Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e2f264-9c5a-4378-93e1-492b8b4165d0/1/6LpQDCpHM2D-VtdOfoL6rgYJTEg.roa
File: 6LpQDCpHM2D-VtdOfoL6rgYJTEg.roa (raw, json)
Hash identifier: GrdxTVqbu+4ur/pu/Umxorhud0OxkbAWw6R6x/oECzo=
Subject key identifier: E8:BA:50:0C:2A:47:33:60:FE:56:D7:4E:7E:82:FA:AE:06:09:4C:48
Certificate issuer: /CN=ef26885e740736c21453d3aa1f4b269848fdaac2
Certificate serial: DEE3F6
Authority key identifier: EF:26:88:5E:74:07:36:C2:14:53:D3:AA:1F:4B:26:98:48:FD:AA:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yaIXnQHNsIUU9OqH0smmEj9qsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e2f264-9c5a-4378-93e1-492b8b4165d0/1/6LpQDCpHM2D-VtdOfoL6rgYJTEg.roa
Signing time: Sat 01 Jan 2022 05:54:57 +0000
ROA not before: Sat 01 Jan 2022 05:54:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48011
IP address blocks: 87.236.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14607350 (0xdee3f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef26885e740736c21453d3aa1f4b269848fdaac2
Validity
Not Before: Jan 1 05:54:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8ba500c2a473360fe56d74e7e82faae06094c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:98:ba:8a:0e:fb:05:10:e8:5e:96:57:df:fb:
96:d3:f4:bb:3a:94:8f:2e:56:32:00:21:4b:cf:a2:
ff:c0:94:0d:e2:a2:c4:cd:33:8b:90:36:22:83:fa:
ae:e8:86:6f:fa:f3:c2:bc:da:7b:d0:55:1d:d0:54:
74:b8:3e:71:60:6f:0d:4b:03:22:d9:d3:90:ca:ec:
26:24:29:e5:19:d9:0e:14:6c:88:72:60:9a:17:a2:
03:11:00:60:1a:69:dd:d8:6a:a0:54:6e:0f:47:bf:
da:10:6b:2b:9a:8a:9a:67:3d:a2:1c:99:63:47:34:
5b:81:ea:81:f1:27:b7:5d:de:a8:8a:59:ad:80:a7:
f2:3d:ce:4e:54:9d:c1:3f:4d:66:1c:f2:28:7a:f8:
42:ef:d3:f8:3b:4e:d8:f5:e0:37:82:e3:1e:08:bc:
d0:35:98:15:5d:66:5c:d6:33:79:51:ae:20:5d:bb:
be:2f:d1:79:87:03:b5:23:1d:00:02:0c:08:9b:69:
6a:e0:4b:22:0f:5f:b7:d4:8e:9e:4b:99:05:ae:5e:
fc:9c:e5:96:4b:7c:c9:74:ef:8d:85:8a:aa:5f:2d:
ca:c2:f0:9c:10:5d:36:12:4d:e0:5c:04:bf:a5:94:
e0:2a:14:55:70:d8:45:9d:e4:17:12:9c:0c:d3:61:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BA:50:0C:2A:47:33:60:FE:56:D7:4E:7E:82:FA:AE:06:09:4C:48
X509v3 Authority Key Identifier:
keyid:EF:26:88:5E:74:07:36:C2:14:53:D3:AA:1F:4B:26:98:48:FD:AA:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yaIXnQHNsIUU9OqH0smmEj9qsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e2f264-9c5a-4378-93e1-492b8b4165d0/1/6LpQDCpHM2D-VtdOfoL6rgYJTEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e2f264-9c5a-4378-93e1-492b8b4165d0/1/7yaIXnQHNsIUU9OqH0smmEj9qsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.161.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:56:c4:24:d1:d3:ed:45:95:1e:f7:27:91:83:36:17:78:66:
38:4b:7a:65:84:0e:f3:0e:9a:61:8e:c6:dd:37:1f:24:6e:91:
5e:63:43:72:ae:42:4b:70:ba:62:4f:43:0b:d8:e9:a6:9b:c1:
ef:84:2f:2b:0c:8d:65:2e:92:ac:83:dc:56:f4:ca:fc:bf:48:
65:90:76:b2:95:b8:ab:27:d3:69:28:61:b1:6b:3e:1d:37:59:
51:53:f4:e7:81:a8:0a:79:c5:5e:8f:74:4a:59:50:a3:c4:ac:
fe:d8:a3:da:29:07:82:b5:33:ca:27:98:e4:ac:c2:0a:16:da:
ce:12:8b:f1:ce:7d:4a:20:f0:82:f9:88:65:5c:9c:3e:f0:26:
d6:68:b4:f7:f6:cc:5e:54:98:34:58:0e:bb:d0:ba:a7:73:07:
54:8c:5a:14:b5:51:6b:ed:6c:bb:10:89:32:7f:16:5f:65:bf:
6e:d7:f8:fb:e1:5c:81:e7:4c:39:64:17:30:1b:e3:81:96:fb:
e1:6b:48:46:28:32:cb:38:f9:a7:fe:1a:ff:1c:c9:9a:b8:11:
c1:e8:ff:03:fc:56:54:7e:17:7a:e4:74:5a:df:57:57:52:6c:
1d:e6:3f:a6:f3:fd:de:61:4e:12:53:92:d9:e0:bc:7c:eb:4e:
da:2d:f1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:15 2023 by rpki-client on console-fra.rpki-client.org