Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/hBrEtnbeSZo39VHn0HfxLtYNkIg.roa
File: hBrEtnbeSZo39VHn0HfxLtYNkIg.roa (raw, json)
Hash identifier: owHBldkbaToX+oVolr7nLRtK8mWm0KLR9g4KuzSrbMQ=
Subject key identifier: 84:1A:C4:B6:76:DE:49:9A:37:F5:51:E7:D0:77:F1:2E:D6:0D:90:88
Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Certificate serial: 0182917C0AB84CD7AF59820BFC52EB1ADB0C
Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/hBrEtnbeSZo39VHn0HfxLtYNkIg.roa
Signing time: Fri 12 Aug 2022 09:56:41 +0000
ROA not before: Fri 12 Aug 2022 09:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 87.247.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:91:7c:0a:b8:4c:d7:af:59:82:0b:fc:52:eb:1a:db:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Validity
Not Before: Aug 12 09:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=841ac4b676de499a37f551e7d077f12ed60d9088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4d:b0:f5:d9:96:87:04:f0:bc:87:e0:bb:af:
0a:09:85:d0:b4:74:9a:5f:6b:2a:96:23:d2:9e:f8:
28:e4:f9:6e:34:1c:9b:d6:b9:e1:3a:55:dd:65:81:
91:12:58:dd:b9:f6:c4:4d:f5:ab:ed:79:14:7d:7e:
5b:c6:29:16:84:2b:49:c8:94:7b:10:22:1a:6e:d4:
9e:55:e5:e4:23:f7:c7:c7:ad:8b:83:8e:aa:33:13:
99:f5:97:ca:7b:f3:55:51:56:a7:8d:a2:f7:b2:37:
0c:c7:10:2b:14:f5:77:25:03:77:87:ab:4e:6a:20:
0d:0d:fa:7b:c4:d9:f8:f6:59:bd:d3:84:89:17:c5:
3c:3c:ff:7c:93:f7:da:86:66:72:e9:e2:df:47:3c:
f1:b4:eb:44:21:94:94:49:e0:2d:a2:da:ab:54:d0:
6e:c5:67:88:e7:29:15:10:25:44:ac:89:b1:37:0d:
41:dd:6a:54:3a:87:e7:08:b5:73:a2:7d:03:d7:03:
11:fc:c4:e3:37:59:86:79:1a:a0:6c:4b:7f:18:23:
fd:f8:23:8c:4c:f2:e0:71:41:c6:91:86:29:7f:30:
b8:32:b8:9c:c4:97:ff:e9:b5:85:85:cd:6a:22:f3:
54:43:3c:91:aa:2a:0e:c4:3b:d5:04:3f:c3:dc:1d:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1A:C4:B6:76:DE:49:9A:37:F5:51:E7:D0:77:F1:2E:D6:0D:90:88
X509v3 Authority Key Identifier:
keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/hBrEtnbeSZo39VHn0HfxLtYNkIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.231.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c3:c4:9c:1d:f5:77:4e:a8:4b:b4:90:2b:c7:24:3b:07:e3:
f4:dc:54:44:61:8c:6c:03:c5:75:56:05:a0:97:b9:d1:5e:a3:
ba:07:b5:4f:bc:75:19:97:35:f6:8d:1f:99:9d:ef:af:d6:0a:
7e:c0:3d:42:d1:60:b4:0e:18:e1:82:bc:2a:ab:bb:1c:42:b2:
20:11:d2:38:f1:af:59:0f:6b:b0:03:51:76:13:7d:8a:5d:8f:
d9:92:84:4b:46:e6:19:fc:61:28:45:e8:67:09:da:de:d6:3f:
f4:95:6a:f0:db:7b:9a:09:0c:90:6f:2e:6a:20:0b:ba:14:0d:
68:d9:73:42:b3:0b:51:ef:03:4a:80:7a:9f:52:92:f1:c0:3d:
2f:4a:c7:4e:5f:2a:23:7a:72:57:d6:41:4b:e8:2d:72:8e:bd:
81:aa:ef:0a:42:20:e2:bc:34:a4:b4:63:b3:c2:67:0f:95:b2:
04:79:b7:91:87:c7:09:95:d3:2c:57:39:91:42:66:85:d6:49:
51:a5:e0:70:9c:ae:29:a9:2b:ad:9a:a9:e3:a8:a8:47:7a:a0:
8b:06:fe:89:95:ab:6c:de:e2:1d:dc:3c:96:39:7d:0b:56:a2:
69:9b:2f:15:ec:d1:96:f5:c5:6f:eb:f6:0b:48:c3:82:41:a6:
a8:3c:39:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:57 2024 by rpki-client on console-fra.rpki-client.org