Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/ulWJX7YO5gG0Dr97o3lAidy9xA0.roa
File: ulWJX7YO5gG0Dr97o3lAidy9xA0.roa (raw, json)
Hash identifier: tmT+fGhTxLJXvD5VnzO8o8Z2dacu3sPyw1RbE4a9qOE=
Subject key identifier: BA:55:89:5F:B6:0E:E6:01:B4:0E:BF:7B:A3:79:40:89:DC:BD:C4:0D
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1C2A785E
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/ulWJX7YO5gG0Dr97o3lAidy9xA0.roa
Signing time: Sat 14 May 2022 07:32:41 +0000
ROA not before: Sat 14 May 2022 07:32:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47843
IP address blocks: 87.248.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472545374 (0x1c2a785e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: May 14 07:32:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba55895fb60ee601b40ebf7ba3794089dcbdc40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6f:12:9b:06:ff:40:64:0f:bb:bf:8a:27:9b:
68:2c:0c:ba:32:0b:8c:bb:08:4b:ec:8f:7c:9f:2a:
33:9a:99:0a:ea:7e:99:b3:16:55:61:5f:06:a9:14:
87:66:ff:0b:96:36:f3:39:cf:98:2b:fa:b5:ff:3f:
74:12:6c:e4:f6:db:19:0f:04:50:ca:99:f5:44:62:
c2:71:9c:73:ea:a3:d5:27:af:15:de:9c:a7:f1:a4:
d9:6f:54:b5:71:2d:a8:a2:9c:71:86:a6:75:ed:cb:
cb:65:b0:c3:3b:82:6d:b7:cf:99:78:6d:f7:71:68:
d1:04:d3:37:be:1e:37:1a:8b:b8:f4:b9:06:03:bf:
b5:dd:ac:bd:00:9a:d6:13:60:e0:37:88:bf:fd:7b:
f0:d9:a1:d2:57:28:2d:4f:de:4e:c4:e9:87:24:c3:
3b:3f:35:06:5b:fe:59:74:22:31:a4:61:92:c2:c7:
6b:ed:4b:1a:a7:b2:95:da:09:40:09:b7:ab:0d:ef:
7e:a2:ed:41:7a:4c:aa:16:99:52:58:e4:ad:64:a8:
36:df:9f:ce:3a:c1:c9:d5:c5:15:e1:89:be:2e:df:
38:e9:a8:89:f1:32:37:e1:9c:d8:84:9f:3f:d5:18:
28:0e:76:88:4d:35:26:a6:d3:26:21:79:b2:af:09:
f6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:55:89:5F:B6:0E:E6:01:B4:0E:BF:7B:A3:79:40:89:DC:BD:C4:0D
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/ulWJX7YO5gG0Dr97o3lAidy9xA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.128.0/24
Signature Algorithm: sha256WithRSAEncryption
75:2c:39:91:7e:09:39:e6:77:00:10:3a:5b:6d:09:3f:f1:c3:
14:c6:c8:a2:1f:8a:0c:5f:d1:da:50:b8:ab:9e:a1:91:3e:81:
0d:6e:54:b5:c4:ad:4f:d8:b8:dd:93:cc:b3:2c:e0:8e:23:4a:
49:6a:b1:87:86:3b:86:db:2b:ec:07:6f:99:f8:5c:06:77:4a:
06:b0:87:de:33:13:7a:9f:6d:cb:a7:81:87:6f:1d:90:df:10:
36:79:a4:f3:a4:4d:63:84:c2:62:0e:e6:fb:4c:14:55:ec:3a:
74:33:69:e4:cb:17:b3:3a:27:26:60:f8:69:99:ef:19:ef:c7:
32:79:f3:5d:52:21:39:f6:eb:38:a7:e0:04:a9:43:e6:39:40:
0d:56:23:84:5d:6c:14:c8:26:8a:a0:85:2a:41:6c:81:03:e5:
b5:12:b1:61:09:37:b3:a1:b6:e8:18:15:e2:21:40:54:15:fc:
d7:ca:4b:9c:52:96:03:62:90:c0:51:75:f9:fb:f7:69:9d:74:
09:7d:f5:48:a8:4f:84:2a:0c:e7:18:9e:e1:78:6c:56:0d:45:
c5:cf:9f:86:a5:33:6f:1f:b1:d2:ed:58:ad:0c:dd:4a:75:90:
50:16:79:07:ab:0d:ed:ea:e5:d0:12:05:84:c4:87:af:9b:92:
f5:37:74:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:10 2023 by rpki-client on console-ams.rpki-client.org