Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/yUMf_Ku2QDX-cXoyjk3Ih0ATzPg.roa
File: yUMf_Ku2QDX-cXoyjk3Ih0ATzPg.roa (raw, json)
Hash identifier: hqJcC3B+L+pk7aajic0AR3fGYbsoDdY/kPCB3ooVDj0=
Subject key identifier: C9:43:1F:FC:AB:B6:40:35:FE:71:7A:32:8E:4D:C8:87:40:13:CC:F8
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 0184A0212079E5B936C6C059647471CD0A10
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/yUMf_Ku2QDX-cXoyjk3Ih0ATzPg.roa
Signing time: Tue 22 Nov 2022 16:17:16 +0000
ROA not before: Tue 22 Nov 2022 16:17:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 87.248.131.0/24 maxlen: 24
87.248.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a0:21:20:79:e5:b9:36:c6:c0:59:64:74:71:cd:0a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Nov 22 16:17:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9431ffcabb64035fe717a328e4dc8874013ccf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:60:b5:c8:75:1d:7c:61:05:39:0d:2d:c4:16:
8f:27:12:fe:17:9e:e0:97:26:fa:ac:8f:e4:16:42:
eb:0d:bf:98:01:cb:73:d9:2a:c2:e1:d9:1a:f6:e1:
ce:bc:5b:c7:f7:c7:ad:e0:8f:89:2e:1a:e6:a9:13:
66:07:99:bb:ec:76:2a:f2:b8:dc:a1:8d:55:55:ae:
96:2d:a3:4c:59:c8:9f:14:af:4b:76:28:4a:52:fb:
65:6d:03:5a:28:74:56:0e:cc:9b:ce:fa:41:7f:f0:
db:e0:fe:f5:60:75:ff:a9:b8:82:7a:0d:a8:00:00:
67:b6:36:6b:8b:6d:d9:0a:44:df:af:84:94:8d:1d:
e3:21:eb:45:b7:fb:fe:ad:40:86:48:7a:49:5b:78:
e6:f2:e4:ca:53:f2:09:d0:0f:82:e2:f1:d5:8c:40:
c0:77:ee:a6:55:0b:e5:ea:dd:3c:7d:58:88:b1:0e:
bf:a3:d6:7b:70:e3:5d:8d:b8:a0:b7:dc:6d:c4:cc:
d2:a6:a1:e0:27:b1:e6:8b:d1:ed:52:bd:63:c2:0b:
68:80:6a:31:90:2d:f9:8d:fe:da:c4:b1:af:9e:2d:
75:54:f3:51:17:55:04:8b:5e:bb:1e:a2:7f:66:7b:
49:8c:b0:48:c7:b6:8f:90:d2:fc:2e:81:ca:16:72:
08:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:43:1F:FC:AB:B6:40:35:FE:71:7A:32:8E:4D:C8:87:40:13:CC:F8
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/yUMf_Ku2QDX-cXoyjk3Ih0ATzPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.131.0/24
87.248.158.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:e6:e0:16:68:b6:30:39:f0:6a:aa:38:22:3f:55:f2:f5:33:
86:58:41:de:59:a1:02:c3:bc:ec:fe:81:fb:38:a8:fd:b8:69:
13:34:b7:e2:73:bd:c1:53:ec:b7:6f:04:50:ef:e8:e8:04:8e:
9c:dd:0b:cb:cc:80:e5:16:b1:0c:59:dd:6a:82:01:8e:75:c7:
43:a4:ee:fb:44:8d:5b:f5:5e:85:b4:54:2f:e2:b8:6d:f1:a3:
aa:ab:fd:0c:93:ea:5e:8a:3a:7a:d7:20:0c:b7:3d:ee:80:43:
a2:a3:95:21:08:16:ba:3b:95:40:2c:99:ee:21:57:64:0b:70:
e4:38:28:28:09:94:92:f3:b6:ac:09:9d:bd:89:ba:14:e6:24:
81:34:58:89:cb:b5:b6:0c:2e:44:5d:69:f0:83:74:56:f8:3e:
10:9d:29:e6:86:d1:6a:82:77:11:a1:e7:e5:33:23:43:f4:6d:
80:28:6b:71:60:5c:7e:16:c4:d0:85:60:e8:22:12:7d:f6:bc:
a0:fc:16:0d:6c:23:92:0a:e0:d6:ea:17:5d:8f:c1:4c:5d:48:
87:57:20:a8:ad:d3:ef:01:42:96:ea:b1:a0:3d:0e:5c:85:5c:
1a:7a:05:69:b4:45:09:ac:cb:fb:c2:e4:71:64:2b:33:59:86:
97:51:99:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:35 2024 by rpki-client on console-fra.rpki-client.org