Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/zmbFvFakWHLTVBiN5vwy-2QXRvQ.roa
File: zmbFvFakWHLTVBiN5vwy-2QXRvQ.roa (raw, json)
Hash identifier: c9jDO4Y1MQdQFYu4MokjqkNetW4ktMfPuKOebHkxIFg=
Subject key identifier: CE:66:C5:BC:56:A4:58:72:D3:54:18:8D:E6:FC:32:FB:64:17:46:F4
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 018393DA6DF8A44555758979E250BC874C9C
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/zmbFvFakWHLTVBiN5vwy-2QXRvQ.roa
Signing time: Sat 01 Oct 2022 14:01:49 +0000
ROA not before: Sat 01 Oct 2022 14:01:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208161
IP address blocks: 87.248.139.0/24 maxlen: 24
87.248.152.0/23 maxlen: 24
87.248.150.0/24 maxlen: 24
87.248.155.0/24 maxlen: 24
87.248.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:93:da:6d:f8:a4:45:55:75:89:79:e2:50:bc:87:4c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Oct 1 14:01:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce66c5bc56a45872d354188de6fc32fb641746f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:0f:34:43:db:88:92:d1:7c:2b:0e:1f:72:
27:40:8e:00:6e:69:7e:a1:20:7c:2c:e8:da:69:00:
28:8b:81:38:94:4e:27:07:d5:e8:49:20:28:1e:be:
3b:83:e4:2d:ad:b7:82:e9:6d:48:8c:f2:88:2d:de:
3b:52:24:72:c6:f3:e9:d1:df:4a:88:dc:98:eb:57:
85:8d:41:00:83:0f:62:31:e1:3c:a9:fe:1d:5b:5d:
a8:27:f2:d1:62:5a:c7:e8:60:40:c3:f5:f0:50:fe:
76:4d:b4:3d:55:ea:64:91:bc:ff:6a:f1:86:ad:f1:
a3:9d:d5:5e:8e:d8:7e:09:8b:6f:80:18:12:f7:61:
b1:e2:45:1f:ba:c8:d6:31:fd:71:ae:cf:19:1e:13:
8d:07:9d:7a:3c:06:37:cf:23:90:9f:67:f8:83:c1:
33:2a:10:c4:24:c0:bc:1c:73:8e:ec:da:d1:5c:56:
7c:3b:f6:cd:1c:6f:1a:4f:f8:78:39:df:f8:64:7c:
fe:d5:38:76:91:f4:d5:db:87:86:61:6d:59:bb:3e:
9d:97:f4:f4:27:72:6f:9c:e1:be:c2:9c:15:54:6b:
a8:71:a4:6c:b6:4a:8e:70:9c:ff:f8:e5:03:11:da:
2d:2e:cc:37:6d:6c:e0:95:b3:e4:37:c3:81:5d:1b:
e4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:66:C5:BC:56:A4:58:72:D3:54:18:8D:E6:FC:32:FB:64:17:46:F4
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/zmbFvFakWHLTVBiN5vwy-2QXRvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.139.0/24
87.248.150.0/24
87.248.152.0/23
87.248.155.0-87.248.156.255
Signature Algorithm: sha256WithRSAEncryption
97:f2:ca:bb:5c:e1:e1:4f:e2:d0:2e:25:1c:bb:dc:f6:77:1e:
44:60:f5:11:25:98:84:ff:43:4a:be:ad:91:21:e8:42:37:63:
46:f9:12:4c:fb:82:b7:42:03:8c:3e:75:5e:a8:c8:ef:d0:c4:
6e:fc:65:2f:ac:ad:bc:63:3c:f8:37:2f:1e:bf:c1:a2:d2:85:
db:6b:98:59:fd:0c:b6:17:6f:18:95:48:1f:e3:0c:93:84:60:
f9:b0:6a:7e:7e:9c:a2:e5:c4:c2:5e:25:3f:32:79:38:0b:21:
40:76:42:78:dd:93:e6:ba:a8:f1:39:a1:72:65:f6:6c:68:d4:
a9:b8:8f:c5:34:4e:ac:2b:21:58:ce:96:7d:8d:0c:76:45:eb:
9b:0b:79:41:82:e3:5f:26:dd:25:ad:18:11:4f:9f:b0:d9:19:
80:48:e8:32:88:91:54:1a:04:73:d3:79:01:78:43:10:5e:8d:
e8:3b:d8:42:eb:e1:88:23:ca:e9:83:a4:fd:a3:8e:47:74:63:
23:fe:f4:b3:39:8a:c9:ad:17:b8:b1:91:3e:ce:49:b7:f3:c3:
3e:e4:99:84:cb:12:a1:1a:84:5c:73:3b:03:53:f4:c9:5b:94:
01:7e:95:49:b2:be:e2:17:82:b2:c1:18:f0:05:c1:4f:c5:99:
51:e0:b8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:22 2023 by rpki-client on console-fra.rpki-client.org