Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/a92XyuGc7u02YvrGBJEFSqLBGXk.roa
File: a92XyuGc7u02YvrGBJEFSqLBGXk.roa (raw, json)
Hash identifier: S8yEWC0XB+8GnHDRoez5oBmxH/o2CQDROOH7S5CTLWA=
Subject key identifier: 6B:DD:97:CA:E1:9C:EE:ED:36:62:FA:C6:04:91:05:4A:A2:C1:19:79
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018393DA6C7D14CFC38A0AFC8F5AF9458F64
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/a92XyuGc7u02YvrGBJEFSqLBGXk.roa
Signing time: Sat 01 Oct 2022 14:01:48 +0000
ROA not before: Sat 01 Oct 2022 14:01:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 87.248.130.0/24 maxlen: 24
87.248.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:93:da:6c:7d:14:cf:c3:8a:0a:fc:8f:5a:f9:45:8f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Oct 1 14:01:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bdd97cae19ceeed3662fac60491054aa2c11979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:16:36:10:29:21:8c:12:b0:34:00:5f:bc:f8:
fd:49:95:f3:a2:2c:5b:e2:2e:1e:6a:d5:b7:f9:be:
ac:77:77:b7:77:9c:60:8c:e2:44:e7:c6:e1:ba:8c:
62:fb:d5:3a:5a:97:a2:3e:e2:03:31:95:64:7a:6f:
2d:90:e4:bc:67:ff:15:46:2a:32:be:b4:70:33:7e:
f3:52:8d:80:4f:1e:83:96:a4:14:52:5e:38:c0:88:
67:05:96:c9:6c:e9:7e:22:2b:33:82:be:08:1f:26:
5b:58:99:f8:1d:86:e3:9a:50:b4:f8:cf:a9:89:01:
64:19:af:94:f7:74:f2:fa:ff:85:8a:ad:c2:f2:db:
b7:5e:3c:09:c7:c4:6b:ae:e0:4e:7f:f4:4e:b7:ba:
db:ee:f6:25:3d:0c:15:1e:f7:63:91:94:7a:34:ea:
8b:7a:28:b4:28:70:e5:7c:b4:3e:ce:93:ce:5a:5e:
81:7b:1e:36:a4:38:a3:4c:22:44:42:c4:33:6c:60:
64:99:2b:fb:58:90:fc:23:dd:6a:b7:d4:04:da:89:
3a:4c:15:94:46:76:31:b3:93:9c:44:c2:ca:b9:e6:
23:84:a3:df:3b:c6:01:50:cb:23:78:d9:1e:d9:84:
94:b2:55:72:85:0c:56:6e:7d:03:02:be:81:f9:1b:
78:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DD:97:CA:E1:9C:EE:ED:36:62:FA:C6:04:91:05:4A:A2:C1:19:79
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/a92XyuGc7u02YvrGBJEFSqLBGXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.130.0/24
87.248.151.0/24
Signature Algorithm: sha256WithRSAEncryption
63:eb:1e:cf:31:4c:a4:5b:7c:0d:0c:c9:77:16:4e:f1:34:a7:
fb:05:70:0c:4a:51:74:15:ac:f5:c3:86:5c:e5:ef:bb:59:ab:
f1:85:84:8b:62:3b:9b:ab:19:e8:6e:e2:90:77:d5:51:3f:d8:
db:00:80:e7:6f:1f:22:5d:55:01:31:77:ad:12:df:5e:3d:0d:
64:4d:b0:31:3c:18:fd:90:c4:6a:13:e2:a7:c9:61:96:80:4b:
31:2c:a3:9a:e3:02:aa:04:06:2c:e7:26:db:b1:ac:61:de:13:
9d:5d:63:9c:f6:fd:17:b7:26:47:a0:e9:e9:7e:57:e0:68:4b:
70:6b:78:c4:8f:99:d7:40:f5:11:a4:4d:c2:38:28:cd:2b:52:
fc:8e:b4:9d:30:68:a8:4d:9c:ac:8b:f8:84:2e:e0:7a:d7:84:
7d:f0:36:bc:40:50:08:f9:0c:c4:2f:b1:f3:3f:64:84:0d:e9:
c9:36:08:7c:c8:9b:4f:58:dd:6e:72:68:e8:a4:56:cf:bd:e9:
b8:18:01:81:3a:5d:fc:1a:d0:f0:14:1a:92:65:c7:e6:52:43:
76:8e:14:b9:bc:77:b5:12:82:13:0b:16:5f:55:fc:0d:b5:2e:
00:63:8d:09:fd:62:db:83:c3:25:0a:01:fa:0a:e0:3b:94:bd:
69:d8:f5:5e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYOT2mx9FM/Digr8j1r5RY9kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjIxMDAxMTQwMTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmRkOTdjYWUxOWNlZWVkMzY2MmZhYzYwNDkxMDU0YWEyYzExOTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBY2ECkhjBKwNABfvPj9SZXzoixb
4i4eatW3+b6sd3e3d5xgjOJE58bhuoxi+9U6WpeiPuIDMZVkem8tkOS8Z/8VRioy
vrRwM37zUo2ATx6DlqQUUl44wIhnBZbJbOl+Iiszgr4IHyZbWJn4HYbjmlC0+M+p
iQFkGa+U93Ty+v+Fiq3C8tu3XjwJx8RrruBOf/ROt7rb7vYlPQwVHvdjkZR6NOqL
eii0KHDlfLQ+zpPOWl6Bex42pDijTCJEQsQzbGBkmSv7WJD8I91qt9QE2ok6TBWU
RnYxs5OcRMLKueYjhKPfO8YBUMsjeNke2YSUslVyhQxWbn0DAr6B+Rt4cwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGvdl8rhnO7tNmL6xgSRBUqiwRl5MB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvYTkyWHl1R2M3dTAyWXZyR0JKRUZTcUxCR1hrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/iCAwQA
V/iXMA0GCSqGSIb3DQEBCwUAA4IBAQBj6x7PMUykW3wNDMl3Fk7xNKf7BXAMSlF0
Faz1w4Zc5e+7WavxhYSLYjubqxnobuKQd9VRP9jbAIDnbx8iXVUBMXetEt9ePQ1k
TbAxPBj9kMRqE+KnyWGWgEsxLKOa4wKqBAYs5ybbsaxh3hOdXWOc9v0XtyZHoOnp
flfgaEtwa3jEj5nXQPURpE3COCjNK1L8jrSdMGioTZysi/iELuB614R98Da8QFAI
+QzEL7HzP2SEDenJNgh8yJtPWN1ucmjopFbPvem4GAGBOl38GtDwFBqSZcfmUkN2
jhS5vHe1EoITCxZfVfwNtS4AY40J/WLbg8MlCgH6CuA7lL1p2PVe
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-fra.rpki-client.org