Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/5bS3H8sS66kKUMdnQrBbBTBp3o8.roa
File: 5bS3H8sS66kKUMdnQrBbBTBp3o8.roa (raw, json)
Hash identifier: iu7QhtfCsBJlXB9PRTyhe22xTWZuULhMA3r2DyLijUU=
Subject key identifier: E5:B4:B7:1F:CB:12:EB:A9:0A:50:C7:67:42:B0:5B:05:30:69:DE:8F
Certificate issuer: /CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Certificate serial: 081CA8E3
Authority key identifier: 2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/5bS3H8sS66kKUMdnQrBbBTBp3o8.roa
Signing time: Sat 01 Jan 2022 04:56:31 +0000
ROA not before: Sat 01 Jan 2022 04:56:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61237
IP address blocks: 77.247.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136095971 (0x81ca8e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eeec5231d212b310579d78fc41479ca6ec2aa07
Validity
Not Before: Jan 1 04:56:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5b4b71fcb12eba90a50c76742b05b053069de8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:77:a0:2c:f9:9b:ca:a7:85:40:3a:6f:ed:
6e:c4:25:85:74:82:4a:39:94:b2:09:4c:fc:0b:15:
ca:6a:0d:38:ca:78:81:87:02:c5:fc:6d:78:02:e0:
4d:f6:77:d7:b5:93:cc:00:37:14:40:f5:1e:87:e1:
91:35:39:19:6e:ea:b1:09:ef:ea:ba:0c:a4:aa:da:
09:99:e3:e8:18:c5:6b:4c:0a:bd:bb:33:df:ad:7c:
32:b8:38:f7:5c:fd:18:88:87:90:57:b4:30:05:77:
23:44:31:76:3f:7b:3a:e6:57:50:e6:b3:25:cc:a6:
c0:4a:fe:6d:49:59:3e:ac:dd:3f:4e:4a:1f:27:fe:
53:e0:85:70:dc:44:5f:33:2b:fd:8a:aa:1d:4a:97:
8c:5e:17:90:81:0f:40:5e:6b:bd:3d:4f:0b:5c:31:
1d:f9:ec:e2:b5:df:9e:a4:3f:37:f0:d5:7d:ba:c8:
8a:2b:89:b6:01:f6:05:0b:6f:8f:f4:35:88:06:cb:
fb:30:79:b6:82:a1:33:33:a2:dd:7d:4a:8d:91:9e:
e3:ba:27:ad:97:60:8a:cf:20:08:e3:d8:f4:f9:f1:
9b:63:9e:5c:0b:89:cb:29:59:11:10:3e:c4:82:47:
db:11:50:fa:37:ac:fa:78:89:9b:36:b2:fc:be:95:
0e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B4:B7:1F:CB:12:EB:A9:0A:50:C7:67:42:B0:5B:05:30:69:DE:8F
X509v3 Authority Key Identifier:
keyid:2E:EE:C5:23:1D:21:2B:31:05:79:D7:8F:C4:14:79:CA:6E:C2:AA:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lu7FIx0hKzEFedePxBR5ym7Cqgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/5bS3H8sS66kKUMdnQrBbBTBp3o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8b856a-38ae-4cfb-81d2-271a9576eae7/1/Lu7FIx0hKzEFedePxBR5ym7Cqgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.239.0/24
Signature Algorithm: sha256WithRSAEncryption
01:78:25:e9:96:15:e8:b1:d6:87:ca:61:03:46:ca:c6:3f:42:
92:0f:9a:06:35:21:29:22:b2:00:07:4a:ba:96:cd:46:10:19:
8d:85:8f:6f:64:7a:0d:17:ab:49:01:89:3c:38:09:36:fa:f7:
93:66:48:d9:a3:9f:05:c5:bf:75:ba:f9:2c:18:0f:5c:e3:22:
3f:1d:8f:ec:97:68:a7:80:93:0b:f7:19:59:7f:51:78:b5:87:
a7:ba:32:d7:18:b2:2e:94:46:fc:a8:02:97:c6:58:d7:5b:0f:
8c:14:66:c3:f7:78:b0:18:d9:77:b3:2e:27:c3:fa:62:b4:eb:
27:99:aa:45:f7:1e:b0:e8:2f:0f:38:22:42:8f:10:f6:3d:5c:
fa:ff:40:a0:e5:3b:bc:5c:84:1a:0a:f8:fa:d2:87:d0:4b:4f:
43:ee:8e:58:bf:64:a8:ef:61:4e:d8:36:71:12:3f:94:5b:66:
47:a2:29:02:e0:e2:2a:40:30:5d:93:e0:9b:f2:38:b9:4b:ff:
3b:61:6d:4f:3e:1b:bd:9c:49:7e:a0:47:5e:c0:e2:97:97:bd:
ac:52:e5:c3:21:a6:df:85:7d:85:dd:38:74:bf:ef:f2:e4:77:
e6:a4:9a:77:97:a2:33:f4:36:2d:7d:56:9e:f8:68:31:88:b6:
8a:0f:bd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:21 2023 by rpki-client on console-fra.rpki-client.org