Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/t7qPZx9RaZzNJiuyElitF0dtbb0.roa
File: t7qPZx9RaZzNJiuyElitF0dtbb0.roa (raw, json)
Hash identifier: F7+uClQbOCgrSkC2ZTuLPoE1OBBC8x0NXcDXc847Bh8=
Subject key identifier: B7:BA:8F:67:1F:51:69:9C:CD:26:2B:B2:12:58:AD:17:47:6D:6D:BD
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1AC74CFE
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/t7qPZx9RaZzNJiuyElitF0dtbb0.roa
Signing time: Sat 01 Jan 2022 14:59:30 +0000
ROA not before: Sat 01 Jan 2022 14:59:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208161
IP address blocks: 87.248.139.0/24 maxlen: 24
87.248.152.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449268990 (0x1ac74cfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 1 14:59:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7ba8f671f51699ccd262bb21258ad17476d6dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f6:d8:c1:f6:9b:29:ad:1a:4b:02:15:17:20:
35:0b:4e:bc:58:95:6f:9f:47:ba:36:35:60:bb:53:
17:4f:ad:56:cc:d8:e4:c7:79:20:48:fd:bc:43:fd:
84:90:35:9a:a0:64:66:54:6f:5c:64:52:c0:6c:84:
ad:c5:f7:2a:eb:14:08:8d:d5:c9:aa:55:36:fb:b0:
ef:df:e3:45:fa:c8:42:ea:31:eb:7a:95:69:7b:0b:
2c:c0:53:38:b4:46:ad:1c:86:33:30:0e:dd:f2:0b:
bb:70:db:ff:75:e0:9a:f3:08:00:ef:dd:b6:3b:61:
d4:96:28:5d:c8:e5:93:64:d5:1c:b9:aa:a4:54:bb:
87:28:f7:4d:e9:19:53:65:30:de:0e:9c:54:6d:ae:
05:64:f6:c2:16:51:ea:b2:41:aa:cc:73:b5:e1:7f:
4d:4b:de:bf:35:40:18:8a:9f:fb:bc:4d:e9:26:9f:
e4:b7:20:47:a1:e2:7c:2b:c5:ac:42:33:ce:5d:e4:
ec:4e:bf:c1:3e:7b:dc:ff:e5:fc:6e:f1:c1:f1:3c:
f2:77:77:ad:cc:27:63:42:e9:1b:7c:88:8b:24:ca:
73:b2:29:f1:18:2b:6d:79:57:2f:b1:43:78:96:24:
7f:c4:73:c7:c7:4f:44:89:be:49:9d:10:3b:0e:ac:
ac:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BA:8F:67:1F:51:69:9C:CD:26:2B:B2:12:58:AD:17:47:6D:6D:BD
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/t7qPZx9RaZzNJiuyElitF0dtbb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.139.0/24
87.248.152.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:fe:d2:7e:e2:3c:9a:ec:a6:c8:ff:96:08:76:88:2f:0c:3a:
cd:35:6c:0e:3a:1e:9f:cb:07:3a:10:9c:28:a0:2e:b7:ba:fd:
f9:ec:d6:f2:aa:df:ce:8e:b2:18:fa:6a:3a:9d:7e:29:9e:4a:
ae:39:a7:0d:5a:75:71:4a:7c:be:fb:ce:6f:b8:df:df:3e:3d:
18:a1:ce:65:64:b6:65:b4:71:a1:22:35:85:1e:3a:cf:fe:c9:
70:58:02:68:ae:72:aa:1b:25:84:2d:f3:7c:c1:99:7e:87:cb:
c0:3c:01:58:8b:96:26:83:08:4a:40:f3:17:c2:7d:ad:2b:91:
f7:91:a8:cf:cc:e0:6b:cf:64:00:43:c7:85:b3:01:df:96:4d:
f7:82:6d:80:d5:e9:32:20:33:15:b1:7b:c5:57:92:e8:30:96:
64:f7:5b:30:cf:4c:df:22:7b:5c:c3:dd:54:2f:97:71:21:fa:
aa:54:ae:f3:19:79:74:e3:e8:7e:2a:6a:18:cc:3d:7e:ad:8b:
76:2a:0d:46:e7:f8:39:2c:19:3b:4a:0c:fe:66:78:77:62:2b:
28:af:fb:49:55:5b:00:af:ab:0a:c3:e7:f9:51:fe:cd:8b:2c:
b8:bf:07:92:c5:2d:8b:f9:5d:27:3c:20:71:8e:b6:7c:e5:40:
b3:1c:c9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:22 2023 by rpki-client on console-fra.rpki-client.org