Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/ta3ktNjj9P9Z1BVH1CEorjigX4Q.roa
File: ta3ktNjj9P9Z1BVH1CEorjigX4Q.roa (raw, json)
Hash identifier: PN/ymsDA07k15RTTNlQQa7HfEsnAXT2HV3BYliDJ15Q=
Subject key identifier: B5:AD:E4:B4:D8:E3:F4:FF:59:D4:15:47:D4:21:28:AE:38:A0:5F:84
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1C282F39
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/ta3ktNjj9P9Z1BVH1CEorjigX4Q.roa
Signing time: Sat 14 May 2022 05:05:45 +0000
ROA not before: Sat 14 May 2022 05:05:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 87.248.133.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472395577 (0x1c282f39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: May 14 05:05:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5ade4b4d8e3f4ff59d41547d42128ae38a05f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4a:ae:38:1b:64:9a:e8:4e:35:68:23:33:a8:
31:fa:ae:19:ca:74:3b:eb:2b:12:17:4c:40:01:e4:
a3:d0:d3:4b:d5:11:7c:fe:21:9b:c0:89:58:91:d0:
0c:a3:1e:2a:c7:b9:e3:64:d2:17:c6:6c:48:7b:f2:
bc:ce:12:b3:e7:64:1f:88:b8:b5:ae:61:40:ca:cf:
80:66:7c:bd:6a:f7:0c:ff:99:ec:db:e6:5d:0d:80:
ce:9e:b7:a3:a0:16:78:66:6d:97:70:ab:b5:ec:27:
74:95:a2:66:18:a9:34:4c:f7:a6:33:f5:97:e4:9d:
7c:fe:97:53:df:cb:bf:09:f4:fc:8d:d7:a1:1f:b5:
20:92:08:f3:21:35:d0:68:df:d1:1e:6f:1b:64:6f:
ed:c6:2c:f6:ff:8a:2d:2c:94:81:d5:a8:c4:74:44:
83:8d:86:4d:bb:67:09:b6:e6:e3:9d:75:fe:0b:a7:
27:a8:8e:97:a7:98:a3:50:2b:67:15:45:53:ff:15:
17:9e:fb:4d:d8:41:66:5a:6f:08:6c:3e:07:2f:df:
04:29:82:34:3a:3b:e7:eb:b2:77:2e:ef:2b:0a:83:
1f:95:56:f9:74:bc:31:ad:1a:6a:cf:44:e0:c9:8f:
00:cf:5d:45:1b:83:e1:0e:19:9d:e3:e9:e0:4e:e9:
51:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AD:E4:B4:D8:E3:F4:FF:59:D4:15:47:D4:21:28:AE:38:A0:5F:84
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/ta3ktNjj9P9Z1BVH1CEorjigX4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.133.0/24
Signature Algorithm: sha256WithRSAEncryption
46:22:64:af:8b:09:a4:a4:b1:20:db:5e:04:f3:22:63:02:48:
9e:1a:b9:9e:2c:da:2e:87:3c:d8:8c:2a:ed:ff:ce:37:54:81:
21:0a:ba:bc:f8:f3:cc:ec:a1:33:5b:6c:3a:eb:68:d9:ac:0f:
00:31:fa:46:2d:6d:e7:f0:08:89:b0:66:19:db:05:2d:a6:ce:
3c:8c:d6:0c:0f:8c:67:f6:e1:b1:d9:da:6a:b9:13:b9:88:34:
dd:7d:77:b1:a1:76:df:98:5b:71:de:f5:ca:d8:04:c6:2b:28:
a1:2c:74:ff:c7:dd:52:19:25:6e:b8:75:9b:dd:9f:a4:c0:73:
69:24:06:43:54:c9:ae:20:3c:8b:34:b5:47:0d:c4:0f:c9:c5:
90:ed:73:28:1a:bc:b3:9d:fd:99:73:0b:da:85:34:fa:01:3b:
f3:8e:5b:e6:15:1d:84:d4:e8:72:6e:7d:25:72:e4:16:8e:75:
57:a9:36:23:bf:04:bf:e4:06:af:1c:2a:9b:20:26:3f:00:25:
cb:d1:c2:9b:22:21:11:af:2d:e4:c6:0d:46:a4:88:27:63:05:
e0:94:de:4c:32:75:81:5e:83:9c:cb:59:58:44:4a:8d:53:b2:
9c:d2:52:05:21:00:c2:77:b8:96:95:9f:c3:59:39:cb:a0:c1:
67:16:b0:18
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEHCgvOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
N2Y2MWZjN2MwYWI0MWNlMTU0ZTdiY2IwOGVmOTYyMzUxYTQ2Nzg0MB4XDTIyMDUx
NDA1MDU0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjVhZGU0YjRkOGUz
ZjRmZjU5ZDQxNTQ3ZDQyMTI4YWUzOGEwNWY4NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKdKrjgbZJroTjVoIzOoMfquGcp0O+srEhdMQAHko9DTS9UR
fP4hm8CJWJHQDKMeKse542TSF8ZsSHvyvM4Ss+dkH4i4ta5hQMrPgGZ8vWr3DP+Z
7NvmXQ2Azp63o6AWeGZtl3CrtewndJWiZhipNEz3pjP1l+SdfP6XU9/Lvwn0/I3X
oR+1IJII8yE10Gjf0R5vG2Rv7cYs9v+KLSyUgdWoxHREg42GTbtnCbbm4511/gun
J6iOl6eYo1ArZxVFU/8VF577TdhBZlpvCGw+By/fBCmCNDo75+uydy7vKwqDH5VW
+XS8Ma0aas9E4MmPAM9dRRuD4Q4ZnePp4E7pUVkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS1reS02OP0/1nUFUfUISiuOKBfhDAfBgNVHSMEGDAWgBR39h/HwKtBzhVO
e8sI75YjUaRnhDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RfWWZ4OENyUWM0VlRudkxDTy1XSTFHa1o0US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjQvOTIxM2VjLTg1YTktNDhkNi1hYTY5LWVkYzlkMDJmYWY1NC8x
L3RhM2t0TmpqOVA5WjFCVkgxQ0VvcmppZ1g0US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQv
OTIxM2VjLTg1YTktNDhkNi1hYTY5LWVkYzlkMDJmYWY1NC8xL2RfWWZ4OENyUWM0
VlRudkxDTy1XSTFHa1o0US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFf4hTANBgkqhkiG9w0BAQsFAAOC
AQEARiJkr4sJpKSxINteBPMiYwJInhq5nizaLoc82Iwq7f/ON1SBIQq6vPjzzOyh
M1tsOuto2awPADH6Ri1t5/AIibBmGdsFLabOPIzWDA+MZ/bhsdnaarkTuYg03X13
saF235hbcd71ytgExisooSx0/8fdUhklbrh1m92fpMBzaSQGQ1TJriA8izS1Rw3E
D8nFkO1zKBq8s539mXML2oU0+gE7845b5hUdhNTocm59JXLkFo51V6k2I78Ev+QG
rxwqmyAmPwAly9HCmyIhEa8t5MYNRqSIJ2MF4JTeTDJ1gV6DnMtZWERKjVOynNJS
BSEAwne4lpWfw1k5y6DBZxawGA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:35 2024 by rpki-client on console-fra.rpki-client.org