Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/ctJT6nAA6BKI7Dw4Wpuvv4KsTkY.roa
File: ctJT6nAA6BKI7Dw4Wpuvv4KsTkY.roa (raw, json)
Hash identifier: QwoT67aL7blCXupvWVoy5UjbkhdnV2cw9NlBLu5RXFA=
Subject key identifier: 72:D2:53:EA:70:00:E8:12:88:EC:3C:38:5A:9B:AF:BF:82:AC:4E:46
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01842779E84C0E55EBF549C31E0EB3497662
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/ctJT6nAA6BKI7Dw4Wpuvv4KsTkY.roa
Signing time: Sun 30 Oct 2022 06:00:11 +0000
ROA not before: Sun 30 Oct 2022 06:00:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44400
IP address blocks: 87.248.142.0/24 maxlen: 24
87.248.141.0/24 maxlen: 24
87.248.140.0/24 maxlen: 24
87.248.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:27:79:e8:4c:0e:55:eb:f5:49:c3:1e:0e:b3:49:76:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Oct 30 06:00:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72d253ea7000e81288ec3c385a9bafbf82ac4e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d2:5d:ed:ca:74:c8:b0:5c:02:8f:de:90:d6:
d6:d7:11:81:45:52:09:e3:14:4d:03:91:08:aa:ff:
b3:58:33:e0:03:ab:e7:de:78:38:c4:9b:4b:75:25:
3c:d2:55:6c:a1:3c:ab:29:bd:a4:80:c3:2d:8f:80:
3f:ba:0a:06:1d:13:7a:fd:ce:6d:2c:95:c5:da:7e:
d4:be:54:44:72:e4:ed:84:99:cb:4a:90:ed:33:fc:
b5:df:fb:2d:68:48:11:e9:c0:df:cb:ed:b0:ff:fc:
c1:40:45:f1:a5:e6:ef:f7:f1:35:84:26:6f:da:98:
d0:fd:2b:fa:94:eb:e0:fa:1b:f9:ac:ae:5a:5b:81:
6f:6d:e1:b2:8f:28:92:a1:63:c5:b0:a7:93:da:90:
fe:ba:18:73:21:db:69:4b:69:4a:dc:56:ff:e1:50:
73:11:a1:16:84:4d:d7:94:4a:05:7f:97:24:08:4b:
c0:c6:d9:1c:de:83:e5:68:5c:ff:fb:c7:d8:b1:34:
0c:95:19:10:c6:23:78:99:34:25:e8:ce:85:aa:36:
fc:69:d6:e6:41:15:5a:68:98:39:8b:6c:6d:a2:39:
02:bc:ff:78:6c:37:7b:d0:f7:97:9e:d9:d8:cf:16:
3d:df:19:be:22:83:b9:85:60:d6:ff:e3:42:1e:3b:
a6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D2:53:EA:70:00:E8:12:88:EC:3C:38:5A:9B:AF:BF:82:AC:4E:46
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/ctJT6nAA6BKI7Dw4Wpuvv4KsTkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.140.0-87.248.142.255
87.248.159.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:81:a5:8e:21:d3:c9:3d:82:bd:2e:43:57:d2:e3:e1:93:f7:
b3:10:c8:b0:99:0d:60:46:ce:83:40:c5:e0:c9:b4:14:d6:9d:
32:15:a7:0b:f3:cb:ef:0e:cb:00:2b:af:8c:c5:dd:60:36:33:
97:87:c4:8d:dd:e7:41:a1:3f:1f:1d:96:06:75:d2:cc:6e:c6:
6a:55:67:c4:cf:38:04:8b:af:d8:61:42:6c:e2:31:62:cb:51:
39:cf:0b:93:96:b5:b3:ce:78:b6:14:8c:bd:c1:0e:76:2d:5e:
0b:54:72:1e:62:7a:92:17:ac:53:56:89:a7:34:af:62:f1:92:
68:e4:71:58:89:89:04:f5:3a:eb:49:81:bd:82:f8:d1:69:98:
dc:20:f3:07:3c:78:f4:d3:36:06:1c:99:c2:e7:f2:a4:6f:0d:
e7:c7:97:56:5b:96:02:50:ae:d4:bd:12:0c:ee:e9:91:a2:69:
83:06:c6:34:13:59:6b:b1:9c:8b:25:1a:76:30:34:f2:75:de:
da:13:54:6b:b4:17:58:ef:d7:d5:e2:18:87:f5:d1:ac:e7:4d:
ef:ed:2a:c3:8d:58:0b:1a:78:e1:82:5a:15:6c:a4:48:c6:8d:
af:5e:e3:17:0a:14:ee:c3:4a:f6:44:fc:76:b6:b9:17:66:1c:
dd:20:92:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:26 2024 by rpki-client on console-ams.rpki-client.org