Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/eP9HQDt4P1DqMI75ikpJ1ogsrCM.roa
File: eP9HQDt4P1DqMI75ikpJ1ogsrCM.roa (raw, json)
Hash identifier: p/8cZkkP/hWnLa8sTy5HrKWeiOUv9/Jra75aWXHKzoo=
Subject key identifier: 78:FF:47:40:3B:78:3F:50:EA:30:8E:F9:8A:4A:49:D6:88:2C:AC:23
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1C011BF3
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/eP9HQDt4P1DqMI75ikpJ1ogsrCM.roa
Signing time: Thu 05 May 2022 13:26:57 +0000
ROA not before: Thu 05 May 2022 13:26:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 87.248.130.0/24 maxlen: 24
87.248.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469834739 (0x1c011bf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: May 5 13:26:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78ff47403b783f50ea308ef98a4a49d6882cac23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3c:fa:d6:d6:27:d8:77:6e:82:b1:18:38:61:
9b:de:59:50:8e:fb:1d:cf:fb:dc:da:d9:c2:54:05:
7d:2a:f0:8e:9a:dc:b4:5d:f0:d2:dc:e4:31:b8:bf:
79:67:88:3f:2f:c3:01:14:fb:f9:77:09:a1:e9:46:
64:67:b8:00:3b:1e:8e:c2:b3:cb:3c:8b:0f:1f:8e:
ed:fb:b9:39:50:22:0d:17:bc:b2:1a:8f:79:b3:ad:
0b:b8:51:35:ad:8e:77:55:db:ae:19:02:4b:55:a7:
a5:33:d2:eb:11:95:20:19:3a:19:36:99:d7:5b:06:
b6:82:d7:94:85:88:d2:d2:05:52:8e:64:56:ac:be:
67:ab:b9:73:2d:b6:5a:05:19:ab:f5:3a:35:7a:d7:
f1:c7:a0:68:e8:8f:48:48:3b:58:a9:8f:a2:7f:35:
60:2f:bc:b4:f1:83:d0:08:16:bc:5c:b1:68:81:49:
b3:c2:fb:ee:91:78:77:31:6a:c5:b3:3c:55:cb:32:
90:e0:e1:34:90:a8:8e:41:d4:1d:ce:10:04:bf:c1:
c9:06:c7:92:15:ed:5b:06:62:f0:3d:0d:84:02:41:
4b:19:88:06:55:ab:e9:d0:f1:50:e0:2b:b1:56:7f:
e3:49:a7:91:e7:f2:d6:b9:e1:91:cc:79:59:d7:e1:
b9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FF:47:40:3B:78:3F:50:EA:30:8E:F9:8A:4A:49:D6:88:2C:AC:23
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/eP9HQDt4P1DqMI75ikpJ1ogsrCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.130.0/24
87.248.150.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:32:d6:70:98:61:ae:39:5d:9f:26:ce:47:e5:bd:38:e9:94:
e1:79:6d:38:fc:6d:f8:f1:38:3f:38:31:4e:bd:e4:cb:c6:c5:
3d:d4:84:e6:f5:33:87:1e:3e:34:c5:e3:b5:31:c2:63:45:ce:
3a:16:71:8e:00:9b:8b:2a:b5:fa:75:43:bf:67:3d:a2:54:51:
00:24:d0:64:2e:47:b8:b4:49:1b:22:3b:f5:bf:2f:f0:b3:06:
2e:18:ca:ff:7f:1a:f3:81:9d:00:ee:f2:ab:7c:42:c9:5d:70:
4c:4a:9f:ec:65:d9:df:fd:93:d2:86:62:ff:19:25:e3:44:55:
5f:a4:97:fc:8b:da:ac:58:c1:13:30:19:1f:fe:21:fc:f4:9a:
73:34:a7:e8:ab:43:ee:fb:1c:ae:37:9f:b1:7f:9c:07:6d:3b:
55:1d:e8:04:7b:22:3a:85:45:b2:a4:ce:e7:89:59:52:46:1d:
67:7a:7e:18:e0:30:74:e6:b6:13:75:d1:61:9a:23:dc:0f:3f:
e8:be:bb:36:42:4e:8e:2b:3d:89:9d:e9:62:ed:ff:88:19:5e:
79:fd:69:16:73:e5:b9:c9:bd:95:99:ac:53:80:36:d5:be:b3:
81:60:fc:e9:14:5c:a6:ed:60:c4:a7:73:75:64:95:34:d8:8a:
c6:32:da:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:22 2023 by rpki-client on console-fra.rpki-client.org