Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/Dzt-8gSoZkqZmm6D61KNAhOhtBY.roa
File: Dzt-8gSoZkqZmm6D61KNAhOhtBY.roa (raw, json)
Hash identifier: 00RmEYZ0OxMwuz7N5kjC2uFQHk2nv5Qvthd9aaRJ7BY=
Subject key identifier: 0F:3B:7E:F2:04:A8:66:4A:99:9A:6E:83:EB:52:8D:02:13:A1:B4:16
Certificate issuer: /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial: 1681E06E
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/Dzt-8gSoZkqZmm6D61KNAhOhtBY.roa
Signing time: Sat 01 Jan 2022 05:56:05 +0000
ROA not before: Sat 01 Jan 2022 05:56:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211291
IP address blocks: 87.249.61.0/24 maxlen: 24
87.249.62.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377610350 (0x1681e06e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Validity
Not Before: Jan 1 05:56:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f3b7ef204a8664a999a6e83eb528d0213a1b416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fe:7e:50:3b:75:c8:c3:59:1a:ce:88:76:79:
d1:16:01:de:34:b3:49:26:5b:19:ed:2b:0f:38:18:
96:f2:e6:f3:8b:2b:20:a7:f5:72:5f:02:ef:cb:6b:
64:40:d1:32:13:37:d4:61:78:6a:a8:28:4d:08:0c:
50:43:24:8f:d2:68:06:7d:72:92:90:8b:33:51:78:
28:75:12:ff:d1:ac:62:7d:27:87:2f:eb:32:2b:a4:
0d:15:17:63:8d:b8:ff:8a:c0:49:df:24:a5:6f:70:
76:ca:af:c9:3e:61:45:0e:80:4f:66:0c:90:89:8a:
10:c7:f9:cc:46:d5:32:fb:53:b2:d3:e8:75:35:87:
a5:0f:5c:cd:35:69:a3:41:74:5e:cd:e4:ba:70:43:
0a:98:98:0b:2e:aa:8d:da:24:8e:db:06:b2:90:22:
e8:ed:57:85:4e:c7:1d:78:8a:21:03:ad:e5:a9:13:
d0:88:eb:81:61:cc:d9:df:0e:dd:05:45:6e:b4:9f:
5f:2f:fe:1b:f4:74:ba:1e:b5:01:c6:42:ac:1b:83:
a7:b1:ef:0c:0a:df:e7:fd:a1:89:ce:8e:68:5a:5a:
b8:2c:1b:0e:10:e0:f0:c4:bc:91:30:66:15:e2:e7:
16:49:52:3c:f7:c3:97:ca:46:68:b1:3c:11:ec:76:
6b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3B:7E:F2:04:A8:66:4A:99:9A:6E:83:EB:52:8D:02:13:A1:B4:16
X509v3 Authority Key Identifier:
keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/Dzt-8gSoZkqZmm6D61KNAhOhtBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.249.61.0-87.249.63.255
Signature Algorithm: sha256WithRSAEncryption
b4:f2:e7:91:24:41:40:c2:28:0d:05:13:b2:b0:15:42:ce:50:
11:a1:22:e2:80:d9:03:de:ab:72:8e:d3:a6:54:09:df:ce:fe:
cb:d6:6c:67:4d:7b:3a:f2:25:74:af:91:fd:7d:76:e8:8d:5e:
6a:2a:04:04:d8:a6:05:bd:56:7a:1f:a2:27:c2:9f:78:88:2d:
8e:e2:11:a5:2b:87:d9:27:15:ca:4f:41:67:8c:e3:d3:a5:e5:
67:d5:83:18:1a:c8:08:3f:c1:ef:59:40:f4:b2:18:31:67:62:
0f:9d:64:bd:38:b5:f5:0d:22:e7:a1:e4:77:d8:41:2c:c7:e4:
f6:2c:c7:96:65:9a:02:f7:59:2d:54:b8:24:68:bb:7b:f1:46:
5e:f2:ce:6e:88:7f:f4:c8:d2:ea:10:cc:b9:84:1e:aa:0b:77:
63:7c:82:fc:b6:bf:a5:a3:f3:7a:83:fc:cf:ab:a3:98:df:59:
ae:dc:de:32:33:b4:ca:c0:58:a7:e8:eb:f1:5b:13:e2:56:b9:
68:e3:55:b4:6b:b2:2c:07:85:05:2a:da:24:12:ff:a6:5a:b3:
30:a3:09:41:c4:96:c8:fb:50:38:0d:ba:84:e3:9d:42:ec:b7:
7a:ae:4a:32:e6:ce:bd:4d:cc:5d:e4:21:05:a6:44:fa:e3:b5:
25:e3:8a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:16 2023 by rpki-client on console-ams.rpki-client.org