Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/mof8WzJhW7FIztTupCzr9zTF4no.roa
File: mof8WzJhW7FIztTupCzr9zTF4no.roa (raw, json)
Hash identifier: UnBiSbuo+Quabj3ujdqL3Cw5dk0Zb54ptzRg4TgobUQ=
Subject key identifier: 9A:87:FC:5B:32:61:5B:B1:48:CE:D4:EE:A4:2C:EB:F7:34:C5:E2:7A
Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e
Certificate serial: 0187ECF2262AB03BF7C713EF35297AFC9443
Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/mof8WzJhW7FIztTupCzr9zTF4no.roa
Signing time: Fri 05 May 2023 17:25:05 +0000
ROA not before: Fri 05 May 2023 17:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41227
IP address blocks: 87.247.170.0/23 maxlen: 24
87.247.178.0/24 maxlen: 24
87.247.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ec:f2:26:2a:b0:3b:f7:c7:13:ef:35:29:7a:fc:94:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e
Validity
Not Before: May 5 17:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a87fc5b32615bb148ced4eea42cebf734c5e27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ae:89:cb:2c:13:10:a4:34:ea:e1:3a:60:17:
f9:4c:02:1a:ec:b5:de:8f:93:00:92:2d:7a:5c:9a:
1c:f4:56:2d:d3:de:74:05:93:ff:1c:66:42:23:b5:
be:19:5a:62:4e:05:9d:18:d1:ee:5a:40:0b:ec:d1:
89:3d:a1:89:b3:1d:29:91:74:9e:59:76:ec:3d:2a:
4a:b2:a5:27:c3:cc:8e:ba:a4:2c:b7:72:0c:a7:9b:
f8:37:1f:20:be:48:d5:e2:85:48:19:53:d8:8e:06:
23:a5:14:38:1e:0e:f2:42:2f:5a:bb:30:a7:ea:e0:
95:c9:e4:77:37:f3:fb:8e:96:8b:11:1b:6a:25:66:
d6:91:b0:b7:9a:d3:a2:11:40:b5:ef:2b:32:61:53:
b6:83:97:92:40:7b:a5:69:b3:05:45:42:99:bc:fd:
e1:fe:7c:f7:45:a6:77:9e:33:73:6f:31:2d:43:af:
a4:87:36:8d:46:9e:e5:ce:14:44:2e:27:93:76:4e:
fd:db:01:ed:64:dd:51:2c:4c:01:c9:bd:ea:55:5d:
bb:52:18:ee:4b:ba:e6:45:30:8b:6b:be:54:c7:e7:
5d:d7:74:95:aa:d8:2e:a5:d7:a4:75:52:d3:40:3a:
ef:a0:15:cf:72:23:39:b0:a2:0f:d3:49:06:6f:5c:
83:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:87:FC:5B:32:61:5B:B1:48:CE:D4:EE:A4:2C:EB:F7:34:C5:E2:7A
X509v3 Authority Key Identifier:
keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/mof8WzJhW7FIztTupCzr9zTF4no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.170.0/23
87.247.178.0/24
87.247.184.0/21
Signature Algorithm: sha256WithRSAEncryption
94:19:04:54:fa:53:b1:55:6d:bf:d4:04:c8:55:8a:23:42:07:
6a:29:3f:68:52:a2:b9:59:60:2b:b0:74:bf:a9:d3:58:b1:4e:
5b:0d:9e:22:c8:9a:9c:0c:a7:dd:71:d8:dd:7e:97:b5:af:a2:
f3:a4:2d:8a:21:ea:52:bc:93:9f:80:5b:c5:41:36:d0:40:2b:
3f:c4:c4:1e:06:ea:f2:f0:c2:c2:0d:3c:b6:16:4b:cc:20:cb:
a8:a7:03:37:e3:a1:f2:87:ea:6c:3d:0c:79:a9:ac:3f:82:bb:
1d:ac:8a:cc:42:b0:14:48:74:09:a4:12:8c:91:4b:31:dd:9a:
cc:86:68:11:6a:91:a8:22:51:1a:e6:18:96:fb:45:b1:9a:e0:
66:32:86:87:3c:53:f7:26:56:ed:3e:68:ab:99:d7:d9:14:6c:
18:bf:df:90:f0:3c:f5:14:d5:59:c3:7e:88:c7:19:8a:24:fd:
d1:f3:e0:a1:c1:dd:ce:cf:e1:a0:07:0f:34:13:57:c8:5c:68:
54:d1:68:21:8a:6e:51:c4:7e:49:c8:37:f1:95:97:66:df:46:
f3:b2:73:73:96:d7:73:3c:e2:92:0f:f0:f6:7a:03:ea:6d:fe:
dd:6f:cd:ba:85:85:ce:df:0d:7a:ce:81:5d:b4:6b:6d:e3:83:
27:c3:db:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:22:25 2025 by rpki-client