Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/fFx8h57-3BRrRKi-v68TRj-msno.roa
File: fFx8h57-3BRrRKi-v68TRj-msno.roa (raw, json)
Hash identifier: 1qTIEXSJ0xzdnZGrA4D2ygnw4luVeWpPVp+BSV7rcuM=
Subject key identifier: 7C:5C:7C:87:9E:FE:DC:14:6B:44:A8:BE:BF:AF:13:46:3F:A6:B2:7A
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 0181D83A9C55F2CEF45C33129E60044BC8C0
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/fFx8h57-3BRrRKi-v68TRj-msno.roa
Signing time: Thu 07 Jul 2022 10:35:28 +0000
ROA not before: Thu 07 Jul 2022 10:35:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60823
IP address blocks: 87.248.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:3a:9c:55:f2:ce:f4:5c:33:12:9e:60:04:4b:c8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jul 7 10:35:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c5c7c879efedc146b44a8bebfaf13463fa6b27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:13:c6:1a:7c:3a:e7:2d:b2:cd:d9:61:33:
61:d8:75:31:59:5b:b0:d9:9d:ea:70:f3:e2:fd:77:
f3:99:1f:75:94:5e:53:76:a4:47:4d:ba:c5:a9:26:
23:48:56:6d:64:20:9f:1a:00:5e:bf:f3:f7:81:21:
1f:5e:fc:99:30:9a:43:d3:57:f5:c2:d8:79:25:b0:
24:64:b5:ef:da:c3:c8:10:c8:a2:5d:87:1b:e7:60:
94:45:89:89:26:a9:3d:26:e0:d4:8b:bc:22:8e:a3:
ce:0a:98:86:20:e5:e7:7e:6a:ca:b7:36:66:c1:a7:
40:b6:1f:bb:42:55:de:3b:f0:eb:1a:49:e4:19:1e:
53:bc:61:4b:b0:be:0c:74:61:9b:14:7a:fd:f6:aa:
3b:6e:c4:a9:96:30:51:58:07:20:de:48:ee:6b:c9:
0b:49:74:49:2d:4d:6b:72:67:0e:47:27:dd:a5:ff:
a4:2f:76:89:90:37:9e:95:47:d8:18:47:8b:c8:c8:
7a:24:4a:34:ef:b4:1a:33:8c:96:6c:7f:52:47:9d:
b9:d0:ec:2a:0f:5b:28:da:53:01:b4:d1:0d:8a:9f:
3a:b9:1c:7d:f0:75:da:76:f1:6d:d7:36:8a:81:9d:
3c:31:e7:b1:a8:3f:4b:43:4d:b9:c6:d0:3d:0b:37:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5C:7C:87:9E:FE:DC:14:6B:44:A8:BE:BF:AF:13:46:3F:A6:B2:7A
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/fFx8h57-3BRrRKi-v68TRj-msno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.157.0/24
Signature Algorithm: sha256WithRSAEncryption
76:82:4f:6c:1f:3d:01:de:20:d1:3e:9b:9a:c3:8b:27:04:5b:
77:dc:99:d4:39:5e:eb:71:a1:ab:7a:c7:6c:14:06:d9:6d:1b:
b7:70:e7:89:2a:97:ca:b0:e6:e9:4e:49:53:a1:44:6c:eb:6b:
89:ca:c8:f5:e9:5e:a5:2b:b6:43:24:69:b0:18:26:0e:a8:29:
35:c0:e6:95:76:c9:7b:e1:cd:8f:69:d0:b3:ff:53:c5:3a:f2:
3b:71:0d:56:0a:e9:26:c8:91:fb:af:19:bf:4e:c9:34:30:35:
cd:aa:5e:be:a5:6e:d5:1e:dc:89:3c:25:8a:e8:15:49:eb:3b:
43:fb:d5:6d:6f:83:8e:d0:26:5b:1c:73:e4:ba:c6:68:ec:b0:
2c:54:b2:f6:f6:3e:ac:9a:2c:fe:54:6d:f6:12:16:59:46:86:
4b:25:2c:d1:6b:95:a5:e9:19:7a:dc:09:78:05:39:18:58:36:
ee:3f:8d:0a:90:5a:c1:14:0c:08:d1:88:2b:36:3a:d9:6e:56:
34:14:b8:27:8a:02:5f:4e:03:54:98:5c:5a:a2:e5:c6:5b:3a:
02:4a:e7:51:8a:34:30:fc:31:94:47:c9:02:90:0d:f5:bf:a1:
9a:36:7c:74:96:71:f9:ad:19:27:1b:bd:a2:bb:f3:aa:af:31:
86:98:e3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:22 2023 by rpki-client on console-fra.rpki-client.org