Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/L9Eew8v0cDTJMkUhJrnRsH1uDW0.roa
File: L9Eew8v0cDTJMkUhJrnRsH1uDW0.roa (raw, json)
Hash identifier: qVoJHKLSctNNbXCc0nLtzCC2rdbi8mStSi4xqrL2mds=
Subject key identifier: 2F:D1:1E:C3:CB:F4:70:34:C9:32:45:21:26:B9:D1:B0:7D:6E:0D:6D
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 37ACA6D4
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/L9Eew8v0cDTJMkUhJrnRsH1uDW0.roa
Signing time: Sat 01 Jan 2022 08:55:51 +0000
ROA not before: Sat 01 Jan 2022 08:55:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62367
IP address blocks: 87.107.134.0/23 maxlen: 23
87.107.135.0/24 maxlen: 24
87.107.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 934061780 (0x37aca6d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 08:55:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fd11ec3cbf47034c932452126b9d1b07d6e0d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:0c:09:3b:9d:b3:3e:63:8c:c4:60:ea:f6:
c3:f5:42:1a:a7:3f:d3:40:c1:fd:55:8f:97:24:25:
75:74:fb:fd:a7:4c:12:8c:18:ec:82:f5:97:9c:93:
89:44:ca:ab:38:e0:6e:dc:3e:02:13:64:2d:8f:19:
b9:46:62:1f:59:f2:3d:6e:40:ad:8c:c9:7f:2a:20:
09:9f:46:c7:40:74:72:e5:4a:83:94:a6:09:e1:85:
fe:ae:6a:c2:f4:7a:b0:84:65:c8:90:f0:48:d6:32:
4c:ee:6e:47:43:32:db:aa:a9:76:78:2d:6d:cb:c0:
19:d6:27:35:9d:ba:82:d4:db:cd:fc:6a:bf:18:18:
67:a9:0a:4f:82:dc:21:76:30:f1:13:b8:c1:28:5a:
3b:7d:e8:b1:8f:ee:ae:af:fe:e4:df:55:f5:c7:35:
6d:c5:46:13:39:b3:16:d2:64:b2:aa:54:b4:e8:dc:
93:b9:1c:4f:64:0b:d4:86:96:15:b5:c0:31:1c:d7:
cf:a3:01:72:eb:fb:4d:5a:59:2e:77:e6:60:03:5c:
79:34:73:3b:8c:ea:aa:93:bd:78:b3:f6:23:fc:8c:
e1:1b:5c:88:51:03:51:e7:92:60:41:b4:9b:5c:2c:
7b:21:70:78:c2:85:4e:f8:be:3c:e3:6c:1a:54:70:
7b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D1:1E:C3:CB:F4:70:34:C9:32:45:21:26:B9:D1:B0:7D:6E:0D:6D
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/L9Eew8v0cDTJMkUhJrnRsH1uDW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.134.0/23
Signature Algorithm: sha256WithRSAEncryption
68:9a:09:e5:3d:fd:77:c4:2a:33:1c:64:da:8b:0b:8b:ab:ff:
95:db:48:ec:e9:ec:af:d5:f8:eb:a1:18:de:90:bf:d2:e2:a1:
a0:3d:e5:09:06:41:57:43:2d:d1:29:c7:55:83:06:19:83:a1:
88:af:df:fc:5d:64:62:42:03:d6:54:a6:82:bc:b2:1e:93:a4:
1c:3e:7e:98:5b:a3:2b:86:1c:e5:78:d0:07:27:bf:44:63:b5:
82:74:3b:20:fb:65:53:63:c4:3b:bc:19:60:4b:f5:72:0e:1c:
00:d3:e5:dc:c9:5e:c6:cd:21:0c:cc:ec:81:b0:e3:4e:df:f1:
fd:3b:b7:fe:cc:be:f1:8e:8c:4b:c3:43:1b:31:b7:73:7e:70:
3e:8d:be:d5:dc:a3:e0:f9:97:f4:fb:af:47:db:52:dd:0f:a5:
99:7c:4d:56:e0:97:b2:98:8e:8c:8b:ef:8f:15:08:2a:f0:2d:
8c:58:8a:5b:ea:a1:dd:ab:28:8f:b2:74:f5:28:e3:db:6f:b8:
5e:83:ce:be:8d:99:79:1a:99:bd:12:00:55:46:77:56:18:09:
94:b4:e5:89:d5:b6:b0:d0:28:0a:94:5d:ed:3e:39:04:ff:cd:
8a:a5:d4:bb:85:3b:f4:0d:ac:b2:9d:72:28:73:24:62:e2:d2:
1d:8b:a5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-fra.rpki-client.org