Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Vq_HHVBXsk5PJQFIWb_8VFo3XJM.roa
File: Vq_HHVBXsk5PJQFIWb_8VFo3XJM.roa (raw, json)
Hash identifier: N7YiJv0Fa5BY6CP12nzqHxXmGVU2sJXqwkMYl4Newfk=
Subject key identifier: 56:AF:C7:1D:50:57:B2:4E:4F:25:01:48:59:BF:FC:54:5A:37:5C:93
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 018457F71FCC8582D670874E750C7565B148
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Vq_HHVBXsk5PJQFIWb_8VFo3XJM.roa
Signing time: Tue 08 Nov 2022 15:58:43 +0000
ROA not before: Tue 08 Nov 2022 15:58:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212063
IP address blocks: 87.107.172.0/24 maxlen: 24
87.107.189.0/24 maxlen: 24
87.107.188.0/23 maxlen: 24
87.107.188.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:57:f7:1f:cc:85:82:d6:70:87:4e:75:0c:75:65:b1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Nov 8 15:58:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56afc71d5057b24e4f25014859bffc545a375c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:24:58:14:49:7e:89:34:58:62:b9:30:c1:28:
b2:18:f9:c8:51:49:4c:90:38:9f:4a:84:cf:2a:cb:
e0:8e:3c:04:b8:20:42:f7:63:ec:de:10:29:63:38:
ae:01:63:d2:c2:0f:d8:24:a4:12:b8:1b:8a:87:04:
89:ca:18:ea:7d:26:0f:14:9b:e9:4f:20:bb:27:1b:
25:ce:8b:a3:ba:72:1b:16:72:80:2d:79:6a:83:2a:
3b:5a:c4:eb:9b:ff:3a:59:d4:23:73:1e:f8:cf:ba:
7e:79:1e:bb:81:78:f1:d1:84:c0:10:69:88:39:b3:
9f:50:c6:ce:75:43:01:4d:31:60:cb:8b:7c:ac:ab:
ff:3d:05:8e:41:1a:3d:5a:e1:da:bd:35:44:1d:e8:
7b:fa:63:5f:0e:77:64:ea:af:08:3f:f1:83:22:97:
b9:63:30:49:fe:a6:40:bc:93:27:6a:c9:f3:83:6b:
f5:76:15:e4:2c:5f:39:11:c8:cd:eb:7f:81:2f:f6:
d8:db:79:1e:af:63:8a:ca:6b:2d:d1:07:1b:5a:17:
ca:9c:77:66:55:6f:59:c9:ac:a2:6a:b8:4f:68:2c:
35:b5:9d:ca:95:56:c8:0d:0a:9e:d2:51:38:b5:26:
46:88:26:88:dc:b6:d8:a8:5f:9c:e4:dc:9b:80:da:
ae:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AF:C7:1D:50:57:B2:4E:4F:25:01:48:59:BF:FC:54:5A:37:5C:93
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/Vq_HHVBXsk5PJQFIWb_8VFo3XJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.172.0/24
87.107.188.0/23
Signature Algorithm: sha256WithRSAEncryption
94:d8:a1:5e:76:2d:55:93:04:16:f7:83:4f:22:3c:fb:8e:39:
18:af:15:bb:9d:ec:e7:30:a9:a1:73:c9:26:6d:5e:38:ae:4b:
36:39:25:b7:bc:60:fb:e1:8d:6b:24:34:5a:0d:7f:40:2c:3b:
03:ab:41:ac:f8:d8:db:30:06:fd:34:fa:be:a3:4c:85:a9:72:
91:38:15:94:3e:54:a5:0d:56:56:d6:56:c6:29:e4:46:c1:c8:
08:53:31:17:b1:fa:a5:3e:82:e5:8f:5d:91:8a:01:fd:b6:41:
97:0b:ad:eb:f0:36:d8:14:7f:f1:2b:ae:eb:eb:86:ad:57:20:
3b:1a:b3:fd:a9:d6:7c:a1:fd:9b:9f:75:bd:63:22:0d:5a:e7:
42:7a:b4:f2:99:32:6c:91:1d:79:1a:f2:12:52:01:5b:fd:84:
cd:f2:c1:45:99:25:6c:1c:ee:42:b5:1d:3d:35:03:17:a0:fe:
e9:c6:15:d4:96:99:f8:8d:17:11:23:9b:7b:b9:00:69:a8:bb:
f8:df:b5:82:59:09:08:0e:a7:a3:04:b1:c2:45:16:c4:03:2c:
a5:02:bf:20:be:8b:15:d6:46:61:60:ad:77:11:2b:9b:14:4c:
e9:fb:75:1b:bc:29:f3:77:f8:88:81:78:7f:ca:d3:e4:56:b9:
2d:65:cd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:56 2024 by rpki-client on console-fra.rpki-client.org