Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/gs4viYuzkADk713bCSLxl2Fl5_0.roa
File: gs4viYuzkADk713bCSLxl2Fl5_0.roa (raw, json)
Hash identifier: bFCSRAcON9PkHC236vuN3xANkMNTkETL0GFFfm/whXI=
Subject key identifier: 82:CE:2F:89:8B:B3:90:00:E4:EF:5D:DB:09:22:F1:97:61:65:E7:FD
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01826D3DCF305BAF1AB568C3BF39817C907E
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/gs4viYuzkADk713bCSLxl2Fl5_0.roa
Signing time: Fri 05 Aug 2022 09:02:23 +0000
ROA not before: Fri 05 Aug 2022 09:02:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210122
IP address blocks: 87.248.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:3d:cf:30:5b:af:1a:b5:68:c3:bf:39:81:7c:90:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Aug 5 09:02:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82ce2f898bb39000e4ef5ddb0922f1976165e7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:66:d5:82:7b:65:c9:5d:0f:17:f2:4e:f9:a9:
9e:ea:21:e6:76:3e:83:0d:57:f6:3d:94:fb:d3:83:
42:99:30:a6:ba:94:48:9d:8a:8e:7b:d1:3e:7a:35:
03:04:30:08:d6:2a:64:00:fb:df:d2:ea:89:c1:41:
36:f3:f7:47:b8:2c:96:8b:0e:9b:84:96:fa:82:52:
8c:a2:e7:38:bd:d8:bf:d2:65:2e:a8:12:fb:53:e2:
95:f8:c2:eb:47:1a:d2:0a:a1:e7:3d:23:99:16:df:
70:6e:16:fc:4a:b3:80:df:3a:c3:3c:8e:54:c9:2b:
a2:fb:fe:88:4c:a0:5a:19:14:72:4a:96:47:34:21:
df:cc:bd:d3:30:c8:98:6d:2c:6f:00:8d:04:bf:b5:
7e:84:5f:41:02:35:3c:f8:13:f9:4a:b4:73:50:b7:
b6:f9:40:c2:46:b9:04:db:7a:fd:f2:05:14:49:f3:
5f:79:6a:dc:e7:09:d7:64:93:6f:4a:8d:b4:78:a6:
f9:f2:89:8f:38:17:f8:39:6b:9e:8d:af:d9:6d:2c:
f7:7b:17:df:c7:bd:fb:39:a4:e1:f1:ac:10:93:51:
e1:a5:d6:f3:b5:0d:4b:45:e9:0c:9f:c3:17:86:b6:
e6:ac:bf:2a:8f:d0:72:9c:86:b9:40:56:cc:be:47:
29:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CE:2F:89:8B:B3:90:00:E4:EF:5D:DB:09:22:F1:97:61:65:E7:FD
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/gs4viYuzkADk713bCSLxl2Fl5_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.132.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:80:2e:6d:0d:ae:e5:d3:61:3f:86:c2:b6:7e:fa:7f:ae:e8:
cd:b9:aa:b5:f7:cd:31:b5:73:8e:61:a5:e3:c5:0c:46:80:3e:
45:58:a8:14:c7:77:66:e5:40:4d:72:4f:31:8a:a2:48:6a:29:
f3:8f:0f:b8:13:26:a8:88:95:a3:e0:d7:6c:06:72:8f:e6:54:
93:a5:0d:db:0c:1f:24:b8:ce:55:2b:88:bc:76:92:aa:bf:1d:
79:90:91:d5:be:ee:23:a3:a4:c7:9c:ba:b4:fc:61:da:e8:fb:
2e:ef:8c:d9:08:24:d3:8b:59:54:bb:9a:f9:95:c5:01:a7:a1:
78:95:59:68:38:ae:37:25:aa:9f:77:fc:1e:3a:f1:5a:44:13:
85:2a:02:e4:27:99:23:ac:0a:3d:9e:3b:a0:d8:4c:e9:15:11:
a7:75:b6:c5:ed:47:a8:b4:1b:59:33:5e:b0:1a:c1:96:fe:9a:
b9:c5:81:bd:71:ff:c7:78:1b:19:17:65:c2:01:c3:fb:20:62:
26:25:df:02:e9:5e:7b:46:a6:fa:cd:09:6c:fc:8b:94:d0:df:
cc:94:b4:bc:46:32:ea:84:03:45:19:d4:2d:fa:8b:08:be:c7:
04:cf:1d:8b:dc:03:50:fe:37:78:77:8f:95:be:e6:bd:f4:8c:
44:b0:04:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:09 2023 by rpki-client on console-ams.rpki-client.org