Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/S7lH300abLwGFO7Cs3Ib_VAPjeU.roa
File: S7lH300abLwGFO7Cs3Ib_VAPjeU.roa (raw, json)
Hash identifier: uHoKshM+3PlRblMjutm63wyAnlsH2zcAU8Whs8meEVE=
Subject key identifier: 4B:B9:47:DF:4D:1A:6C:BC:06:14:EE:C2:B3:72:1B:FD:50:0F:8D:E5
Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial: 388AB479
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/S7lH300abLwGFO7Cs3Ib_VAPjeU.roa
Signing time: Sat 01 Jan 2022 01:51:50 +0000
ROA not before: Sat 01 Jan 2022 01:51:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212430
IP address blocks: 109.69.217.16/28 maxlen: 32
109.69.221.192/28 maxlen: 32
87.238.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948614265 (0x388ab479)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
Validity
Not Before: Jan 1 01:51:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bb947df4d1a6cbc0614eec2b3721bfd500f8de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:db:5e:a9:70:b5:b0:6a:62:df:b5:7f:f1:
ea:3e:f2:08:68:fe:dc:86:ff:a7:fe:8e:19:58:83:
0d:77:46:7c:1e:ef:03:9b:1c:59:b5:60:b7:85:27:
8a:a7:8a:0e:2a:eb:4b:2b:87:3f:e6:7d:25:b5:f2:
fa:ef:ad:2e:47:ab:d5:d5:3c:57:b5:24:20:32:86:
22:67:5d:ea:9d:07:47:73:08:94:64:89:df:be:40:
be:6f:e9:17:84:a3:28:de:be:c6:e7:40:9a:44:5f:
a1:ff:c3:0e:9c:a2:cd:98:66:e3:cb:34:37:8c:53:
1c:a4:a0:b1:a2:4b:d7:b1:2a:c6:83:a6:0a:5c:dd:
33:9b:83:b4:40:3e:27:27:62:bf:57:16:f9:20:e7:
7f:f9:44:ea:bf:a9:37:eb:0d:8a:5d:c7:53:e1:62:
1d:12:6e:0b:53:92:ea:cd:f7:1b:59:26:de:a7:9c:
7f:25:a0:07:bb:13:49:2c:5b:35:d2:a7:9f:8c:be:
fd:2f:e3:31:c6:a1:a8:74:0d:ff:91:3d:ae:e7:3d:
99:f1:37:11:f8:f5:ba:e3:8a:0e:c2:02:1e:3c:09:
06:37:c6:25:91:58:d3:c8:34:51:2b:27:a3:fd:ff:
6e:5e:6a:27:c1:d7:9c:e9:3a:ea:47:35:29:f5:ff:
6a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B9:47:DF:4D:1A:6C:BC:06:14:EE:C2:B3:72:1B:FD:50:0F:8D:E5
X509v3 Authority Key Identifier:
keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/S7lH300abLwGFO7Cs3Ib_VAPjeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.227.0/24
109.69.217.16/28
109.69.221.192/28
Signature Algorithm: sha256WithRSAEncryption
82:09:96:4c:54:4c:e0:e6:98:de:76:78:e9:cf:7e:44:fe:e2:
fc:b7:03:82:03:60:c9:44:38:e9:bb:ec:b4:fc:13:d4:ba:e7:
fb:9b:d2:28:c4:69:e2:c0:a4:d5:fd:71:83:fc:a7:4e:ad:ca:
42:07:a6:da:26:ea:b2:21:c5:d3:07:d6:fa:7e:1a:c2:3a:2a:
b8:e4:97:3e:44:1a:4e:58:09:2a:c0:a7:67:86:0a:d0:89:2d:
98:cd:de:a3:80:45:25:65:54:4c:00:41:e3:08:08:43:63:3f:
f1:74:f6:69:05:26:5d:93:5e:c5:c5:f5:7e:62:b2:4b:8e:38:
38:d1:47:98:92:79:d4:da:d4:9c:cb:11:68:a1:f2:52:cb:a7:
f4:de:75:39:8e:cd:85:6f:a7:0c:9b:65:9c:df:8d:92:f1:e3:
2c:9a:6b:9c:73:63:15:34:37:60:f0:db:14:fe:d6:ff:e1:22:
b9:e7:e7:cf:9f:a6:e2:1d:a0:f1:a3:31:4c:f6:99:6e:09:4d:
5a:0d:2f:c8:f6:1c:e1:40:ef:0d:69:de:59:8f:f6:81:45:5c:
49:2f:48:8e:53:0d:e9:bc:bd:1d:17:7f:18:44:e7:ba:3f:15:
74:2b:f6:e1:f7:4b:85:ee:d1:db:ee:6f:e2:fb:56:c2:a8:8e:
a0:12:e2:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIEOIq0eTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
Nzc3YjViMzZmNjZlMTNjNDM4OGM5OTM0ZGE1MDc4NTY1MTVkMDczMB4XDTIyMDEw
MTAxNTE1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGJiOTQ3ZGY0ZDFh
NmNiYzA2MTRlZWMyYjM3MjFiZmQ1MDBmOGRlNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMNM216pcLWwamLftX/x6j7yCGj+3Ib/p/6OGViDDXdGfB7v
A5scWbVgt4UniqeKDirrSyuHP+Z9JbXy+u+tLker1dU8V7UkIDKGImdd6p0HR3MI
lGSJ375Avm/pF4SjKN6+xudAmkRfof/DDpyizZhm48s0N4xTHKSgsaJL17EqxoOm
ClzdM5uDtEA+Jydiv1cW+SDnf/lE6r+pN+sNil3HU+FiHRJuC1OS6s33G1km3qec
fyWgB7sTSSxbNdKnn4y+/S/jMcahqHQN/5E9ruc9mfE3Efj1uuOKDsICHjwJBjfG
JZFY08g0USsno/3/bl5qJ8HXnOk66kc1KfX/agsCAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBRLuUffTRpsvAYU7sKzchv9UA+N5TAfBgNVHSMEGDAWgBSHd7Wzb2bhPEOI
yZNNpQeFZRXQczAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2gzZTFzMjltNFR4RGlNbVRUYVVIaFdVVjBITS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjEvZjkyZTJhLWUxZTQtNDg3ZC05YWNjLWVkMWYzMGNjMWM1Ny8x
L1M3bEgzMDBhYkx3R0ZPN0NzM0liX1ZBUGplVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEv
ZjkyZTJhLWUxZTQtNDg3ZC05YWNjLWVkMWYzMGNjMWM1Ny8xL2gzZTFzMjltNFR4
RGlNbVRUYVVIaFdVVjBITS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAFfu4wMFBG1F2RADBQRtRd3AMA0G
CSqGSIb3DQEBCwUAA4IBAQCCCZZMVEzg5pjednjpz35E/uL8twOCA2DJRDjpu+y0
/BPUuuf7m9IoxGniwKTV/XGD/KdOrcpCB6baJuqyIcXTB9b6fhrCOiq45Jc+RBpO
WAkqwKdnhgrQiS2Yzd6jgEUlZVRMAEHjCAhDYz/xdPZpBSZdk17FxfV+YrJLjjg4
0UeYknnU2tScyxFoofJSy6f03nU5js2Fb6cMm2Wc342S8eMsmmucc2MVNDdg8NsU
/tb/4SK55+fPn6biHaDxozFM9pluCU1aDS/I9hzhQO8Nad5Zj/aBRVxJL0iOUw3p
vL0dF38YROe6PxV0K/bh90uF7tHb7m/i+1bCqI6gEuK+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:22 2024 by rpki-client on console-ams.rpki-client.org