Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/iBrETAbB9xBa8rwNWuerca7B7Eg.roa
File: iBrETAbB9xBa8rwNWuerca7B7Eg.roa (raw, json)
Hash identifier: LCLKk3eaUEJQ+KzfhE9DqnJomj7dDZaoP9Oj1E1dLJ4=
Subject key identifier: 88:1A:C4:4C:06:C1:F7:10:5A:F2:BC:0D:5A:E7:AB:71:AE:C1:EC:48
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018393DA6D2F6E83B40D40F5C863CA139D45
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/iBrETAbB9xBa8rwNWuerca7B7Eg.roa
Signing time: Sat 01 Oct 2022 14:01:48 +0000
ROA not before: Sat 01 Oct 2022 14:01:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 87.248.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:93:da:6d:2f:6e:83:b4:0d:40:f5:c8:63:ca:13:9d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Oct 1 14:01:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=881ac44c06c1f7105af2bc0d5ae7ab71aec1ec48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0b:a5:25:22:ed:36:42:9e:e4:4f:82:83:9c:
f5:7e:3c:d7:25:2e:83:40:1a:8b:e8:de:1a:a7:fd:
4a:7f:99:20:4f:f6:67:9f:a5:7b:f9:27:a6:47:d8:
e3:86:c2:7e:42:46:76:41:66:91:65:6a:b5:48:ff:
70:1e:85:84:6e:95:63:36:b2:19:e2:eb:a6:c3:e8:
c6:be:02:ff:22:4e:ff:e3:b8:b4:58:f3:70:7d:65:
c4:bc:01:a2:1c:30:d1:d1:ca:72:16:d6:57:5b:bd:
8e:1f:d3:9e:61:54:49:7c:5d:fb:72:ed:94:ea:fe:
13:f5:1d:d1:00:27:ad:78:f9:0b:19:21:04:ec:e2:
e0:b2:e8:e2:9e:ad:da:f5:67:e1:17:ea:f8:2b:f9:
37:a3:c6:27:ec:a2:5f:62:fc:5d:ef:33:da:56:3c:
35:dd:38:9c:05:34:68:3a:e2:c7:b5:4e:d7:2b:c3:
ee:19:11:be:c2:87:b6:cc:60:7f:cd:14:c7:43:4e:
ee:ff:79:b3:03:bd:0c:b4:5a:63:22:b4:11:eb:12:
be:a7:0c:bd:de:39:0a:56:dc:89:f8:17:e4:6b:49:
b7:ee:76:38:fe:8b:6f:99:b1:49:d5:1c:98:7d:ee:
38:3c:1b:bb:a5:a4:fe:f7:f0:23:50:f0:a1:ac:1b:
78:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1A:C4:4C:06:C1:F7:10:5A:F2:BC:0D:5A:E7:AB:71:AE:C1:EC:48
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/iBrETAbB9xBa8rwNWuerca7B7Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.158.0/24
Signature Algorithm: sha256WithRSAEncryption
08:8f:62:ac:d3:43:1a:e6:a3:fb:0e:c1:df:0b:d6:a9:36:1c:
2e:64:93:0a:34:65:e4:6e:08:a4:ab:3e:e5:3e:08:4e:67:9c:
66:35:89:da:2f:61:a1:13:6a:64:eb:e7:bb:a1:f2:1d:15:d2:
97:1a:4c:83:fc:da:d6:1e:5c:ea:73:b0:dc:2e:21:e2:bc:48:
bd:01:86:4d:b4:83:91:92:59:0f:0e:12:ae:cf:ac:9a:ff:9a:
5f:58:df:dd:24:6a:58:22:39:f4:bc:0a:bc:ee:29:ea:c1:47:
9d:60:63:48:68:19:dc:f3:3c:c5:bf:fc:21:5d:43:bf:bd:36:
4b:a8:6f:2a:9a:08:b9:a7:2a:bc:46:4a:53:73:ce:ec:a7:b0:
9d:f3:e4:bd:25:75:8c:e7:c5:b8:92:41:e5:d7:3c:bd:a8:73:
03:32:9f:4a:3a:73:e6:a6:fc:82:09:c6:04:85:66:fc:61:b7:
2d:66:4d:6c:32:a8:5d:c6:e9:ef:c1:7f:0d:ec:d2:52:94:f7:
4b:47:aa:a2:5d:56:a7:ba:0d:bc:fa:f6:97:63:47:ed:5c:05:
6d:3c:ee:7b:22:62:32:3a:c6:5f:a1:5e:13:5f:32:28:4f:b8:
3e:32:53:a1:cb:fb:16:f4:bf:72:9f:2c:6e:0e:49:cb:b8:3c:
ac:c0:85:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:22 2023 by rpki-client on console-fra.rpki-client.org