Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/aOtmsqDWkhIWNYAmvw2sn6Wppsw.roa
File: aOtmsqDWkhIWNYAmvw2sn6Wppsw.roa (raw, json)
Hash identifier: heUqvWkWxK8EmVOjD7si3Ulcv8Bk1RbUpyMN6A1wLqg=
Subject key identifier: 68:EB:66:B2:A0:D6:92:12:16:35:80:26:BF:0D:AC:9F:A5:A9:A6:CC
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1BCD2493
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/aOtmsqDWkhIWNYAmvw2sn6Wppsw.roa
Signing time: Tue 19 Apr 2022 17:14:45 +0000
ROA not before: Tue 19 Apr 2022 17:14:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 87.248.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466429075 (0x1bcd2493)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Apr 19 17:14:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68eb66b2a0d6921216358026bf0dac9fa5a9a6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:c7:7f:28:bc:42:f9:ea:f3:16:3a:f3:4d:
9a:75:66:9d:0e:47:da:a8:a5:47:da:b1:96:ad:4c:
35:32:91:11:3d:a5:cd:c8:1c:b1:87:e5:4c:b1:eb:
16:1c:6d:e3:f6:2e:fb:c2:1d:b9:f2:75:0e:0f:1a:
db:7e:18:7e:81:c6:c2:d9:bf:80:e9:66:b5:ff:6c:
45:59:ea:06:ff:2e:bb:1c:04:42:5a:08:84:4c:27:
ef:36:31:8a:bd:0f:6f:fe:1d:43:d8:f3:b4:92:82:
b3:a3:47:e2:42:0e:98:db:46:0a:f0:8e:97:2f:4a:
3c:62:62:e3:b6:1a:60:8a:da:a2:2f:4e:b0:7a:cf:
e7:9a:cb:87:b8:00:63:03:08:c7:5b:c8:a2:ec:a1:
f7:4d:7f:91:59:56:41:80:6a:a2:32:77:7d:00:b6:
ff:23:b7:89:54:d2:5c:fb:99:a1:0f:4f:ad:96:2c:
a3:06:ea:fe:66:cb:5e:b3:d3:48:b2:54:ec:4b:e1:
60:84:1f:0b:55:2d:c3:1a:f1:0d:c9:d1:68:67:60:
fc:3e:67:ac:f8:3d:d6:ce:d4:77:01:e3:23:dc:f8:
11:ab:9a:dc:1a:5b:0a:de:3d:7c:1b:07:5c:5b:28:
30:3f:66:f8:76:98:50:3c:6c:24:90:85:a9:3a:d4:
d7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EB:66:B2:A0:D6:92:12:16:35:80:26:BF:0D:AC:9F:A5:A9:A6:CC
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/aOtmsqDWkhIWNYAmvw2sn6Wppsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.149.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:39:ec:95:3a:b6:39:b5:cc:1f:c2:eb:3e:d0:9c:37:ac:0e:
fe:ae:2e:d8:ae:93:0c:54:34:b1:68:5e:bc:10:74:4c:28:e6:
67:09:07:f4:7b:77:76:1a:95:7a:0f:3c:dd:d7:fa:c6:93:c9:
c9:c2:60:9d:70:44:98:96:53:40:b4:56:3d:da:a0:86:0c:57:
68:db:d1:34:98:d7:91:ac:32:69:38:83:a9:0c:5b:ab:cd:4b:
ad:7f:e6:97:e5:40:98:80:c5:5a:48:13:bc:ff:ef:7b:b4:6c:
46:ec:c2:9a:24:f7:2c:ef:d6:d2:e3:58:89:fe:2c:9b:b0:ad:
b3:a1:13:60:35:6f:c1:0e:aa:d0:29:97:ea:ef:3a:ee:fd:41:
6f:87:66:d6:0c:99:b1:4d:1b:f5:e7:0c:e2:d2:3f:82:1e:f4:
33:69:2e:3e:13:a7:74:c3:7f:c7:33:30:6e:84:3e:86:e9:2b:
b2:7f:08:32:4b:6c:21:a8:98:0d:d4:49:da:6f:07:56:32:ba:
0f:58:98:91:01:27:a5:4b:a5:6d:06:48:9a:16:f7:c8:67:3a:
b8:ad:b5:5c:91:2a:f8:56:2c:1b:2c:5d:d6:24:f4:f7:b3:9a:
fa:4c:5e:a2:c6:46:8e:b7:1a:2b:e4:12:4e:1d:45:d5:21:23:
af:b6:68:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:21 2023 by rpki-client on console-fra.rpki-client.org