Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/pvKAdDVgKWdYruFU16tVHoq-wHU.roa
File: pvKAdDVgKWdYruFU16tVHoq-wHU.roa (raw, json)
Hash identifier: Qbs6Qa8YQIadFHGnF8TsGqBQDk3Ucopp6uauh7hfAPg=
Subject key identifier: A6:F2:80:74:35:60:29:67:58:AE:E1:54:D7:AB:55:1E:8A:BE:C0:75
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1CAD06B1
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/pvKAdDVgKWdYruFU16tVHoq-wHU.roa
Signing time: Tue 05 Jul 2022 07:44:25 +0000
ROA not before: Tue 05 Jul 2022 07:44:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 87.248.151.0/24 maxlen: 24
87.248.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481101489 (0x1cad06b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jul 5 07:44:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6f280743560296758aee154d7ab551e8abec075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a9:64:d2:c1:ac:38:38:e5:40:1b:9e:87:6f:
9d:ac:4a:57:a7:97:1f:a4:73:05:95:69:f8:a5:14:
87:2e:5e:cc:b7:1c:ef:6e:a2:f8:64:1c:0d:8d:d9:
ff:a9:40:8d:38:a4:69:ec:59:02:c9:00:d2:51:84:
c2:fe:0d:cc:c6:f9:71:59:ee:65:ec:bd:2a:7a:58:
9e:32:89:4d:f3:6a:d1:72:76:be:59:6f:35:30:9a:
56:b8:3f:af:fc:a3:66:e3:c9:70:c0:08:ca:c4:b2:
09:98:89:15:36:97:96:6c:09:5f:17:e2:01:6b:0c:
e0:b8:3d:cd:e3:51:ae:93:52:9a:ad:3b:2e:42:72:
69:a1:d8:6e:df:3a:37:24:8f:08:ad:cc:1a:76:7d:
05:1e:0e:6f:da:39:95:c3:69:79:9e:82:0a:42:53:
30:ba:69:ed:ef:e8:e4:7c:69:60:30:fd:dc:c8:67:
d1:e0:df:2d:d0:87:cf:02:61:8d:be:a1:34:a7:37:
e6:7e:83:1e:fc:e6:8b:d1:cc:a3:5b:e0:42:6d:43:
a1:77:5a:d6:fe:6c:24:26:3a:80:91:3d:17:ca:d1:
90:47:42:36:57:1c:1b:62:de:d6:dc:69:38:7e:b8:
2c:66:d1:04:5c:7d:87:23:70:03:7a:a6:91:a4:37:
a0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F2:80:74:35:60:29:67:58:AE:E1:54:D7:AB:55:1E:8A:BE:C0:75
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/pvKAdDVgKWdYruFU16tVHoq-wHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.151.0/24
87.248.155.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:86:01:6b:00:ad:62:04:ac:16:e1:1d:27:01:54:b0:e4:d6:
f0:24:83:55:c9:8d:dc:35:c1:09:0e:36:62:dd:49:c5:9f:1b:
e2:01:e1:a3:3e:a5:15:26:3e:8a:37:94:36:f0:dc:2c:32:f9:
e9:98:34:94:ee:3f:19:f1:59:b4:30:a1:15:da:b1:9e:a5:1b:
a0:72:dd:91:36:43:82:0d:2b:ab:c8:c5:73:ed:40:84:da:97:
74:f9:23:6a:74:a8:07:44:bb:af:48:31:0b:57:d2:cb:1b:ee:
5c:02:39:96:57:1e:ce:1e:1b:ae:b3:c9:8b:56:e4:ab:7c:e6:
11:21:95:f6:16:d8:e2:6b:34:c6:20:58:81:44:aa:8a:f3:f6:
58:57:ed:85:85:21:2f:43:0c:01:6c:e8:76:13:cc:2a:8e:18:
94:b6:86:08:85:5c:f6:d0:7f:3b:6c:1a:b2:d1:e7:94:57:27:
e3:98:75:c5:d1:ef:cc:29:a2:eb:4c:10:d2:99:75:cc:6c:7c:
74:9c:63:8c:a0:27:95:46:64:99:e8:d1:c9:f1:d6:58:ad:e5:
88:6d:75:36:63:86:e6:60:10:14:d9:d8:3f:1d:92:1a:89:2d:
1f:a4:f1:51:a2:04:d9:66:88:20:10:29:c1:13:1c:ae:c4:88:
b3:0c:32:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:22 2023 by rpki-client on console-fra.rpki-client.org