Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/xTcQDiYDsBUvth1hUxVvRUl_TiE.roa
File: xTcQDiYDsBUvth1hUxVvRUl_TiE.roa (raw, json)
Hash identifier: yTZciZyf00xMhqlQM1RO+bulkJFBHP6hhfwN30N+ac0=
Subject key identifier: C5:37:10:0E:26:03:B0:15:2F:B6:1D:61:53:15:6F:45:49:7F:4E:21
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01849306A1E4363E54BDF80F99D5ABC8C2A6
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/xTcQDiYDsBUvth1hUxVvRUl_TiE.roa
Signing time: Sun 20 Nov 2022 03:13:16 +0000
ROA not before: Sun 20 Nov 2022 03:13:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44400
IP address blocks: 87.248.142.0/24 maxlen: 24
87.248.141.0/24 maxlen: 24
87.248.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:93:06:a1:e4:36:3e:54:bd:f8:0f:99:d5:ab:c8:c2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Nov 20 03:13:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c537100e2603b0152fb61d6153156f45497f4e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:2c:00:f6:c1:23:08:fd:ae:2d:6e:42:e6:
24:75:3e:17:a4:14:13:80:0d:8e:f6:48:19:41:91:
04:ed:ed:c3:91:bd:33:75:cb:af:29:bc:27:45:87:
a8:20:29:77:c0:86:c6:11:63:7e:8c:a7:10:dd:5b:
7d:6e:f8:7d:f9:e9:70:a2:03:d2:21:08:a5:d3:7b:
e5:1b:81:c0:00:d2:62:4f:22:64:3a:cc:e0:9c:56:
7d:7d:d2:a2:2f:13:1a:58:3f:bf:cc:7e:c3:f0:d1:
4c:4e:54:39:40:24:b1:bb:7f:e1:0e:c8:7f:21:9a:
e3:86:f6:62:fa:a2:cc:54:54:5e:20:d8:14:31:83:
54:59:61:a4:f3:a7:f7:14:40:a4:89:aa:9d:49:04:
b0:99:24:65:1e:0c:d4:c8:67:3d:95:75:33:e7:ec:
f6:d1:cb:31:c0:b4:60:8f:b9:2d:c5:65:30:88:6b:
9f:7a:4d:12:50:57:3f:e7:c5:a0:69:05:50:f0:cc:
d5:0b:5e:d9:8e:55:a0:06:48:33:40:dd:c0:05:e9:
35:74:73:c4:82:c3:61:1a:5f:3d:f3:6d:28:4b:86:
8c:29:77:27:12:ab:18:bb:fd:3c:59:4a:fb:f4:12:
26:79:90:84:bd:19:f9:94:d9:f8:c6:21:2a:7d:d3:
a6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:37:10:0E:26:03:B0:15:2F:B6:1D:61:53:15:6F:45:49:7F:4E:21
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/xTcQDiYDsBUvth1hUxVvRUl_TiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.140.0-87.248.142.255
Signature Algorithm: sha256WithRSAEncryption
b7:24:60:35:11:15:9c:5d:d7:a8:a6:8a:12:2c:20:cd:0d:52:
02:54:2e:42:82:18:8e:c6:d1:96:88:21:b5:b2:d0:c3:91:ba:
f7:3d:e9:bd:61:18:fa:ac:b0:11:20:97:b7:2e:91:f1:75:37:
d2:a1:df:ee:b9:98:0b:00:8b:d5:e9:fb:94:31:4d:d8:2c:f1:
30:65:81:72:e4:32:65:ef:6a:cf:a1:a8:83:5a:da:0a:da:56:
4b:64:4a:b1:4b:ae:75:50:12:f5:77:a8:d7:5d:83:23:d1:18:
b5:f8:af:1c:36:68:06:cf:f2:3e:25:67:80:92:80:8f:2b:c4:
16:57:c1:de:c2:60:ad:2b:b7:8b:77:64:b6:10:9e:bb:81:db:
e3:51:44:91:14:83:33:19:82:00:6e:af:2d:66:1b:c9:40:41:
76:58:c4:61:15:71:c6:25:74:f2:45:c8:99:6f:17:78:3d:1b:
0a:2e:57:d4:5c:76:ab:7c:92:7a:7b:01:e7:78:d3:e8:ec:f3:
6e:f6:bd:8e:0a:7a:bf:f5:44:df:b2:9e:be:4d:fd:64:aa:1b:
df:3a:58:0f:e6:9d:85:cc:1c:9f:8b:da:92:88:6b:54:5c:8f:
96:43:d0:25:fd:cf:db:7e:05:ee:d3:8a:98:3f:a8:a7:54:02:
21:20:48:3d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYSTBqHkNj5UvfgPmdWryMKmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjIxMTIwMDMxMzE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTM3MTAwZTI2MDNiMDE1MmZiNjFkNjE1MzE1NmY0NTQ5N2Y0ZTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppMsAPbBIwj9ri1uQuYkdT4XpBQT
gA2O9kgZQZEE7e3Dkb0zdcuvKbwnRYeoICl3wIbGEWN+jKcQ3Vt9bvh9+elwogPS
IQil03vlG4HAANJiTyJkOszgnFZ9fdKiLxMaWD+/zH7D8NFMTlQ5QCSxu3/hDsh/
IZrjhvZi+qLMVFReINgUMYNUWWGk86f3FECkiaqdSQSwmSRlHgzUyGc9lXUz5+z2
0csxwLRgj7ktxWUwiGufek0SUFc/58WgaQVQ8MzVC17ZjlWgBkgzQN3ABek1dHPE
gsNhGl89820oS4aMKXcnEqsYu/08WUr79BImeZCEvRn5lNn4xiEqfdOmfQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMU3EA4mA7AVL7YdYVMVb0VJf04hMB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEveFRjUURpWURzQlV2dGgxaFV4VnZSVWxfVGlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJX+IwD
BABX+I4wDQYJKoZIhvcNAQELBQADggEBALckYDURFZxd16imihIsIM0NUgJULkKC
GI7G0ZaIIbWy0MORuvc96b1hGPqssBEgl7cukfF1N9Kh3+65mAsAi9Xp+5QxTdgs
8TBlgXLkMmXvas+hqINa2graVktkSrFLrnVQEvV3qNddgyPRGLX4rxw2aAbP8j4l
Z4CSgI8rxBZXwd7CYK0rt4t3ZLYQnruB2+NRRJEUgzMZggBury1mG8lAQXZYxGEV
ccYldPJFyJlvF3g9GwouV9Rcdqt8knp7Aed40+js8272vY4Ker/1RN+ynr5N/WSq
G986WA/mnYXMHJ+L2pKIa1Rcj5ZD0CX9z9t+Be7Tipg/qKdUAiEgSD0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:27 2024 by rpki-client on console-ams.rpki-client.org