Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/iPbuFJH43wwctVA9s79IvcQjw7Q.roa
File: iPbuFJH43wwctVA9s79IvcQjw7Q.roa (raw, json)
Hash identifier: KcfcjFzFYh9xvGL9kW08P8CnAYvWV+uM2nrRibYC9v4=
Subject key identifier: 88:F6:EE:14:91:F8:DF:0C:1C:B5:50:3D:B3:BF:48:BD:C4:23:C3:B4
Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial: 01837FDF5F26C1039DBC454FEC0AD00A7379
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/iPbuFJH43wwctVA9s79IvcQjw7Q.roa
Signing time: Tue 27 Sep 2022 16:54:48 +0000
ROA not before: Tue 27 Sep 2022 16:54:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41227
IP address blocks: 87.247.178.0/24 maxlen: 24
87.247.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7f:df:5f:26:c1:03:9d:bc:45:4f:ec:0a:d0:0a:73:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
Validity
Not Before: Sep 27 16:54:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88f6ee1491f8df0c1cb5503db3bf48bdc423c3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:aa:26:0f:7b:3d:16:b2:a3:69:18:fb:8b:
44:20:75:d4:4c:87:bb:98:cd:52:ec:2f:35:76:16:
f3:3a:c2:04:ca:78:bb:77:24:07:d9:1b:e5:a2:ab:
a3:97:0f:2c:32:7d:2f:de:dc:ed:fa:a8:2b:84:ca:
81:21:9c:4d:1e:96:97:03:31:04:54:2e:9c:40:a9:
3d:96:6e:cc:13:c1:ad:6f:bc:6f:f2:a7:27:bc:68:
4d:b7:4f:0d:2f:4e:80:6e:89:31:75:58:2f:29:08:
f4:cb:21:47:6b:d1:75:a7:e6:99:a5:da:d5:3f:6e:
c0:f0:70:7c:2d:cb:d4:b6:a8:7d:43:de:f7:4e:0e:
74:2e:d5:a5:8d:09:1f:20:6e:dc:55:dd:af:57:8a:
e8:81:5a:e7:85:f3:ee:2d:19:bb:9b:f8:85:dd:24:
91:f9:6c:23:66:d1:39:5b:47:35:40:0b:55:34:93:
d9:26:4c:56:eb:93:a7:23:52:97:da:40:63:d0:4f:
83:95:ac:62:53:47:1b:c0:86:60:83:3b:27:2c:bc:
fe:d3:94:f8:0f:fe:65:26:8a:d2:a5:21:eb:f1:86:
d3:7d:f5:55:af:df:ce:02:8f:dd:51:1d:3f:fb:4d:
4c:8f:51:23:db:44:52:0f:f4:d4:21:31:42:2e:d2:
01:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F6:EE:14:91:F8:DF:0C:1C:B5:50:3D:B3:BF:48:BD:C4:23:C3:B4
X509v3 Authority Key Identifier:
keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/iPbuFJH43wwctVA9s79IvcQjw7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.178.0/24
87.247.184.0/21
Signature Algorithm: sha256WithRSAEncryption
92:c3:2b:c4:b1:6c:b8:d6:94:28:37:dd:b3:dd:1b:76:df:8a:
55:cb:46:06:fc:13:27:26:23:f0:1d:78:c0:81:c2:a5:84:0b:
43:3b:6b:aa:4f:36:96:94:92:4c:a9:af:c9:c8:bc:f7:09:5e:
91:b2:a2:29:2c:6d:c5:ce:69:19:3b:b7:79:cd:13:09:da:df:
12:a8:f4:44:60:e8:1c:03:74:a8:37:55:68:be:88:11:4b:d2:
f2:66:08:3c:57:7f:a5:4e:93:0d:9e:f2:22:b8:4b:9a:cd:0e:
30:90:a0:8a:5e:f3:f7:23:75:09:3f:08:8b:8a:69:6f:6d:55:
2b:02:67:89:cb:04:3c:8c:85:bf:8d:3c:0d:d9:f0:11:eb:79:
af:60:55:ed:6c:ca:ec:1a:c4:af:00:eb:0b:1d:f2:f2:42:dc:
8a:a8:ac:e7:d6:14:7f:db:27:52:ea:cb:ca:22:35:d1:c2:da:
9e:49:bc:d8:43:6a:bc:e3:7e:0c:e3:b6:a0:42:03:e0:48:cd:
d2:f8:56:55:68:c5:0a:2d:6c:e6:ef:96:98:80:95:74:74:d5:
e4:c7:d1:e8:e1:a5:25:1d:bb:ae:b4:7a:b8:bf:0c:33:3b:3a:
93:1f:9d:45:79:35:2d:d6:73:cf:a9:89:64:66:72:5c:2f:15:
7e:f1:37:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:22:25 2025 by rpki-client