Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/jA3tiaK9jI8Ag7Epc6J3H1MXzDA.roa
File: jA3tiaK9jI8Ag7Epc6J3H1MXzDA.roa (raw, json)
Hash identifier: BD54Em5+7usqqZf8zlDAxoIVQprV220692Klj70DB5E=
Subject key identifier: 8C:0D:ED:89:A2:BD:8C:8F:00:83:B1:29:73:A2:77:1F:53:17:CC:30
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 0182C97493129D6940E181CCD4C1B472492D
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/jA3tiaK9jI8Ag7Epc6J3H1MXzDA.roa
Signing time: Tue 23 Aug 2022 06:47:16 +0000
ROA not before: Tue 23 Aug 2022 06:47:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201364
IP address blocks: 87.248.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c9:74:93:12:9d:69:40:e1:81:cc:d4:c1:b4:72:49:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Aug 23 06:47:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c0ded89a2bd8c8f0083b12973a2771f5317cc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:65:e9:15:89:3b:1c:5c:d9:d8:b6:21:89:4c:
64:0b:68:93:8b:1f:31:b8:0b:9e:94:34:48:61:fe:
3a:8c:09:45:ba:a3:4a:d2:46:69:c0:a1:49:13:1c:
7f:a5:a3:81:54:e2:a0:84:d2:8f:ea:ce:ff:1f:94:
05:4d:6d:ea:1c:a2:a0:67:b5:2d:71:9f:64:ad:bc:
23:92:56:5e:f7:5c:7f:d9:7f:60:9e:64:02:65:d0:
b6:29:1f:9d:b0:e9:a0:35:41:67:74:f8:92:a1:99:
df:25:fe:46:69:0a:0f:35:df:34:f4:ba:e2:53:d5:
f9:b5:de:74:d8:64:34:b2:1c:78:2e:e2:10:8e:d6:
f6:cc:b0:2e:0c:a7:d4:87:e7:e4:4e:fa:81:96:88:
e3:2b:85:3f:64:af:00:45:8e:17:65:d5:85:4a:17:
84:d9:ce:bf:22:ec:13:48:b7:dc:d7:fb:57:98:48:
11:6d:47:91:68:4e:5c:70:f8:86:a2:3e:01:45:62:
fc:b4:e5:62:86:49:ac:85:98:d9:18:95:66:f9:32:
78:43:67:d0:b5:42:14:86:53:ec:3a:49:18:3c:ff:
22:74:d1:5c:6b:c1:57:2a:2c:7f:17:b4:bb:8b:e6:
60:8b:9b:41:74:7d:f1:b5:1c:78:6d:16:df:bb:fd:
2b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0D:ED:89:A2:BD:8C:8F:00:83:B1:29:73:A2:77:1F:53:17:CC:30
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/jA3tiaK9jI8Ag7Epc6J3H1MXzDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.157.0/24
Signature Algorithm: sha256WithRSAEncryption
72:b7:bf:df:c1:75:c3:be:d3:83:d9:86:13:d2:2a:be:8c:18:
0a:e8:d9:fe:ab:41:8e:0f:6e:23:42:b7:cb:98:d6:0d:ea:eb:
71:8d:2e:e1:5b:9b:0d:02:7c:3f:55:fa:8d:16:b7:3e:72:63:
85:f8:3b:a0:30:53:b4:6d:cd:0e:79:3f:2b:cd:52:4e:6d:94:
b5:ef:32:83:42:7d:15:2a:b3:f6:3a:6a:4f:28:74:92:6f:7b:
22:0d:c4:00:ee:a4:99:03:6b:2a:e7:af:a7:b8:47:c5:bd:ad:
b6:0b:a3:86:81:89:7a:ed:e5:9e:ce:7c:18:34:aa:69:9c:79:
33:4a:ab:27:32:b8:2b:c9:69:db:2c:80:8a:68:ff:0e:9c:0a:
c5:16:b3:b1:fa:a2:dd:e6:51:68:2f:20:62:36:98:40:a4:76:
a1:3b:13:3d:87:25:51:f8:fe:f8:de:e6:1f:1a:8e:c7:0a:0e:
de:88:3a:9e:74:e5:b1:e1:62:a0:bd:d8:de:c1:50:d3:4c:79:
a8:e7:1f:a9:71:a7:21:3d:62:ff:6a:1c:67:23:41:3a:b0:80:
4c:9b:05:51:c9:7b:db:26:ff:b1:48:44:85:a7:f1:d7:b9:c8:
9a:57:46:97:d1:e5:42:79:6c:74:12:29:11:3b:35:fc:4b:c4:
79:1d:1b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:22 2023 by rpki-client on console-fra.rpki-client.org