Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/_Ej-qQ0rm7dpMVicyBktrtzQfgo.roa
File: _Ej-qQ0rm7dpMVicyBktrtzQfgo.roa (raw, json)
Hash identifier: pXl+Q0GT6OvncjNee8zKn1ArDww/t7jhUgoDLmnoHw8=
Subject key identifier: FC:48:FE:A9:0D:2B:9B:B7:69:31:58:9C:C8:19:2D:AE:DC:D0:7E:0A
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 10555C6C
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/_Ej-qQ0rm7dpMVicyBktrtzQfgo.roa
Signing time: Mon 07 Mar 2022 08:12:08 +0000
ROA not before: Mon 07 Mar 2022 08:12:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 87.238.140.0/24 maxlen: 24
87.238.140.0/22 maxlen: 24
2a06:56c1::/32 maxlen: 48
2a06:56c1::/40 maxlen: 48
2a06:56c2::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274029676 (0x10555c6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Mar 7 08:12:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc48fea90d2b9bb76931589cc8192daedcd07e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:0c:cc:6a:fd:52:bc:fa:6d:07:9b:ce:3e:
10:67:0b:e4:b4:c5:5f:3c:e6:a4:e8:0a:01:b1:48:
25:f5:b6:30:e0:f7:9c:d3:f6:0d:94:92:4e:4a:c8:
0c:a0:bb:ef:ff:f4:ee:7f:e6:de:dc:da:9b:7c:70:
38:0f:22:c9:65:ce:85:d3:b0:e5:a0:1a:e2:f4:ba:
de:e7:2b:5b:d1:03:39:c7:ed:aa:e0:b2:dc:6d:aa:
97:4e:b0:fb:6f:d1:b4:33:d4:5a:47:5c:d0:9a:95:
14:00:a0:4b:52:40:6c:03:ab:ff:b2:52:85:02:63:
df:6b:df:90:1d:52:1e:33:cc:23:9b:07:c2:ec:a6:
76:c0:38:9b:24:63:27:e8:5c:14:99:b4:9a:5f:79:
af:e3:76:a0:51:a0:a0:b7:6b:b7:dd:a0:13:34:b3:
80:27:83:d8:97:53:86:8b:09:d7:96:cd:a5:3a:a1:
fa:b5:a5:1a:c6:98:93:7b:18:c9:9d:e9:e0:ba:b3:
a0:fc:72:e6:38:34:50:51:d8:cf:a9:81:7f:88:59:
a7:24:41:d8:2e:a8:0f:62:71:a9:49:ba:ba:2a:12:
47:22:28:e3:40:bb:3a:a6:0d:28:07:7d:be:0b:89:
c0:8c:a9:3e:6b:63:fc:f2:cb:f3:e5:eb:d0:b2:f6:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:48:FE:A9:0D:2B:9B:B7:69:31:58:9C:C8:19:2D:AE:DC:D0:7E:0A
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/_Ej-qQ0rm7dpMVicyBktrtzQfgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.140.0/22
IPv6:
2a06:56c1::-2a06:56c2:ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
40:3f:8d:e6:82:88:90:33:5a:e7:a8:41:a4:59:c2:db:22:cc:
62:a6:ed:7d:d7:e2:25:36:14:40:34:9a:11:dc:e9:ad:d5:dd:
ac:e3:8a:77:0b:a2:33:b8:4d:19:19:81:8d:fa:13:ca:59:c7:
9d:19:cd:aa:0c:a7:21:68:25:78:2c:7d:13:13:63:ae:3f:3a:
6d:d2:9e:17:72:80:a0:4b:18:c7:0d:de:a6:9d:54:7a:2c:63:
c8:2d:76:e9:4c:40:a4:b3:5b:2b:df:c9:b2:04:cb:5a:ef:3a:
a8:4e:7c:bd:8d:f0:52:23:95:5c:72:ed:c7:2b:39:e8:e2:db:
9d:3d:cf:19:ee:b4:6b:8e:a2:c2:41:12:85:2b:6c:35:ed:af:
92:cd:32:b5:75:4f:ab:fb:dc:88:28:3d:e3:83:a7:2a:e9:f1:
9c:01:eb:0f:03:12:16:4c:8a:0c:36:26:88:94:1a:0d:2f:e4:
09:62:71:cd:3e:11:6f:81:0a:f3:06:07:b9:70:1b:e6:e0:88:
6d:7c:23:08:d7:a4:3f:ec:36:14:25:82:04:46:86:27:4c:b2:
91:29:46:f9:88:48:1a:7d:75:36:2d:e2:d3:2b:c6:56:9e:23:
1f:51:1a:98:97:12:62:58:fb:9a:22:47:80:44:57:5f:40:9f:
47:f1:a4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:35 2023 by rpki-client on console-fra.rpki-client.org