Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/wa865Eqv4kcOZXTcBSufsLzqtxA.roa
File: wa865Eqv4kcOZXTcBSufsLzqtxA.roa (raw, json)
Hash identifier: ozo81BYFKp/By2220jzIA2dM404SZoNEdhvP5seqKzg=
Subject key identifier: C1:AF:3A:E4:4A:AF:E2:47:0E:65:74:DC:05:2B:9F:B0:BC:EA:B7:10
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1C389D25
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/wa865Eqv4kcOZXTcBSufsLzqtxA.roa
Signing time: Thu 19 May 2022 15:02:29 +0000
ROA not before: Thu 19 May 2022 15:02:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 87.248.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473472293 (0x1c389d25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: May 19 15:02:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1af3ae44aafe2470e6574dc052b9fb0bceab710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:2e:36:0b:59:7e:a4:67:f0:f6:85:ce:3b:
15:3c:56:28:90:3b:3e:a6:44:a5:e1:e1:ec:db:7f:
51:f5:19:fe:56:6e:d4:be:c1:25:2c:28:12:d3:00:
44:f8:0a:41:c1:bb:58:44:22:d8:21:c9:b2:11:20:
49:76:d5:db:6e:12:51:0c:ec:f0:9c:fb:94:2f:ef:
90:6a:a5:6f:e7:07:bc:1f:0f:41:94:00:75:c9:5a:
ff:67:b6:88:df:13:dc:65:1c:67:4d:a3:60:cc:9e:
bc:c7:2d:69:58:89:b9:75:ee:a2:a0:f2:33:87:77:
ce:4b:4a:cb:9c:52:92:6c:a3:b5:2f:2b:0e:a1:4b:
4f:a1:d9:07:0e:ad:40:0a:f9:39:25:88:fd:e1:43:
9b:84:95:87:97:ad:c0:2a:d6:5d:6f:d1:bd:7b:76:
53:a9:01:19:5c:b9:ce:60:5d:26:bb:19:29:22:f4:
d8:68:08:b8:ea:1d:b7:65:d0:b1:fa:da:f7:bb:27:
e0:65:57:7a:75:5f:ca:63:ac:af:26:d8:03:21:a9:
67:d3:77:60:df:e7:f4:f6:f7:6a:15:72:3b:08:66:
ae:eb:61:ca:f4:45:34:fa:e5:f6:e2:e9:cf:a0:8e:
b5:ee:23:3b:01:34:5d:4a:f8:5d:73:4f:50:a8:53:
0b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AF:3A:E4:4A:AF:E2:47:0E:65:74:DC:05:2B:9F:B0:BC:EA:B7:10
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/wa865Eqv4kcOZXTcBSufsLzqtxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.137.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c0:5d:c1:8b:3e:f0:47:57:73:99:72:4d:43:f5:39:56:e4:
7f:c1:10:9e:55:70:57:bd:aa:d0:bf:8d:90:92:e6:4f:9c:58:
4a:54:22:e1:1d:1b:60:bd:2f:52:71:05:6a:e4:11:d1:a9:9f:
ef:04:85:7d:29:ff:de:26:6d:76:18:51:da:95:93:f5:75:8c:
cf:73:dd:53:d5:77:01:1e:e1:dc:dc:59:27:82:6b:aa:4a:fa:
6a:0a:f3:24:e9:f7:b7:32:ff:0a:0b:92:0c:ea:08:58:19:6f:
39:af:76:41:78:0b:17:e6:e8:ba:0d:aa:ea:27:cf:09:cf:b8:
c9:eb:b4:af:24:2b:9b:ef:0c:35:7a:a3:59:99:2e:44:b7:28:
82:6f:22:6e:94:7f:58:ea:82:6f:1e:4b:5e:f9:fc:c7:1e:64:
44:2d:44:e6:77:3a:a0:d5:00:68:4d:95:0b:81:3b:2b:be:82:
73:85:a0:a7:c9:7b:54:8e:b0:74:d9:31:1d:7c:41:a4:fc:e7:
07:a2:ad:6d:58:82:f7:47:68:11:fa:3b:33:a5:50:58:98:b8:
43:d4:cf:c9:93:07:de:53:7e:66:dc:a2:94:f4:c8:13:ee:87:
3d:1c:69:78:cf:48:34:c8:9c:9b:e6:b7:48:fc:5e:67:f9:72:
6c:29:e1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:22 2023 by rpki-client on console-fra.rpki-client.org