Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/zyxOVIv1L2Q1K1oVgHK-Yz_uq30.roa
File: zyxOVIv1L2Q1K1oVgHK-Yz_uq30.roa (raw, json)
Hash identifier: zFPUto1UU8WJRw9Om/f26NL69wKsdfSLrX1haXeKL/g=
Subject key identifier: CF:2C:4E:54:8B:F5:2F:64:35:2B:5A:15:80:72:BE:63:3F:EE:AB:7D
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 1C167F65
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/zyxOVIv1L2Q1K1oVgHK-Yz_uq30.roa
Signing time: Tue 10 May 2022 11:44:02 +0000
ROA not before: Tue 10 May 2022 11:44:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 87.248.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471236453 (0x1c167f65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: May 10 11:44:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf2c4e548bf52f64352b5a158072be633feeab7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:df:75:1c:d8:c1:53:d5:f0:70:67:de:44:
0e:44:22:87:f4:8c:45:9f:38:03:1f:dd:fb:81:21:
bb:a1:f0:39:58:bf:38:9c:6f:76:79:ae:17:ba:0d:
bd:bf:17:4e:3f:c6:fa:d4:55:da:50:65:89:a6:c8:
6d:8b:f8:94:2c:49:1a:f9:34:00:61:7d:cd:39:97:
51:ef:55:d1:3c:cd:d0:29:93:4d:63:66:b4:1e:c1:
32:ce:b6:a1:ac:ae:53:8b:fa:48:f6:44:72:d3:68:
12:a0:74:84:48:98:70:05:74:34:48:e2:b7:b7:35:
e4:b2:a1:6a:21:d5:3c:0c:76:a0:4c:1b:a3:18:0c:
cf:0a:a4:7e:c8:0c:1a:bf:ea:fe:33:d5:c7:24:00:
09:a9:d7:c9:0e:a7:01:ba:56:0b:ae:a4:7f:b5:85:
b1:98:e6:91:8b:4c:c2:7e:ed:2f:f8:4c:ca:7c:56:
ef:e5:38:7b:e9:3c:a9:b3:a5:70:ef:4e:77:19:02:
42:33:41:63:a3:0b:52:ae:90:e0:09:3c:fc:19:8f:
48:06:1e:fc:7c:19:c5:e3:48:a4:79:8c:4d:fa:0d:
ab:32:cd:f6:2e:c4:3a:7f:7a:82:45:4d:bd:50:fc:
ad:64:fe:f4:21:40:0c:82:93:b5:4d:90:03:bf:27:
42:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2C:4E:54:8B:F5:2F:64:35:2B:5A:15:80:72:BE:63:3F:EE:AB:7D
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/zyxOVIv1L2Q1K1oVgHK-Yz_uq30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.129.0/24
Signature Algorithm: sha256WithRSAEncryption
25:b8:e2:d9:32:20:ec:75:48:fb:37:a0:cf:8f:49:20:3a:7b:
13:02:c3:c7:89:89:03:0d:60:3a:60:c3:20:68:ca:b0:c5:82:
9e:43:b0:5e:59:92:fc:60:c6:01:cf:b4:6c:a7:ea:de:f0:38:
4d:89:c7:48:fd:c4:48:a9:57:52:4f:52:ae:5a:e1:cd:93:c9:
64:39:c1:cc:37:00:c5:ef:13:45:2f:dc:fd:f4:f7:05:23:9e:
0a:8a:26:5d:c1:9c:93:86:72:c2:cb:cb:ac:3e:83:13:b5:6f:
14:64:ca:76:c5:21:04:01:31:a5:fa:ab:7e:2d:28:d5:63:4e:
dc:c5:2e:c8:36:4e:79:41:73:13:18:d1:de:48:68:3c:77:6a:
3d:ee:a8:a5:b3:94:c5:f3:d3:f2:8d:2c:bf:d0:db:eb:68:78:
fc:a2:cf:73:cf:c2:d5:a6:9f:6d:8a:bd:ec:9a:0a:1a:56:ac:
dc:ff:88:6d:52:c2:73:8e:b7:41:21:13:7f:96:6c:c3:2e:a4:
18:6b:1a:a0:76:e8:9e:92:d6:44:3f:0f:26:1c:3b:51:21:76:
04:34:44:99:aa:76:a9:a9:ff:9b:6e:a2:84:00:bb:a8:f9:89:
a2:c7:59:f5:68:7e:89:32:b9:3d:88:58:ad:5f:48:47:d2:cd:
3d:c2:a8:66
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEHBZ/ZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
N2Y2MWZjN2MwYWI0MWNlMTU0ZTdiY2IwOGVmOTYyMzUxYTQ2Nzg0MB4XDTIyMDUx
MDExNDQwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2YyYzRlNTQ4YmY1
MmY2NDM1MmI1YTE1ODA3MmJlNjMzZmVlYWI3ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALl/33Uc2MFT1fBwZ95EDkQih/SMRZ84Ax/d+4Ehu6HwOVi/
OJxvdnmuF7oNvb8XTj/G+tRV2lBliabIbYv4lCxJGvk0AGF9zTmXUe9V0TzN0CmT
TWNmtB7BMs62oayuU4v6SPZEctNoEqB0hEiYcAV0NEjit7c15LKhaiHVPAx2oEwb
oxgMzwqkfsgMGr/q/jPVxyQACanXyQ6nAbpWC66kf7WFsZjmkYtMwn7tL/hMynxW
7+U4e+k8qbOlcO9OdxkCQjNBY6MLUq6Q4Ak8/BmPSAYe/HwZxeNIpHmMTfoNqzLN
9i7EOn96gkVNvVD8rWT+9CFADIKTtU2QA78nQgUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTPLE5Ui/UvZDUrWhWAcr5jP+6rfTAfBgNVHSMEGDAWgBR39h/HwKtBzhVO
e8sI75YjUaRnhDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RfWWZ4OENyUWM0VlRudkxDTy1XSTFHa1o0US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjQvOTIxM2VjLTg1YTktNDhkNi1hYTY5LWVkYzlkMDJmYWY1NC8x
L3p5eE9WSXYxTDJRMUsxb1ZnSEstWXpfdXEzMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQv
OTIxM2VjLTg1YTktNDhkNi1hYTY5LWVkYzlkMDJmYWY1NC8xL2RfWWZ4OENyUWM0
VlRudkxDTy1XSTFHa1o0US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFf4gTANBgkqhkiG9w0BAQsFAAOC
AQEAJbji2TIg7HVI+zegz49JIDp7EwLDx4mJAw1gOmDDIGjKsMWCnkOwXlmS/GDG
Ac+0bKfq3vA4TYnHSP3ESKlXUk9SrlrhzZPJZDnBzDcAxe8TRS/c/fT3BSOeCoom
XcGck4ZywsvLrD6DE7VvFGTKdsUhBAExpfqrfi0o1WNO3MUuyDZOeUFzExjR3kho
PHdqPe6opbOUxfPT8o0sv9Db62h4/KLPc8/C1aafbYq97JoKGlas3P+IbVLCc463
QSETf5Zswy6kGGsaoHbonpLWRD8PJhw7USF2BDREmap2qan/m26ihAC7qPmJosdZ
9Wh+iTK5PYhYrV9IR9LNPcKoZg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:22 2023 by rpki-client on console-fra.rpki-client.org