Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/zSmB1OYP9G0SjtP_OvEUyOqlcxY.roa
File: zSmB1OYP9G0SjtP_OvEUyOqlcxY.roa (raw, json)
Hash identifier: mDRAoNmr8f7oJYuCdZaS7yvLB/trHqFxfjEeEjF4Ats=
Subject key identifier: CD:29:81:D4:E6:0F:F4:6D:12:8E:D3:FF:3A:F1:14:C8:EA:A5:73:16
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01842779E90126151C31C4C62855A2B5C518
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/zSmB1OYP9G0SjtP_OvEUyOqlcxY.roa
Signing time: Sun 30 Oct 2022 06:00:11 +0000
ROA not before: Sun 30 Oct 2022 06:00:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59962
IP address blocks: 87.248.140.0/24 maxlen: 24
87.248.141.0/24 maxlen: 24
87.248.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:27:79:e9:01:26:15:1c:31:c4:c6:28:55:a2:b5:c5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Oct 30 06:00:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd2981d4e60ff46d128ed3ff3af114c8eaa57316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:34:5e:ac:b8:f3:4f:9d:64:9c:17:28:fa:7e:
3d:b7:41:c2:8d:75:c3:22:8d:c3:6b:7d:98:a3:22:
ca:83:7b:e4:ab:25:8b:5e:9c:25:df:0a:72:80:3e:
50:ae:ac:ca:65:ae:77:35:54:c6:ac:ee:16:d6:5d:
18:13:ec:61:e3:cb:86:97:4c:99:85:39:ee:86:d6:
2b:e5:4d:28:1d:e4:bb:4b:5a:35:f6:a0:43:4c:ef:
9c:30:3e:5a:6f:b9:c0:2d:bf:b9:4d:6f:64:7e:95:
bc:89:cf:87:7e:9a:13:5c:80:65:11:da:a8:b7:8e:
99:07:ac:94:b9:92:0c:01:ff:bc:0d:58:83:8a:1c:
ac:45:df:b4:46:06:b4:09:85:81:d9:ba:5b:22:6e:
05:9b:2c:35:cf:e0:94:5e:19:eb:18:d4:4d:f6:de:
82:e0:5b:09:23:1f:cd:d9:a8:56:f3:78:3e:d4:47:
3e:53:8b:47:bf:4e:2a:39:b2:64:9d:44:f4:8f:ee:
8b:d7:22:a0:90:3e:51:de:40:7b:83:73:6d:66:1b:
60:be:ae:47:c4:d3:fa:dc:7c:5e:7c:76:89:b1:ed:
82:35:37:ad:99:64:e9:f7:14:36:ad:d4:68:05:ab:
fc:9b:20:46:89:79:e2:2a:60:0a:6e:8c:9f:94:db:
5e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:29:81:D4:E6:0F:F4:6D:12:8E:D3:FF:3A:F1:14:C8:EA:A5:73:16
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/zSmB1OYP9G0SjtP_OvEUyOqlcxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.140.0/23
87.248.154.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:ec:20:8b:2d:aa:88:92:ac:ef:2d:37:c2:36:50:1f:e4:1d:
e4:b5:22:b6:14:5b:49:85:43:7d:a3:fb:dc:a5:df:40:69:a9:
fb:47:81:1c:0f:fd:97:f1:83:95:e1:07:6b:e9:37:07:58:47:
e6:2e:26:c7:4c:d3:c6:07:61:61:a8:b2:b7:7a:99:62:f6:03:
4b:1e:fc:70:16:69:36:68:20:35:63:d5:d4:15:25:4a:0f:cd:
85:5b:13:9c:f9:1e:b5:20:22:06:19:10:82:e6:e4:f3:38:68:
fb:44:2a:10:ff:ad:c0:3c:1b:a9:17:8b:d6:e5:5d:75:1e:29:
09:80:8d:cf:33:b8:e5:75:fb:c9:f0:84:31:45:39:09:aa:7a:
18:5d:55:48:5c:9f:d6:ff:41:39:4f:04:33:4e:1f:d4:9e:9c:
6c:58:4b:2f:de:d2:bc:07:64:1e:b5:2d:0f:d1:0f:2b:3a:0e:
88:a0:7f:23:b2:60:37:73:83:2b:26:eb:25:08:c1:14:03:c4:
51:99:15:bb:7f:bf:5b:98:1f:3b:5b:14:b7:10:e4:ab:96:7d:
76:f3:ee:72:69:1c:19:63:60:21:9e:e9:34:f3:1e:f8:27:53:
53:2d:27:0d:b6:4d:a8:1e:a2:ba:34:e4:cd:27:bd:51:ff:f7:
b3:3b:5a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:10 2023 by rpki-client on console-ams.rpki-client.org