:9d:04:
65:1a:88:a8:29:9a:e3:de:c3:34:f5:e5:8f:a5:2a:9a:45:1f:
ca:1a:00:1f:03:42:25:74:ba:5a:17:d8:02:74:f5:93:9b:a1:
2c:dc:c8:93:33:ae:b4:84:18:87:12:df:af:02:c9:1f:23:b0:
38:75:17:71:74:5a:57:ad:b4:4e:aa:29:96:5a:7a:71:91:43:
57:10:5f:5b:19:72:ae:fd:a3:f7:1f:7d:27:92:60:a5:89:34:
9c:a7:dd:3d:de:6e:73:18:86:2b:0c:31:01:74:b5:79:a7:49:
3c:0a:76:7a:23:21:ee:f1:50:27:6a:16:0f:de:01:ee:86:4e:
d4:19:be:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:35 2024 by rpki-client on console-fra.rpki-client.org