Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/b9B9U-x6gEWovLxJFXsbEUg8hY8.roa
File: b9B9U-x6gEWovLxJFXsbEUg8hY8.roa (raw, json)
Hash identifier: M4BQXS+PXyW1B+Fa37LDplNdOa90hetolHEZAMu8uUU=
Subject key identifier: 6F:D0:7D:53:EC:7A:80:45:A8:BC:BC:49:15:7B:1B:11:48:3C:85:8F
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 0183DFB2BE30324A596097ACA25A5556E3AF
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/b9B9U-x6gEWovLxJFXsbEUg8hY8.roa
Signing time: Sun 16 Oct 2022 07:29:36 +0000
ROA not before: Sun 16 Oct 2022 07:29:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 87.248.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:df:b2:be:30:32:4a:59:60:97:ac:a2:5a:55:56:e3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Oct 16 07:29:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fd07d53ec7a8045a8bcbc49157b1b11483c858f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:66:59:8f:9f:84:5d:cd:d6:0f:0e:bc:9d:39:
de:4c:b8:c8:ca:5c:79:23:ad:a8:70:6b:17:9d:04:
2b:cf:0e:dd:7b:f4:ae:e4:cd:ed:14:cb:5a:a2:04:
2e:94:cd:77:46:a3:74:7a:7b:e9:aa:ba:57:59:dc:
01:3e:f7:9e:06:91:df:35:b3:a1:ac:9e:1f:0e:18:
37:8f:9f:f5:69:26:75:4e:79:c4:1b:b6:d3:79:5e:
04:b1:79:33:de:36:89:b9:42:99:a7:8a:c0:18:7e:
51:c4:9d:5f:e0:82:c9:17:d8:09:b2:ff:d2:74:26:
00:36:7e:a6:3b:fc:5b:ff:b3:77:45:21:dc:dd:a9:
a5:c1:90:f2:57:16:85:dd:fe:4f:33:b4:b7:9d:99:
c8:0d:2a:6e:70:50:12:5e:b6:81:7b:1e:02:03:23:
1d:22:71:7a:f6:97:ed:75:cd:6d:9a:7d:2a:87:02:
e8:39:6b:87:53:bd:d9:54:63:30:3f:72:ac:f9:d6:
64:4e:8b:58:bd:22:a4:4d:0a:90:88:d1:27:5d:8d:
36:41:00:ff:b0:98:76:0c:c2:42:a6:72:b2:f8:00:
8f:ed:a3:cd:48:7f:c1:0c:e6:02:1f:ad:33:81:b4:
33:9c:6a:42:42:85:70:e1:f6:89:e2:14:49:cb:20:
70:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D0:7D:53:EC:7A:80:45:A8:BC:BC:49:15:7B:1B:11:48:3C:85:8F
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/b9B9U-x6gEWovLxJFXsbEUg8hY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.146.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:9b:cd:ca:75:d2:47:04:e3:20:95:70:60:3a:e4:15:02:0f:
17:5d:7b:e2:09:fd:ee:e4:e0:b3:e0:e8:af:af:83:78:e0:de:
3d:6e:3d:75:51:17:69:45:7e:7c:b8:2f:38:29:d8:30:88:b3:
3b:7e:73:7c:5b:62:a0:c3:c4:e8:00:27:00:30:54:6c:3d:4d:
19:6d:67:52:63:d9:7c:a4:2d:3b:f4:28:43:ad:b8:65:5c:11:
44:ce:2e:71:64:0a:b8:65:83:92:9b:9c:2a:4e:a9:d9:5b:28:
48:8f:2e:a8:19:c2:1b:23:b9:25:5d:1c:fa:2d:6b:02:08:96:
f1:13:49:3c:f6:c7:58:11:e6:24:35:a2:3e:89:12:6d:18:46:
d9:6e:62:23:45:6e:23:8f:27:73:27:41:85:b5:2a:e8:7f:5f:
f4:a9:9f:6c:7b:a4:66:f9:1f:04:86:fc:83:80:8c:54:9c:eb:
58:39:3d:57:dd:b9:68:db:68:99:b2:f3:50:16:87:f4:07:3e:
20:7e:f0:69:ec:53:35:31:e3:3b:20:c2:3d:8d:cd:8b:05:be:
ad:5b:d5:18:1f:de:54:8b:4a:0d:f9:ef:c0:f7:31:fc:0d:e0:
74:7e:a1:83:1e:df:cd:b9:1d:77:2a:28:14:aa:5b:01:45:38:
90:86:e7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:22 2023 by rpki-client on console-fra.rpki-client.org