Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/det16YLjxgEZiO9mMb2JMxULv-I.roa
File: det16YLjxgEZiO9mMb2JMxULv-I.roa (raw, json)
Hash identifier: vywFLFhpRT0nNWSJd0OgPAQof0cvI7ZmZufSdLmQr6I=
Subject key identifier: 75:EB:75:E9:82:E3:C6:01:19:88:EF:66:31:BD:89:33:15:0B:BF:E2
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1C1EA99D
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/det16YLjxgEZiO9mMb2JMxULv-I.roa
Signing time: Tue 10 May 2022 18:15:03 +0000
ROA not before: Tue 10 May 2022 18:15:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19437
IP address blocks: 87.248.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471771549 (0x1c1ea99d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: May 10 18:15:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75eb75e982e3c6011988ef6631bd8933150bbfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:af:db:3a:e9:44:33:53:b5:43:ba:c2:ab:18:
7c:7a:0b:17:bd:89:82:82:0b:ae:17:0b:74:19:1c:
84:c2:6c:c5:6b:08:53:50:db:75:e8:32:5f:9e:62:
1a:0a:e8:c6:b7:a3:1f:44:95:cd:98:10:da:5e:20:
bd:5b:1c:e0:43:e3:85:5c:a1:92:5b:22:b6:0c:cc:
e7:7a:cd:f7:7a:c2:1d:62:ad:8e:48:7f:e1:e2:e6:
7c:d6:fd:a0:94:04:51:fe:81:56:15:3c:a5:44:b2:
0b:27:31:4a:4c:8c:97:31:db:09:be:c8:f7:0d:3d:
df:8b:05:77:8a:bb:5e:9e:e3:2d:7a:04:fe:c1:4f:
3f:42:3d:98:4c:db:bb:df:15:d8:14:6a:6e:3d:a9:
21:6f:32:1d:7e:4a:c1:12:3d:ad:58:06:ff:63:9f:
ce:d5:85:16:25:ae:10:fa:d6:6b:22:e9:fd:4d:3b:
67:84:54:a4:e4:58:70:25:f6:20:cc:74:20:f7:cb:
c0:37:0f:11:c3:9d:b4:47:2c:c1:56:85:23:67:0a:
2c:b4:e3:be:29:c9:c5:13:ea:67:bf:63:ba:8a:4b:
50:5e:45:ba:41:f6:e3:b9:3e:8e:36:20:97:e7:9e:
c2:1a:16:bd:de:73:12:ba:a1:a8:34:27:a9:74:ff:
7f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EB:75:E9:82:E3:C6:01:19:88:EF:66:31:BD:89:33:15:0B:BF:E2
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/det16YLjxgEZiO9mMb2JMxULv-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.145.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:37:ea:fb:cf:cd:4f:78:42:33:ea:8d:97:6f:d3:ef:f5:b2:
56:4a:dc:16:a8:4e:e4:22:33:c9:53:fb:90:95:8e:ee:44:e7:
3f:a7:e1:1d:f4:de:96:79:98:84:9f:75:cb:70:b9:14:f6:37:
a3:36:f8:e5:59:11:30:be:87:9f:85:bc:9b:63:10:c8:c2:68:
d6:13:2d:b8:07:a1:68:cc:80:ff:ee:e7:20:d7:34:28:20:69:
a0:86:b7:7d:66:bf:48:b7:47:4c:9f:01:a0:61:aa:e5:cc:e9:
2c:ff:dd:bd:8c:62:68:1a:87:41:90:f1:c3:f1:93:1f:30:77:
ed:ce:08:52:7f:50:21:5c:34:8f:df:a7:9c:e6:82:db:9d:c9:
4d:e8:b2:b7:2a:fd:7f:36:de:56:04:ba:30:ad:ca:98:2a:f4:
1d:40:92:e4:d1:a1:1f:b3:f8:b2:18:4a:7b:1c:b0:ff:26:58:
f5:4e:08:32:c8:8f:49:8a:20:35:9f:8d:fd:9a:70:57:61:49:
c4:28:2d:31:ad:4d:2e:52:81:64:34:34:db:eb:60:d8:27:1c:
09:40:fe:8b:66:fd:84:9f:08:76:01:c8:28:8e:cc:ce:fc:c0:
b6:c7:ec:b8:f7:bd:a3:d3:7e:bc:a4:32:f7:c9:7b:d4:f7:f7:
e8:29:9e:9e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEHB6pnTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
N2Y2MWZjN2MwYWI0MWNlMTU0ZTdiY2IwOGVmOTYyMzUxYTQ2Nzg0MB4XDTIyMDUx
MDE4MTUwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzVlYjc1ZTk4MmUz
YzYwMTE5ODhlZjY2MzFiZDg5MzMxNTBiYmZlMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOOv2zrpRDNTtUO6wqsYfHoLF72JgoILrhcLdBkchMJsxWsI
U1DbdegyX55iGgroxrejH0SVzZgQ2l4gvVsc4EPjhVyhklsitgzM53rN93rCHWKt
jkh/4eLmfNb9oJQEUf6BVhU8pUSyCycxSkyMlzHbCb7I9w0934sFd4q7Xp7jLXoE
/sFPP0I9mEzbu98V2BRqbj2pIW8yHX5KwRI9rVgG/2OfztWFFiWuEPrWayLp/U07
Z4RUpORYcCX2IMx0IPfLwDcPEcOdtEcswVaFI2cKLLTjvinJxRPqZ79juopLUF5F
ukH247k+jjYgl+eewhoWvd5zErqhqDQnqXT/f/sCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR163XpguPGARmI72YxvYkzFQu/4jAfBgNVHSMEGDAWgBR39h/HwKtBzhVO
e8sI75YjUaRnhDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RfWWZ4OENyUWM0VlRudkxDTy1XSTFHa1o0US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjQvOTIxM2VjLTg1YTktNDhkNi1hYTY5LWVkYzlkMDJmYWY1NC8x
L2RldDE2WUxqeGdFWmlPOW1NYjJKTXhVTHYtSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQv
OTIxM2VjLTg1YTktNDhkNi1hYTY5LWVkYzlkMDJmYWY1NC8xL2RfWWZ4OENyUWM0
VlRudkxDTy1XSTFHa1o0US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFf4kTANBgkqhkiG9w0BAQsFAAOC
AQEAsTfq+8/NT3hCM+qNl2/T7/WyVkrcFqhO5CIzyVP7kJWO7kTnP6fhHfTelnmY
hJ91y3C5FPY3ozb45VkRML6Hn4W8m2MQyMJo1hMtuAehaMyA/+7nINc0KCBpoIa3
fWa/SLdHTJ8BoGGq5czpLP/dvYxiaBqHQZDxw/GTHzB37c4IUn9QIVw0j9+nnOaC
253JTeiytyr9fzbeVgS6MK3KmCr0HUCS5NGhH7P4shhKexyw/yZY9U4IMsiPSYog
NZ+N/ZpwV2FJxCgtMa1NLlKBZDQ02+tg2CccCUD+i2b9hJ8IdgHIKI7MzvzAtsfs
uPe9o9N+vKQy98l71Pf36Cmeng==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:09 2023 by rpki-client on console-ams.rpki-client.org