Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/_Nc-IWfZm_PaDsWUW4hhF_SVcn0.roa
File: _Nc-IWfZm_PaDsWUW4hhF_SVcn0.roa (raw, json)
Hash identifier: /5TwkcqGvk9PPwSJ74y9UFu+jDufnooXalZe57cQpzs=
Subject key identifier: FC:D7:3E:21:67:D9:9B:F3:DA:0E:C5:94:5B:88:61:17:F4:95:72:7D
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 0182AAFA793727F28666ADDB93A36BFC857B
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/_Nc-IWfZm_PaDsWUW4hhF_SVcn0.roa
Signing time: Wed 17 Aug 2022 08:45:17 +0000
ROA not before: Wed 17 Aug 2022 08:45:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47843
IP address blocks: 87.248.128.0/24 maxlen: 24
87.248.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:aa:fa:79:37:27:f2:86:66:ad:db:93:a3:6b:fc:85:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Aug 17 08:45:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcd73e2167d99bf3da0ec5945b886117f495727d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:69:3f:4e:78:59:35:ce:e9:5f:02:ed:1a:a3:
b0:16:77:69:5f:f4:96:1c:56:33:72:f1:9c:ca:31:
94:d0:34:ed:d2:31:5f:b9:13:48:0c:e5:1b:98:6e:
a9:dc:bb:21:5f:48:0c:a6:d1:a3:e6:b0:da:6b:cf:
8c:8e:37:20:99:a3:1d:be:9f:d7:a1:41:04:e9:bf:
9c:86:96:38:02:e7:0f:3b:85:0a:ee:d2:41:f1:1b:
20:d7:be:7b:8d:ce:34:18:34:22:8f:4f:6f:28:b5:
27:01:0a:c2:86:19:b1:43:e2:e2:e3:45:51:2f:f4:
92:10:ef:97:cc:ef:c3:96:10:64:57:13:0c:6a:0d:
21:04:17:e1:af:5b:e1:c0:81:53:f7:e5:7f:f1:4e:
04:c2:10:93:87:d5:46:5a:ec:3b:31:c9:dc:1b:e5:
72:cb:09:e1:fe:6c:d7:b1:40:39:64:3a:eb:fe:77:
1b:9c:30:3d:f9:df:cc:20:56:fc:3b:6c:ff:89:ac:
b8:68:49:c8:84:11:42:8e:f7:7b:63:b1:89:9a:5d:
42:01:71:dc:6f:70:a3:81:2f:a1:f6:60:12:e2:5f:
53:32:2a:a8:c3:0c:07:78:eb:da:72:5d:32:93:b4:
b1:92:4c:5f:c2:3c:b2:5e:68:b4:bd:7b:e8:4f:49:
e5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D7:3E:21:67:D9:9B:F3:DA:0E:C5:94:5B:88:61:17:F4:95:72:7D
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/_Nc-IWfZm_PaDsWUW4hhF_SVcn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.128.0/24
87.248.150.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c9:e1:6d:4a:e0:bc:83:53:7b:ea:44:79:f0:9f:87:59:ef:
1a:1a:01:75:5c:01:de:a2:df:4b:4a:e6:6a:44:2f:6e:41:30:
a6:f1:26:dc:72:cc:e0:b8:ab:e6:e8:a7:75:95:c1:6e:60:a2:
e3:f0:96:77:ef:43:64:ca:59:16:a2:56:b0:1e:15:6c:08:8b:
d3:8d:0f:71:28:34:fa:b4:7c:0e:68:de:2a:81:fd:ae:11:a5:
8f:3e:ab:c0:58:11:24:74:95:6d:5c:07:b7:93:b7:eb:a1:f3:
34:99:62:0f:d9:5a:76:51:68:e1:bf:6c:0a:c2:20:f0:52:c5:
2e:66:51:86:65:f7:b7:3a:6c:da:8c:b2:54:30:05:de:29:1e:
ea:f9:62:96:83:0a:4e:37:3b:69:85:ae:df:7c:d4:d3:09:d6:
dc:05:1f:d1:13:d6:d2:a6:7f:a7:8a:86:ca:b7:be:73:1e:a1:
6b:d9:bc:28:b3:3b:f5:f6:c6:40:d4:92:94:b0:97:b7:fe:48:
0c:db:06:5b:5d:8c:d7:a2:17:76:5d:f8:09:eb:40:28:ab:48:
2f:f1:23:b6:4a:7b:b5:75:39:17:6d:51:8f:3a:f2:71:83:00:
35:f7:5e:f7:46:07:50:b0:5e:3b:9f:f7:1a:e7:73:18:17:52:
58:98:11:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-fra.rpki-client.org