Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/xQkxKfYInoveuEcYO0ZD7lpkdhY.roa
File: xQkxKfYInoveuEcYO0ZD7lpkdhY.roa (raw, json)
Hash identifier: 8Uz/iYl1CJ1l1B6bsH6HtmB6LD9LXU1F2qu3UnoI8Hs=
Subject key identifier: C5:09:31:29:F6:08:9E:8B:DE:B8:47:18:3B:46:43:EE:5A:64:76:16
Certificate issuer: /CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Certificate serial: 01865F8DD9919C95992A87C293F8E137EC66
Authority key identifier: 58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/xQkxKfYInoveuEcYO0ZD7lpkdhY.roa
Signing time: Fri 17 Feb 2023 13:26:17 +0000
ROA not before: Fri 17 Feb 2023 13:26:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8315
IP address blocks: 87.237.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5f:8d:d9:91:9c:95:99:2a:87:c2:93:f8:e1:37:ec:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Validity
Not Before: Feb 17 13:26:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5093129f6089e8bdeb847183b4643ee5a647616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:40:49:60:09:b3:b6:d7:5c:74:a7:ca:03:
b5:98:d9:70:20:fa:44:1b:27:e4:72:73:c7:08:10:
71:f6:f0:c2:2a:36:31:c1:15:a6:03:b8:5a:0d:a9:
3a:8b:88:0a:81:6a:88:5c:bb:e5:db:84:d7:17:22:
1d:79:06:7c:f7:ff:ec:19:bc:09:28:2d:f8:f4:53:
a0:be:ce:ec:13:21:b3:b2:fc:2a:a3:dc:81:62:1a:
ae:25:d1:72:20:35:1d:05:bb:24:6e:9e:cf:e7:78:
64:28:8a:c8:f5:87:82:ce:bb:d2:32:2a:80:cc:66:
dd:7f:c4:9f:69:fc:92:7c:02:70:88:64:a0:21:24:
1d:11:8d:a2:d7:65:84:82:95:2b:83:19:43:3a:32:
c1:77:27:1f:3f:92:ba:4f:84:72:e9:c9:a3:96:41:
d1:e8:82:4f:98:7e:ed:a2:c9:67:bd:a5:1f:02:92:
de:da:13:4d:6f:6d:79:ca:50:58:d1:08:33:5e:07:
80:b2:98:42:97:60:ae:8f:43:9c:5f:21:b7:90:49:
ff:06:3d:2b:c4:c6:61:bd:7d:9d:b6:4e:57:31:cf:
c9:08:e1:ad:84:4a:c4:1c:bb:54:61:cc:a5:32:44:
cd:cb:24:22:73:71:c9:a2:56:38:51:09:3a:19:b0:
0d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:09:31:29:F6:08:9E:8B:DE:B8:47:18:3B:46:43:EE:5A:64:76:16
X509v3 Authority Key Identifier:
keyid:58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/xQkxKfYInoveuEcYO0ZD7lpkdhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.99.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:fa:b1:b8:b0:69:bd:8a:00:7d:9b:b2:7f:f7:ef:65:3f:c9:
ff:07:f0:96:a8:62:ca:b6:f5:b4:43:21:e3:f5:cb:d2:9b:90:
73:60:fa:ab:6a:f9:dc:8a:a4:06:82:0f:64:75:43:55:62:93:
fc:73:9f:43:1b:6c:36:83:ee:1e:6d:a7:30:5a:e5:8d:4f:50:
6d:64:f2:40:50:a2:61:07:ca:93:11:24:68:f3:8b:85:7a:07:
b2:b1:ca:d7:f2:30:34:87:96:1f:49:e5:23:7a:b9:5c:25:1b:
b3:f1:e6:de:e6:1b:2e:d2:82:cf:37:69:01:3d:c2:de:e5:73:
36:17:46:ca:8c:1b:4b:01:6d:58:8b:37:29:29:dc:0c:88:b2:
2b:db:4c:4f:1b:e0:7f:03:0b:aa:1b:29:0a:12:6e:04:93:df:
28:b4:02:b8:07:ac:5f:4b:80:04:b8:dd:ee:1c:aa:3f:89:d8:
81:e4:fe:d4:c0:87:44:13:3a:42:c4:87:bf:ce:53:32:d4:eb:
f1:b2:b5:ed:b5:58:d2:3c:d0:8d:fb:d3:b1:e2:fd:03:81:99:
25:72:88:dc:38:bf:ca:9b:a9:2e:da:9a:ed:44:ee:52:2b:ee:
cb:fb:d8:fd:fa:ee:9c:86:1d:f7:8d:f0:0b:e4:78:9b:6b:aa:
5e:d5:35:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:18 2025 by rpki-client