Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/hb2BFt6NDxC7QMRQxACeepzTULs.roa
File: hb2BFt6NDxC7QMRQxACeepzTULs.roa (raw, json)
Hash identifier: lXFF1Vi5sawjtxZh6Q+nctivLnYDzfv6BwGBdrun7DU=
Subject key identifier: 85:BD:81:16:DE:8D:0F:10:BB:40:C4:50:C4:00:9E:7A:9C:D3:50:BB
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018456587C47AC8050E06E65C001E65C162F
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/hb2BFt6NDxC7QMRQxACeepzTULs.roa
Signing time: Tue 08 Nov 2022 08:25:50 +0000
ROA not before: Tue 08 Nov 2022 08:25:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 150303
IP address blocks: 87.248.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:56:58:7c:47:ac:80:50:e0:6e:65:c0:01:e6:5c:16:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Nov 8 08:25:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85bd8116de8d0f10bb40c450c4009e7a9cd350bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:9f:88:eb:2e:03:04:11:77:c5:e8:2c:f6:
68:b0:0f:b9:91:4e:72:f4:c2:a5:ad:b3:9b:19:cc:
82:c7:6e:90:c6:6f:92:91:c5:01:9b:0a:94:75:c5:
1a:3e:5c:1a:5a:24:e0:fa:79:8a:72:e9:76:5b:1b:
b5:40:54:1d:b0:16:cc:da:a2:97:f4:d7:f6:b9:cc:
ac:bf:79:8f:a3:9f:25:6c:33:7f:98:e5:25:0f:4b:
9d:ea:b9:ec:ed:1d:93:42:06:f2:77:74:bb:07:e4:
eb:0a:84:01:50:c8:db:08:0c:06:d6:1d:5d:00:0a:
b9:e2:61:05:5c:e9:57:fa:9f:b6:84:f0:dd:fd:aa:
18:45:fa:cb:1a:78:b0:ef:a7:ca:ba:25:78:4d:1a:
7c:25:05:e3:07:8b:ea:d6:40:58:32:04:26:af:ff:
5f:9d:dd:a5:e2:a9:12:3d:dc:50:c2:4f:cd:e2:a5:
9c:75:74:8b:f1:ac:4d:e8:4e:89:9b:f9:91:6a:f5:
be:cd:46:33:77:88:a8:3b:03:59:d2:e9:96:58:27:
74:de:be:0c:99:c6:27:18:d4:14:e3:76:da:fe:fb:
24:0c:ef:84:4e:59:3f:15:1a:0f:7d:a5:91:4a:f4:
07:23:b7:d6:a8:b0:d3:8e:ed:51:74:f4:c9:70:8a:
94:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BD:81:16:DE:8D:0F:10:BB:40:C4:50:C4:00:9E:7A:9C:D3:50:BB
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/hb2BFt6NDxC7QMRQxACeepzTULs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.131.0/24
Signature Algorithm: sha256WithRSAEncryption
26:c7:9e:23:dd:95:a8:77:94:b1:ba:c1:0e:76:df:82:7c:fd:
5e:db:c1:d2:3c:db:5f:cc:e4:a0:50:31:b9:d4:53:65:6d:70:
6b:ac:fa:1d:f1:a0:74:14:c3:66:9b:e0:09:d0:71:45:3b:ff:
96:46:e3:02:9e:8b:72:7a:12:14:17:c0:7c:4d:8a:33:c3:ce:
3a:b1:42:52:31:f0:8f:79:3c:60:90:23:2a:1a:46:94:2c:db:
ff:a9:7c:46:81:63:8b:73:10:55:4d:35:19:34:b9:bb:64:43:
38:7f:52:1c:65:3d:42:a5:c7:0a:6f:74:dd:9a:30:4b:35:ca:
b6:e2:b0:34:29:bd:04:b1:70:da:e7:0d:1a:6c:58:62:70:bd:
01:ea:0a:23:ac:68:89:29:20:c1:4f:72:88:c1:c2:9b:f4:5c:
64:4f:ef:93:8f:e3:d5:cb:0b:20:21:b7:02:2a:65:88:91:a0:
c1:74:7a:62:42:a7:d3:fc:53:59:21:f4:93:d1:f4:f7:5b:48:
36:59:49:99:e4:37:aa:17:04:30:60:1f:87:d1:6d:cc:80:ea:
09:a6:8b:80:cc:db:8c:44:9b:4b:0a:4b:ea:24:46:ae:06:7d:
83:b0:8d:45:2e:1c:dc:c0:af:e3:87:12:11:04:63:22:e9:c2:
4a:a5:20:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:35 2024 by rpki-client on console-fra.rpki-client.org