Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1XNXVx4t_Vm8sVURsE4__Thuv4I.roa
File: 1XNXVx4t_Vm8sVURsE4__Thuv4I.roa (raw, json)
Hash identifier: WK8P6Cd83T+5eSGhIFsgVV0bhFBpEy+6GhkYcuFiJnc=
Subject key identifier: D5:73:57:57:1E:2D:FD:59:BC:B1:55:11:B0:4E:3F:FD:38:6E:BF:82
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0183FA9F10B1674A494C5D9DC5AB6A218726
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1XNXVx4t_Vm8sVURsE4__Thuv4I.roa
Signing time: Fri 21 Oct 2022 12:57:51 +0000
ROA not before: Fri 21 Oct 2022 12:57:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208161
IP address blocks: 87.107.146.0/23 maxlen: 24
87.107.164.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fa:9f:10:b1:67:4a:49:4c:5d:9d:c5:ab:6a:21:87:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Oct 21 12:57:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d57357571e2dfd59bcb15511b04e3ffd386ebf82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:33:11:a0:a3:77:03:58:ba:f0:fd:dc:97:
44:e5:0c:6c:40:e5:53:43:bd:41:97:9f:cf:6d:a9:
6d:e7:7c:78:3c:a7:3a:19:e1:ff:83:83:50:e1:7b:
9c:08:a3:00:20:6b:a1:14:83:bd:c6:2e:e2:83:0a:
e7:b1:34:06:05:3b:d9:4f:7f:11:b1:bb:a4:0e:96:
28:d7:d2:df:d1:d1:3f:a3:da:25:01:75:00:7b:57:
d2:c8:63:22:e1:ea:5e:fa:fa:86:30:9e:aa:c2:c1:
ce:c4:e5:42:b8:d0:ca:b8:1b:9d:8c:fc:59:be:f7:
60:57:dd:3b:8e:52:6a:bf:7c:71:d1:fe:2a:eb:36:
bb:8d:8a:b9:be:45:c9:a5:a6:a1:6c:a1:74:b5:b2:
eb:5b:5b:3f:ba:6f:e0:bf:9d:a9:63:f5:f3:04:48:
1e:b5:b3:e1:32:89:fc:29:07:3e:6c:6e:80:a5:7a:
c8:0f:8f:33:a1:fd:9b:37:4c:82:6f:0c:bd:9b:4d:
bd:c0:61:70:60:10:c2:93:2b:4e:d4:c6:28:96:9c:
82:e3:62:37:09:23:a1:ff:99:6d:8d:7e:dd:69:d3:
98:44:6b:82:58:c0:ed:82:a0:e0:86:cc:a2:e2:ba:
92:9e:8d:83:07:39:b3:5b:42:bd:1c:9f:73:86:1b:
2e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:73:57:57:1E:2D:FD:59:BC:B1:55:11:B0:4E:3F:FD:38:6E:BF:82
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1XNXVx4t_Vm8sVURsE4__Thuv4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.146.0/23
87.107.164.0/23
Signature Algorithm: sha256WithRSAEncryption
28:25:3f:29:78:e3:27:ba:c0:30:49:71:79:bf:45:04:6b:21:
f6:4b:02:df:46:83:bd:b7:a4:63:eb:4a:4a:57:cc:ef:b4:6b:
82:bc:f7:d7:57:e5:04:78:9e:fa:1d:53:40:6c:ad:df:87:57:
14:9e:48:73:49:a1:7c:7d:82:af:b5:f0:20:e5:90:fd:e8:54:
87:69:34:34:77:61:91:ed:25:ff:39:a7:b6:0e:07:be:af:13:
41:71:e3:fe:2c:4e:60:d5:62:11:d1:96:51:3b:bb:c8:00:fa:
54:07:95:70:51:25:38:4b:03:49:6d:b2:13:6e:e3:44:40:8d:
9c:37:29:14:3d:49:7c:43:87:10:b2:75:fe:5e:5d:0f:4f:ff:
d3:86:2a:1f:64:e1:f4:58:b9:97:43:5b:49:7c:33:e7:48:5f:
4e:c5:1b:b2:94:38:c7:a2:74:ad:b4:b2:e1:01:83:af:4e:dd:
71:a4:61:23:57:d0:3c:fa:30:32:c7:5b:44:7e:55:e1:16:ac:
e3:f2:96:d0:37:3b:ff:df:99:07:24:23:33:ac:ff:f2:51:8d:
b1:81:3e:7a:5a:5c:07:96:50:05:bb:40:1b:ed:a4:bb:b9:0e:
24:c3:4d:51:78:ff:41:6f:a9:a0:db:05:31:77:86:e7:88:ba:
66:13:51:3c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYP6nxCxZ0pJTF2dxatqIYcmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjIxMDIxMTI1NzUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTczNTc1NzFlMmRmZDU5YmNiMTU1MTFiMDRlM2ZmZDM4NmViZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOQzEaCjdwNYuvD93JdE5QxsQOVT
Q71Bl5/Pbalt53x4PKc6GeH/g4NQ4XucCKMAIGuhFIO9xi7igwrnsTQGBTvZT38R
sbukDpYo19Lf0dE/o9olAXUAe1fSyGMi4epe+vqGMJ6qwsHOxOVCuNDKuBudjPxZ
vvdgV907jlJqv3xx0f4q6za7jYq5vkXJpaahbKF0tbLrW1s/um/gv52pY/XzBEge
tbPhMon8KQc+bG6ApXrID48zof2bN0yCbwy9m029wGFwYBDCkytO1MYolpyC42I3
CSOh/5ltjX7dadOYRGuCWMDtgqDghsyi4rqSno2DBzmzW0K9HJ9zhhsuSQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNVzV1ceLf1ZvLFVEbBOP/04br+CMB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvMVhOWFZ4NHRfVm04c1ZVUnNFNF9fVGh1djRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBV2uSAwQB
V2ukMA0GCSqGSIb3DQEBCwUAA4IBAQAoJT8peOMnusAwSXF5v0UEayH2SwLfRoO9
t6Rj60pKV8zvtGuCvPfXV+UEeJ76HVNAbK3fh1cUnkhzSaF8fYKvtfAg5ZD96FSH
aTQ0d2GR7SX/Oae2Dge+rxNBceP+LE5g1WIR0ZZRO7vIAPpUB5VwUSU4SwNJbbIT
buNEQI2cNykUPUl8Q4cQsnX+Xl0PT//ThiofZOH0WLmXQ1tJfDPnSF9OxRuylDjH
onSttLLhAYOvTt1xpGEjV9A8+jAyx1tEflXhFqzj8pbQNzv/35kHJCMzrP/yUY2x
gT56WlwHllAFu0Ab7aS7uQ4kw01ReP9Bb6mg2wUxd4bniLpmE1E8
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:37 2025 by rpki-client