Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/LRiTKSvym76t3YOAxG3wtkU0O7M.roa
File: LRiTKSvym76t3YOAxG3wtkU0O7M.roa (raw, json)
Hash identifier: o8yipLu1nJ6/49PsUIYs4vlg6l84nvcvpnYWYaVwkJs=
Subject key identifier: 2D:18:93:29:2B:F2:9B:BE:AD:DD:83:80:C4:6D:F0:B6:45:34:3B:B3
Certificate issuer: /CN=4d687d862808225b459fa399e65f8a069469aba3
Certificate serial: 07ED4071
Authority key identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/LRiTKSvym76t3YOAxG3wtkU0O7M.roa
Signing time: Sat 01 Jan 2022 09:00:17 +0000
ROA not before: Sat 01 Jan 2022 09:00:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31317
IP address blocks: 77.87.191.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132989041 (0x7ed4071)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d687d862808225b459fa399e65f8a069469aba3
Validity
Not Before: Jan 1 09:00:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d1893292bf29bbeaddd8380c46df0b645343bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b8:d4:46:41:1b:3d:64:cb:52:4e:3a:fd:22:
db:58:0f:31:36:b6:4b:78:92:e7:74:1e:ac:c5:ec:
4c:00:98:09:df:da:af:56:d5:6b:ff:91:22:73:4b:
af:a7:8c:ce:cb:ef:c4:ac:c8:2b:19:66:d1:9d:f0:
e3:53:ad:1d:7d:38:38:d9:f5:40:b2:46:3d:4a:27:
9d:f0:4f:ae:94:e6:1f:51:37:7a:c7:42:a6:8e:d1:
7e:09:0f:e9:5d:35:20:85:84:1e:34:7b:f6:51:f1:
7c:32:ad:60:fa:71:58:ab:d5:f5:3b:c3:02:e8:36:
63:b0:5f:8e:be:e2:1b:51:e6:d0:9b:24:d8:37:37:
b3:71:90:39:17:ba:b7:b4:7a:81:5c:c8:01:b1:18:
37:56:eb:aa:9b:75:8b:b6:b7:28:08:d5:a4:4c:f9:
7c:bb:82:8f:ff:60:9f:21:2f:88:10:25:2d:bc:31:
26:13:d2:87:af:14:63:65:ca:55:ad:dd:f3:b9:7b:
87:5f:a2:a4:7f:d7:64:99:fb:f7:da:e5:22:ae:e9:
1b:86:f9:cc:1d:7a:4b:55:36:67:db:5a:1b:b7:46:
da:ea:14:15:44:7e:4a:61:83:9c:a2:01:fc:a0:59:
30:5a:2e:b4:cc:22:53:b9:b3:f0:46:7b:40:87:89:
c8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:18:93:29:2B:F2:9B:BE:AD:DD:83:80:C4:6D:F0:B6:45:34:3B:B3
X509v3 Authority Key Identifier:
keyid:4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/LRiTKSvym76t3YOAxG3wtkU0O7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.191.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:a7:59:bc:31:5a:1b:85:24:29:04:e0:07:53:dc:b5:21:d4:
16:13:cc:4e:f0:c2:57:03:36:b4:24:ee:31:c7:9f:f3:7c:5c:
70:25:e1:3f:c3:9c:fe:49:ef:41:1d:b2:b1:52:08:04:55:94:
f9:1d:ae:15:42:73:cf:ed:d6:f6:aa:d2:77:23:cf:77:d2:94:
fa:02:26:fa:01:85:5f:3e:9a:35:cd:74:75:25:1d:a2:06:5e:
1e:00:d4:6a:74:06:df:5a:0a:a0:a5:57:02:cd:0f:b8:03:4f:
cb:4e:ed:22:8d:6a:1f:0b:f3:22:9a:ed:fb:43:a6:1a:f4:a1:
f4:e8:69:0a:9b:ce:4a:83:51:4d:c0:03:53:7b:19:86:ee:1c:
cc:4e:ae:d5:0a:fd:ef:d4:a8:5f:78:a0:e1:2a:e8:93:fa:b1:
c2:55:3d:c4:da:5c:21:5d:c9:6d:81:36:8e:b9:91:db:78:b9:
23:8f:45:c4:47:cd:f9:c9:cb:bb:16:67:8b:58:e9:f7:2d:70:
ac:42:ef:91:10:6b:13:50:b7:30:05:ee:62:89:13:b1:5c:6a:
4e:3e:fd:e9:5d:48:9f:b0:55:93:f5:cb:99:e8:42:21:ea:56:
cc:8d:10:25:07:3f:3c:c3:34:78:f7:1a:a6:cd:a0:cc:6e:08:
f3:ad:c6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:04 2024 by rpki-client on console-ams.rpki-client.org