Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/sNwxhaDE7G2vIZMbfHFOcQfgfSM.roa
File: sNwxhaDE7G2vIZMbfHFOcQfgfSM.roa (raw, json)
Hash identifier: VzjRqs7MvEqGUTyG0cSqirPl+bdxRMs1k0ANnIum0Bo=
Subject key identifier: B0:DC:31:85:A0:C4:EC:6D:AF:21:93:1B:7C:71:4E:71:07:E0:7D:23
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018380BD39A07C1B8550053796095D2B4DBC
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/sNwxhaDE7G2vIZMbfHFOcQfgfSM.roa
Signing time: Tue 27 Sep 2022 20:57:08 +0000
ROA not before: Tue 27 Sep 2022 20:57:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 87.248.133.0/24 maxlen: 24
87.248.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:80:bd:39:a0:7c:1b:85:50:05:37:96:09:5d:2b:4d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Sep 27 20:57:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0dc3185a0c4ec6daf21931b7c714e7107e07d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:95:ea:c8:29:1b:1a:45:50:49:84:de:ad:
cc:5f:19:c8:df:ec:b3:d8:7c:97:b6:41:fe:48:6d:
30:aa:70:2a:8c:ba:c5:d0:3b:43:8a:13:e9:68:a2:
b6:0b:64:7d:1d:98:aa:4a:f1:b8:66:ce:e7:7b:bd:
01:25:6c:17:8f:57:d1:ce:44:c6:48:0f:34:ec:f3:
d2:66:d2:2d:43:bf:7e:e6:2f:12:8d:83:d0:14:c7:
c7:24:c7:c1:42:0b:e9:72:df:61:17:d5:f2:14:c6:
c3:8e:5f:26:82:fa:36:a4:61:8f:30:c5:7f:41:d0:
dd:6d:c5:7e:fd:03:bc:9c:7f:bf:bb:89:72:ec:56:
ff:f1:ea:ee:67:8a:a6:b8:38:53:24:a5:4e:9a:1c:
b7:69:70:15:f2:86:7c:14:51:82:47:5e:43:00:dd:
6a:59:ea:ef:35:41:dd:17:ec:63:42:93:2b:64:d4:
5a:84:ae:fb:6a:7f:99:a7:c0:3f:50:24:7a:de:88:
ef:b8:42:24:af:7a:47:9e:ed:70:70:fb:0e:77:74:
fb:cc:dc:72:d9:85:3d:e1:64:0a:21:49:1d:2e:3b:
61:ed:b6:a5:8a:19:3c:e8:48:55:88:be:4e:32:88:
d0:eb:70:22:78:37:7b:93:9b:e9:fa:21:d5:77:93:
37:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DC:31:85:A0:C4:EC:6D:AF:21:93:1B:7C:71:4E:71:07:E0:7D:23
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/sNwxhaDE7G2vIZMbfHFOcQfgfSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.133.0/24
87.248.157.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:9d:04:32:0c:f2:19:ce:81:47:b9:25:3c:1a:e3:01:95:ad:
52:13:05:5a:cc:b9:dd:24:15:8b:86:e3:02:e9:8f:ec:f3:bc:
00:32:11:c3:08:0b:48:2e:b4:de:e4:8f:77:f7:64:05:a2:34:
e5:38:fa:8e:ef:97:d8:31:fd:6f:16:49:b9:e0:55:dc:d0:89:
6e:f5:19:82:28:8f:24:18:f9:5e:4e:62:1b:37:6a:ee:36:55:
14:01:7b:46:ce:cf:65:47:2f:d7:b0:53:59:6d:0f:e3:06:03:
ef:11:21:9d:d4:64:fe:e0:45:79:32:ea:c5:41:ea:be:e9:fa:
36:31:5a:10:bb:4f:f1:47:28:52:2e:cd:0b:26:fd:ce:89:aa:
e6:8d:6d:1f:65:e2:47:64:cb:19:6e:5b:9a:49:72:51:ea:a1:
c7:81:59:98:a6:09:0f:85:c2:e8:a4:21:76:4e:21:09:47:e2:
7c:1b:82:85:87:4e:e2:13:00:97:d7:4c:95:88:5f:de:c7:5d:
9d:64:a5:d0:c6:be:03:f6:8c:14:56:21:d2:86:f8:c3:00:66:
f0:8f:bc:aa:21:a1:67:b9:65:ec:e7:b8:ea:da:62:d1:7d:31:
0f:50:a5:5b:8c:30:0c:42:82:1d:4f:41:dc:0e:96:f9:70:ad:
ff:4d:aa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:26 2024 by rpki-client on console-ams.rpki-client.org