Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Dr9zqXRYkf6Oe98TuFmiGI4tiCo.roa
File: Dr9zqXRYkf6Oe98TuFmiGI4tiCo.roa (raw, json)
Hash identifier: rC5Ojgg/ADEBi09ZEjrnmTsq0p6K1qJnz1VA/3yjDDs=
Subject key identifier: 0E:BF:73:A9:74:58:91:FE:8E:7B:DF:13:B8:59:A2:18:8E:2D:88:2A
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0183CB7A5851472D0170FE01AAF7B6DAF740
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Dr9zqXRYkf6Oe98TuFmiGI4tiCo.roa
Signing time: Wed 12 Oct 2022 09:15:36 +0000
ROA not before: Wed 12 Oct 2022 09:15:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208161
IP address blocks: 87.107.146.0/24 maxlen: 24
87.107.147.0/24 maxlen: 24
87.107.146.0/23 maxlen: 23
87.107.164.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cb:7a:58:51:47:2d:01:70:fe:01:aa:f7:b6:da:f7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Oct 12 09:15:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ebf73a9745891fe8e7bdf13b859a2188e2d882a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c5:96:a5:e2:a5:a2:55:2a:da:06:aa:0a:f2:
bd:77:68:93:f9:82:4d:0a:6b:b9:80:2d:01:e2:6c:
39:e7:45:20:ea:a5:3e:f1:74:5b:a6:ea:ca:09:2f:
49:c0:42:2b:62:0a:64:ce:07:96:ef:5a:c1:0a:58:
12:24:90:8e:fb:06:c1:7d:93:8f:44:ab:33:c1:6f:
1e:fb:70:99:39:ec:72:d8:aa:02:44:a6:07:3f:12:
9a:c9:3f:43:a3:d2:2e:fa:ab:49:a0:d7:13:ea:73:
fc:4a:7f:3f:ca:b1:c0:f9:ba:93:e4:4b:36:a6:9d:
6f:3b:73:e0:f6:e4:df:1c:f5:7b:55:cd:71:71:20:
b3:f8:68:f8:b3:57:af:6d:6b:9a:b4:71:45:b8:67:
2b:ab:11:e2:c5:06:3b:b7:c0:cd:d0:7b:ac:ce:c1:
50:8c:f6:29:54:5f:f9:39:06:bf:9f:4f:e4:1e:6e:
f2:7e:f3:68:7b:69:b4:ad:da:97:9b:e2:4e:a4:70:
bf:2c:78:82:bb:33:48:7e:8c:89:d8:3c:cc:cf:27:
1b:99:8b:c6:6a:3b:b7:6f:56:16:f1:fb:a4:35:af:
32:3a:06:6a:a6:20:e1:ab:57:94:a0:6c:e1:d6:83:
59:9c:71:5a:5d:d5:1e:2c:d3:6c:15:7b:ff:0d:cb:
86:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BF:73:A9:74:58:91:FE:8E:7B:DF:13:B8:59:A2:18:8E:2D:88:2A
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Dr9zqXRYkf6Oe98TuFmiGI4tiCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.146.0/23
87.107.164.0/23
Signature Algorithm: sha256WithRSAEncryption
40:fe:12:a0:5f:3f:64:bb:95:47:4a:35:10:03:4f:a3:df:5a:
99:67:df:db:f5:a1:cf:65:aa:11:dc:55:ff:b6:34:54:a3:3f:
a8:80:ce:fe:5e:49:1b:ef:90:cc:69:ee:e9:16:2a:47:81:f9:
be:f2:24:af:a0:da:5c:d3:e2:c3:36:dd:06:78:ba:fa:97:c0:
14:fa:ff:ec:a6:4c:11:e6:33:c6:47:3e:6c:42:65:c2:73:4c:
79:52:82:96:d0:85:bd:49:ab:89:23:a1:c6:34:59:e4:8c:e2:
d0:21:40:01:1c:4b:d8:6e:52:d1:29:69:de:8c:f2:95:75:25:
91:b2:4d:f0:e2:f2:06:57:af:63:d8:92:87:49:01:86:01:66:
0f:5d:6f:18:96:9a:0f:28:a1:a5:7a:76:54:93:6a:3d:4d:51:
57:88:d8:eb:36:cb:cb:f5:59:86:d8:3a:81:a7:24:da:d7:84:
3a:d2:fb:30:a7:b1:dd:45:8c:c8:8e:7d:46:1d:22:19:8a:ea:
54:9d:23:ce:46:8e:24:d0:56:dd:a5:4e:5e:c7:f7:b6:9a:09:
15:b8:3d:fe:74:47:e7:44:dc:7e:f8:6c:db:00:3e:90:83:d9:
73:13:c9:fd:b3:26:92:7f:d8:96:40:05:0c:d7:de:93:bf:80:
64:04:c5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:56 2024 by rpki-client on console-fra.rpki-client.org