Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/sxoAeno8yoGPPoQEtDCCt-CMSr8.roa
File: sxoAeno8yoGPPoQEtDCCt-CMSr8.roa (raw, json)
Hash identifier: 6XJUBhpASQRdlZwwG/fBdsWSneBmni/P/+wzecKI1yk=
Subject key identifier: B3:1A:00:7A:7A:3C:CA:81:8F:3E:84:04:B4:30:82:B7:E0:8C:4A:BF
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01820714A6570B3AD53AA582DF516F84EF3E
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/sxoAeno8yoGPPoQEtDCCt-CMSr8.roa
Signing time: Sat 16 Jul 2022 12:56:09 +0000
ROA not before: Sat 16 Jul 2022 12:56:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 87.248.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:07:14:a6:57:0b:3a:d5:3a:a5:82:df:51:6f:84:ef:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jul 16 12:56:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b31a007a7a3cca818f3e8404b43082b7e08c4abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4d:44:95:68:67:0c:1b:f5:1b:ba:04:a5:01:
54:ef:b0:72:83:06:86:47:2b:2a:b6:f0:d7:d2:9e:
d4:fc:4e:2b:2f:c6:e1:fc:23:57:12:56:08:bf:86:
02:88:64:06:ba:54:4f:2e:ea:96:66:f7:fd:d4:15:
d9:51:d2:4a:80:24:87:49:89:36:ab:29:73:ea:e6:
26:2b:d2:d2:d4:72:84:aa:d0:b7:d8:70:cc:b6:cb:
6f:c6:0e:bb:9c:14:8f:56:31:b6:3a:81:93:58:87:
46:7a:75:02:35:c0:db:4d:f4:e0:d6:c0:06:4c:6c:
4d:8b:79:d0:56:97:5f:f9:88:7f:f1:0a:54:c9:19:
b7:f4:48:e1:20:32:4c:10:0a:8f:35:7b:b5:6d:b9:
40:99:0c:81:21:09:ef:77:d7:8b:78:80:b9:c7:d9:
d3:86:eb:55:1e:03:6a:e0:f0:58:32:03:3e:13:1f:
76:9b:57:2e:96:4a:50:ca:a9:8c:68:ce:fa:cb:1e:
42:bc:6f:15:71:6a:e8:0a:3b:51:ef:bb:7d:c7:ee:
fc:a9:90:dc:5b:79:e6:63:d1:0b:f7:8d:c6:4a:77:
72:df:d3:b5:55:a4:20:24:5c:3a:24:e6:86:44:a2:
5e:1b:24:ac:40:d3:73:16:01:e7:ce:51:18:2c:bd:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1A:00:7A:7A:3C:CA:81:8F:3E:84:04:B4:30:82:B7:E0:8C:4A:BF
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/sxoAeno8yoGPPoQEtDCCt-CMSr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.137.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:5e:e8:ee:9f:60:31:e8:8b:5e:9d:da:3f:20:f4:64:52:3b:
48:94:36:b1:cf:63:ea:95:41:f3:da:6b:3a:49:85:cc:f0:15:
91:1e:9a:b5:57:49:4b:25:1b:f4:57:76:1a:4f:da:02:6a:98:
d0:04:48:b8:36:69:94:ba:9e:a5:e2:10:52:10:a3:9e:57:10:
4c:d3:a5:1e:72:70:a7:39:53:e4:ca:83:99:20:32:3d:0f:40:
19:af:ad:55:6f:b2:78:29:47:8d:f9:3c:18:72:8f:b5:d8:f0:
9c:7b:83:f3:dd:a1:18:9b:c0:51:a4:8b:53:86:26:a3:9f:19:
b1:55:57:c6:08:ef:41:34:7e:77:29:91:12:2a:7b:bc:35:e2:
37:7a:12:73:44:fb:5b:53:9d:aa:5a:10:8f:86:39:45:d4:53:
a5:0d:e8:8a:b8:ba:fb:0e:0b:21:da:cf:bb:93:4d:8a:0a:3b:
81:1d:fe:4a:fb:2a:86:28:e1:6f:4a:33:3a:42:39:d0:2b:1a:
40:6b:87:0d:67:ba:f9:98:29:73:4f:80:b7:c1:73:1c:64:32:
67:a2:bc:e8:13:f4:c8:76:79:79:b9:43:33:6d:f7:32:15:63:
73:78:bf:3e:a5:62:4f:46:10:60:9e:f2:e3:66:a6:49:d6:f0:
cb:df:b6:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYIHFKZXCzrVOqWC31FvhO8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjIwNzE2MTI1NjA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzFhMDA3YTdhM2NjYTgxOGYzZTg0MDRiNDMwODJiN2UwOGM0YWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk1ElWhnDBv1G7oEpQFU77BygwaG
RysqtvDX0p7U/E4rL8bh/CNXElYIv4YCiGQGulRPLuqWZvf91BXZUdJKgCSHSYk2
qylz6uYmK9LS1HKEqtC32HDMtstvxg67nBSPVjG2OoGTWIdGenUCNcDbTfTg1sAG
TGxNi3nQVpdf+Yh/8QpUyRm39EjhIDJMEAqPNXu1bblAmQyBIQnvd9eLeIC5x9nT
hutVHgNq4PBYMgM+Ex92m1culkpQyqmMaM76yx5CvG8VcWroCjtR77t9x+78qZDc
W3nmY9EL943GSndy39O1VaQgJFw6JOaGRKJeGySsQNNzFgHnzlEYLL3powIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLMaAHp6PMqBjz6EBLQwgrfgjEq/MB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvc3hvQWVubzh5b0dQUG9RRXREQ0N0LUNNU3I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iJMA0G
CSqGSIb3DQEBCwUAA4IBAQCmXujun2Ax6Itendo/IPRkUjtIlDaxz2PqlUHz2ms6
SYXM8BWRHpq1V0lLJRv0V3YaT9oCapjQBEi4NmmUup6l4hBSEKOeVxBM06UecnCn
OVPkyoOZIDI9D0AZr61Vb7J4KUeN+TwYco+12PCce4Pz3aEYm8BRpItThiajnxmx
VVfGCO9BNH53KZESKnu8NeI3ehJzRPtbU52qWhCPhjlF1FOlDeiKuLr7Dgsh2s+7
k02KCjuBHf5K+yqGKOFvSjM6QjnQKxpAa4cNZ7r5mClzT4C3wXMcZDJnorzoE/TI
dnl5uUMzbfcyFWNzeL8+pWJPRhBgnvLjZqZJ1vDL37bd
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:10 2023 by rpki-client on console-ams.rpki-client.org