Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/i5rCZiht3FJ5GP016ngqVc51ATI.roa
File: i5rCZiht3FJ5GP016ngqVc51ATI.roa (raw, json)
Hash identifier: g7PcGraRKfRu7tzd3ri8r6j1Wy1HzitCzCo3h8ok8z8=
Subject key identifier: 8B:9A:C2:66:28:6D:DC:52:79:18:FD:35:EA:78:2A:55:CE:75:01:32
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 0182B1D1D7B76489C99E3BBBB54DF7AC644B
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/i5rCZiht3FJ5GP016ngqVc51ATI.roa
Signing time: Thu 18 Aug 2022 16:38:15 +0000
ROA not before: Thu 18 Aug 2022 16:38:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47843
IP address blocks: 87.248.128.0/24 maxlen: 24
87.248.150.0/24 maxlen: 24
87.248.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b1:d1:d7:b7:64:89:c9:9e:3b:bb:b5:4d:f7:ac:64:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Aug 18 16:38:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b9ac266286ddc527918fd35ea782a55ce750132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:ff:27:5c:ab:b7:74:67:e6:48:ab:2e:95:
ce:d2:4f:35:b0:57:db:e6:41:89:39:0f:43:c2:fc:
f7:dc:9c:af:a5:3f:e6:4c:b1:60:85:bc:11:f3:aa:
2c:06:bf:01:96:95:fe:92:62:2e:f9:ae:45:0f:c8:
ff:10:93:f1:1b:df:c8:81:fe:7c:e1:40:97:cd:5a:
93:1b:66:cb:5d:99:d5:5d:fe:20:21:53:d9:a0:61:
d0:f5:c9:66:2f:fa:8e:6b:1a:19:e0:5e:d9:32:aa:
99:49:96:03:9f:da:7a:7f:e1:f3:e3:19:67:49:32:
f0:23:e7:93:8f:59:ca:13:56:67:cc:5d:76:4f:b2:
c7:d7:56:dd:ec:14:08:cb:6d:91:74:db:a6:77:0d:
a8:5b:aa:fc:41:d7:11:51:e7:2f:8d:27:53:95:b5:
54:ec:42:5c:7e:f2:38:95:e0:db:56:68:66:5a:56:
2f:e9:e1:90:a1:64:fb:09:49:1a:45:7c:1b:64:32:
70:82:5f:32:1f:64:c7:cb:5e:7c:f7:e8:d0:98:14:
ec:c7:48:b0:7c:7d:f0:bd:49:e3:5f:f9:ae:70:2d:
75:c6:2e:54:94:58:53:e3:bb:8e:13:82:07:9c:c8:
f2:90:a7:a0:e5:17:ab:bf:b3:8b:2f:ec:8b:c7:42:
b3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9A:C2:66:28:6D:DC:52:79:18:FD:35:EA:78:2A:55:CE:75:01:32
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/i5rCZiht3FJ5GP016ngqVc51ATI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.128.0/24
87.248.150.0/24
87.248.155.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:e2:a3:c9:12:f1:61:05:c6:aa:8f:2b:f5:5d:48:aa:db:d8:
99:1e:a8:f5:2f:21:da:03:65:bf:28:ad:ee:15:bb:94:e2:90:
45:f8:af:ab:ed:2e:02:2c:44:c1:3d:94:0e:2d:81:61:77:62:
77:20:a6:bd:3c:73:98:b4:db:90:08:5f:54:64:41:9b:85:8e:
7b:3e:b7:ad:95:f9:f4:d4:cb:3c:83:e6:5a:63:8e:a1:8f:35:
43:f5:90:bf:97:fe:93:22:bd:d0:0a:27:8b:94:02:95:cb:40:
70:be:13:3a:d0:9f:aa:5f:16:04:33:04:23:f1:3b:37:3b:dc:
34:d9:69:8f:df:3f:1a:c8:26:d1:4b:87:82:f6:04:86:d6:05:
82:03:69:9c:20:2c:56:71:50:a4:25:13:37:9b:b4:f9:e0:93:
72:1a:35:a3:aa:85:f7:68:48:18:52:d7:16:d5:9f:af:5a:bf:
92:82:c5:f6:82:30:44:ac:c1:ae:87:40:70:07:5d:45:3c:73:
8d:8b:0f:f6:d6:bd:0a:5d:3e:67:a2:db:01:89:2d:2b:7d:e1:
f2:b7:ad:cb:0c:dd:41:45:a9:e7:a7:94:c0:c5:c1:fc:8f:d0:
fe:90:54:e4:9d:50:cb:1a:7e:d3:dd:20:58:4f:aa:d5:54:d9:
3b:be:ca:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:26 2024 by rpki-client on console-ams.rpki-client.org