Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/xRmqejbzMiPf6R4-ZOktkOcYTjU.roa
File: xRmqejbzMiPf6R4-ZOktkOcYTjU.roa (raw, json)
Hash identifier: 1z5qejO1jV52XCmSZbRMqXrz5jzvAIJijX5enMszON4=
Subject key identifier: C5:19:AA:7A:36:F3:32:23:DF:E9:1E:3E:64:E9:2D:90:E7:18:4E:35
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 0181DC4853B1A96F9267CC41743C5A0BCD22
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/xRmqejbzMiPf6R4-ZOktkOcYTjU.roa
Signing time: Fri 08 Jul 2022 05:28:56 +0000
ROA not before: Fri 08 Jul 2022 05:28:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 87.248.133.0/24 maxlen: 24
87.248.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dc:48:53:b1:a9:6f:92:67:cc:41:74:3c:5a:0b:cd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jul 8 05:28:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c519aa7a36f33223dfe91e3e64e92d90e7184e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:d1:ec:b4:6a:a3:98:22:4f:12:28:f7:fe:
07:bc:c1:f1:a5:51:3b:62:27:7c:e5:06:b5:0e:39:
d7:62:31:20:5d:b6:ff:f3:4d:21:39:81:dc:53:d5:
7b:22:11:a4:0b:04:4e:a5:7a:83:23:50:69:e3:8c:
c9:44:1d:c3:de:6c:e9:2c:a0:23:9c:15:7f:15:af:
29:a4:01:46:0f:62:ff:af:ae:40:e1:76:1d:56:ea:
76:cc:31:a5:a3:2f:47:d6:e6:d7:66:bc:36:1d:52:
94:be:5d:2b:88:7c:b4:ef:dd:f3:9b:88:3e:0b:83:
d6:ab:0c:d8:90:e8:97:ba:54:f1:06:06:97:f4:3b:
8f:84:f5:27:e6:f0:b2:bb:bd:3f:e7:82:42:6f:4a:
54:ff:85:15:dc:f3:86:8b:b2:32:e8:a4:0f:ad:ad:
31:35:45:40:73:e0:d4:6e:02:68:dd:e5:d6:cc:35:
64:9a:a9:31:86:03:ba:f3:dd:ab:6a:28:25:56:bd:
c9:6a:1f:69:03:69:9f:5f:42:9c:c3:0f:e4:1c:bf:
92:60:64:31:c5:c4:9c:f6:16:e0:ab:49:aa:83:2f:
2a:81:91:2f:ef:b0:61:d5:8f:3d:e7:ec:de:6c:dc:
33:35:3e:22:4c:ce:54:82:66:03:39:ec:05:f5:b5:
c6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:19:AA:7A:36:F3:32:23:DF:E9:1E:3E:64:E9:2D:90:E7:18:4E:35
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/xRmqejbzMiPf6R4-ZOktkOcYTjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.133.0/24
87.248.157.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:16:e7:cb:e4:5f:cb:29:06:a4:f4:37:32:43:0c:a2:31:46:
1a:c6:04:73:cf:cd:93:d3:08:8f:b8:35:bc:2f:40:f6:90:bf:
88:ec:57:96:4e:db:7f:92:57:66:ca:46:94:34:78:03:7e:6e:
cc:65:8c:d1:8e:9d:ad:88:70:9a:31:3e:00:b5:ad:c8:67:89:
ef:16:3c:cc:22:16:4b:78:a6:bf:6a:42:0e:c5:04:4a:1a:f1:
a9:c3:0a:7d:60:5b:1b:ab:14:e3:63:32:a5:3a:71:c7:6c:5c:
1a:b8:63:d9:c1:a6:8c:e5:19:c2:e1:11:e6:06:80:1f:32:41:
73:a3:06:53:54:c5:56:23:ec:6e:ea:e5:e6:6e:cf:eb:8e:ad:
6d:1d:f2:c9:37:b4:92:72:3a:cb:db:a5:75:dc:11:5d:b5:9b:
42:9a:2b:8b:4a:ad:6b:b1:87:ba:b7:50:fa:42:52:b2:c5:5a:
8a:00:6c:0b:db:2b:f9:41:46:a8:e4:fe:96:91:99:6e:05:aa:
4b:29:3a:2c:96:78:74:00:3d:b4:39:e4:28:52:e5:d9:5d:fc:
c6:29:fc:3c:ac:8d:3b:cb:4d:39:1f:55:8f:75:a8:9d:41:6e:
d2:f9:27:3b:e0:25:69:07:e9:26:8c:f8:64:e2:5f:15:fd:6f:
64:60:66:62
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYHcSFOxqW+SZ8xBdDxaC80iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjIwNzA4MDUyODU2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTE5YWE3YTM2ZjMzMjIzZGZlOTFlM2U2NGU5MmQ5MGU3MTg0ZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKXR7LRqo5giTxIo9/4HvMHxpVE7
Yid85Qa1DjnXYjEgXbb/800hOYHcU9V7IhGkCwROpXqDI1Bp44zJRB3D3mzpLKAj
nBV/Fa8ppAFGD2L/r65A4XYdVup2zDGloy9H1ubXZrw2HVKUvl0riHy0793zm4g+
C4PWqwzYkOiXulTxBgaX9DuPhPUn5vCyu70/54JCb0pU/4UV3POGi7Iy6KQPra0x
NUVAc+DUbgJo3eXWzDVkmqkxhgO6892raiglVr3Jah9pA2mfX0Kcww/kHL+SYGQx
xcSc9hbgq0mqgy8qgZEv77Bh1Y895+zebNwzNT4iTM5UgmYDOewF9bXGfQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMUZqno28zIj3+kePmTpLZDnGE41MB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEveFJtcWVqYnpNaVBmNlI0LVpPa3RrT2NZVGpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/iFAwQA
V/idMA0GCSqGSIb3DQEBCwUAA4IBAQC5FufL5F/LKQak9DcyQwyiMUYaxgRzz82T
0wiPuDW8L0D2kL+I7FeWTtt/kldmykaUNHgDfm7MZYzRjp2tiHCaMT4Ata3IZ4nv
FjzMIhZLeKa/akIOxQRKGvGpwwp9YFsbqxTjYzKlOnHHbFwauGPZwaaM5RnC4RHm
BoAfMkFzowZTVMVWI+xu6uXmbs/rjq1tHfLJN7SScjrL26V13BFdtZtCmiuLSq1r
sYe6t1D6QlKyxVqKAGwL2yv5QUao5P6WkZluBapLKToslnh0AD20OeQoUuXZXfzG
Kfw8rI07y005H1WPdaidQW7S+Sc74CVpB+kmjPhk4l8V/W9kYGZi
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:10 2023 by rpki-client on console-ams.rpki-client.org