Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/MySawq6M9y2fEzDGi_In4pvv4JQ.roa
File: MySawq6M9y2fEzDGi_In4pvv4JQ.roa (raw, json)
Hash identifier: /L8AVFw+R2PVYUv2v4ZVdT/KN00l3HPA45sctcxV804=
Subject key identifier: 33:24:9A:C2:AE:8C:F7:2D:9F:13:30:C6:8B:F2:27:E2:9B:EF:E0:94
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 0183FAC0072C6F177774AAF0E479BBEC98C9
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/MySawq6M9y2fEzDGi_In4pvv4JQ.roa
Signing time: Fri 21 Oct 2022 13:33:52 +0000
ROA not before: Fri 21 Oct 2022 13:33:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200370
IP address blocks: 87.107.0.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fa:c0:07:2c:6f:17:77:74:aa:f0:e4:79:bb:ec:98:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Oct 21 13:33:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33249ac2ae8cf72d9f1330c68bf227e29befe094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fa:25:1f:ee:13:6b:88:03:d8:ae:f1:84:06:
94:3c:b7:3d:22:27:31:74:38:da:38:5b:2d:59:19:
cb:dd:e9:7a:1f:46:4b:6b:28:ee:6e:ce:d2:d3:c5:
e0:59:29:4d:c5:8d:0a:0a:8b:7e:37:61:10:a7:9a:
57:08:45:3d:94:ad:a6:3f:ef:b8:b3:47:19:63:65:
e1:b3:92:38:11:74:a2:df:c0:f6:99:bf:98:e0:85:
8b:34:fd:6a:fa:fd:b1:b3:87:53:f3:70:0f:d3:9e:
3d:ee:ae:a2:58:00:dd:5a:fe:6c:ff:ac:2f:e6:e3:
75:b0:87:3e:5f:05:fe:fc:a9:f7:36:18:28:b7:ba:
4e:d2:da:55:26:6e:33:aa:c9:1e:1d:18:59:3c:f6:
ba:c4:66:80:75:57:cb:ad:ea:df:5d:56:66:b7:67:
4f:e4:c3:1f:82:d3:aa:df:c7:ea:8e:05:5a:e7:d0:
c5:d4:79:e8:f2:97:df:20:c2:ed:b1:a5:4e:16:40:
40:f4:ff:40:98:25:2f:bb:cb:35:3c:a8:98:32:50:
37:65:68:58:c4:29:56:a1:31:94:67:b4:c6:6e:f4:
82:da:05:d4:28:f9:21:4a:c4:9d:f5:8b:41:12:89:
4f:8c:8c:e5:23:a3:8f:fc:3d:60:a3:06:36:95:4b:
74:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:24:9A:C2:AE:8C:F7:2D:9F:13:30:C6:8B:F2:27:E2:9B:EF:E0:94
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/MySawq6M9y2fEzDGi_In4pvv4JQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.0.0/21
Signature Algorithm: sha256WithRSAEncryption
48:da:ee:a2:6b:45:b5:35:2a:4a:36:20:bb:e2:cc:be:ad:c3:
e8:95:34:59:cf:f0:4c:71:e7:10:2d:00:bb:43:3e:a7:e9:dd:
2e:f8:44:c7:d8:d9:d6:f1:72:fc:7d:d8:6a:9a:c6:c5:8f:fb:
7b:c3:fd:87:f2:fb:66:1e:2a:a1:2d:b8:1b:be:64:53:cc:81:
fb:5b:0e:c5:72:5a:b3:6e:29:1f:2b:f9:48:e6:0f:f0:cb:cd:
a3:c6:35:45:1b:aa:9a:b7:97:49:ae:2b:52:67:75:22:3a:cd:
e8:e9:c4:53:ee:e8:61:cd:19:73:e4:f3:3e:82:1b:32:57:b3:
e5:e7:2f:22:66:64:44:67:ca:d4:77:17:6c:3d:74:c1:df:48:
a4:80:eb:7f:d8:4b:ff:76:5e:a0:ba:2a:ea:fc:3f:fa:37:79:
ed:69:71:55:90:9b:77:52:d1:04:95:a2:4a:6d:b5:58:30:e3:
30:bf:51:1f:f3:95:1a:19:92:3f:b3:68:83:a3:6f:a5:56:02:
28:e9:bd:8b:d6:bb:e8:7d:ed:74:8d:fa:34:1e:62:e9:a5:04:
18:a9:d1:04:1f:ee:49:bc:99:95:ab:90:42:49:4e:34:69:e4:
ce:65:ec:f1:4e:a1:63:45:8e:8a:78:b3:a9:4b:e2:d6:20:17:
ae:95:37:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-ams.rpki-client.org