Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/eB33-sjiQ5Ro4j4HX53_tCuknDI.roa
File: eB33-sjiQ5Ro4j4HX53_tCuknDI.roa (raw, json)
Hash identifier: M8C14pg3ml2EvC68BO4Y+zGfSymYEquD3MUiDbi7H84=
Subject key identifier: 78:1D:F7:FA:C8:E2:43:94:68:E2:3E:07:5F:9D:FF:B4:2B:A4:9C:32
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018303174EF7515D8E320EECDB826AFE5065
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/eB33-sjiQ5Ro4j4HX53_tCuknDI.roa
Signing time: Sat 03 Sep 2022 11:23:22 +0000
ROA not before: Sat 03 Sep 2022 11:23:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47843
IP address blocks: 87.248.128.0/24 maxlen: 24
87.248.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:03:17:4e:f7:51:5d:8e:32:0e:ec:db:82:6a:fe:50:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Sep 3 11:23:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=781df7fac8e2439468e23e075f9dffb42ba49c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:43:0f:ac:11:df:92:91:63:4e:1a:5a:81:40:
ba:04:4a:b7:0c:45:01:3f:ce:b8:1f:85:8f:a7:7d:
a3:d8:dc:48:c7:8a:1e:05:48:2e:20:ab:4c:29:ec:
4e:07:e9:cc:9c:f5:b7:db:3a:13:f5:df:78:49:b5:
a6:b3:72:c1:27:a0:c6:e1:a0:22:16:25:ab:f5:05:
1c:66:14:a2:51:45:2e:2d:26:2c:47:d8:d0:fd:44:
f4:70:26:c3:04:05:f1:4f:72:fd:a3:ec:6f:78:33:
80:5f:3d:8f:ff:4c:d5:4d:da:d0:c7:c0:6e:4c:a4:
15:8b:21:d1:80:6d:04:cf:ac:4f:ce:db:72:0b:db:
52:f3:e0:f2:9a:fe:46:98:39:c6:30:23:dd:cb:0f:
0a:fb:5a:4e:f8:61:0e:40:da:81:dd:88:c2:eb:1b:
77:e9:75:92:f8:6e:b7:3f:59:e1:a6:e0:25:85:c6:
db:c9:c7:3b:19:02:b1:c0:97:70:5a:de:da:74:bc:
e3:d2:5b:d4:cc:23:76:e1:2f:8f:95:27:68:56:53:
3a:14:5f:53:67:7e:6d:95:b1:cb:30:a5:aa:bd:da:
5d:10:f3:61:01:8e:d4:74:18:20:42:d4:24:f9:a1:
f6:36:4a:40:b5:48:d1:b2:54:74:44:09:57:a7:7b:
23:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1D:F7:FA:C8:E2:43:94:68:E2:3E:07:5F:9D:FF:B4:2B:A4:9C:32
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/eB33-sjiQ5Ro4j4HX53_tCuknDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.128.0/24
87.248.155.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:36:82:f6:b6:5d:d4:71:e5:e1:12:67:dd:f4:02:82:21:ad:
6c:47:e3:00:4e:52:40:f0:36:ba:7f:ec:d2:b1:71:58:4c:d9:
5a:11:f5:82:96:bb:87:73:91:9a:39:f3:70:ed:b0:ad:4c:84:
4e:25:52:6b:e2:fb:86:64:6c:fe:42:d6:9b:d9:8b:0b:05:23:
f3:b5:e6:00:ea:c8:87:0d:c7:02:31:c7:41:13:1b:0d:85:aa:
b7:5f:6b:5c:99:5a:b7:86:13:31:c5:2c:85:eb:5d:ee:b6:0a:
61:eb:90:9b:37:ef:20:d8:c2:cb:5c:2e:90:78:c6:71:4e:c2:
3e:6d:73:83:90:77:34:1f:56:e7:d0:14:ec:96:34:76:a5:38:
60:cd:db:91:cd:9d:b3:ad:2b:5c:5d:34:97:bb:59:e9:d0:74:
8d:cd:6f:6a:36:1a:51:35:8d:a3:73:4d:03:59:15:76:ba:4b:
e0:b4:af:64:30:ba:8e:76:aa:22:fb:34:6b:a5:40:7f:ea:ee:
00:f6:fb:34:fa:e1:21:7e:a6:24:db:32:69:87:94:09:1b:3d:
d1:a5:89:a2:1c:1d:12:ae:61:7f:50:ba:df:74:6f:e1:9a:b8:
bb:5c:bd:21:6a:cc:66:ec:6f:1a:6f:d8:45:92:d6:c4:71:3b:
1f:c4:58:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:22 2023 by rpki-client on console-fra.rpki-client.org