Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/VuSrZ3YgGQ8MyKF7EYH8SkT_IEI.roa
File: VuSrZ3YgGQ8MyKF7EYH8SkT_IEI.roa (raw, json)
Hash identifier: vs8dO8VxEYe1S//5Vr8sTVBw69VsCtjbMmcTQnpTTzU=
Subject key identifier: 56:E4:AB:67:76:20:19:0F:0C:C8:A1:7B:11:81:FC:4A:44:FF:20:42
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 37A16B43
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/VuSrZ3YgGQ8MyKF7EYH8SkT_IEI.roa
Signing time: Sat 01 Jan 2022 08:55:46 +0000
ROA not before: Sat 01 Jan 2022 08:55:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44841
IP address blocks: 87.107.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933325635 (0x37a16b43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 08:55:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56e4ab677620190f0cc8a17b1181fc4a44ff2042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4f:04:4c:3b:a9:60:e8:e1:ec:94:a0:ca:18:
77:38:fd:ca:8b:ed:16:3b:8a:5f:9c:f2:b1:97:e2:
b1:f2:15:76:4b:50:ff:c9:55:85:3f:1b:23:60:fc:
0e:1c:b2:67:3d:6f:bb:70:ea:1d:8b:58:84:7a:05:
1b:97:94:0e:13:0c:e9:0b:8b:e7:2b:3e:71:5c:23:
a1:fe:9e:05:f6:fa:b3:6d:ae:4c:22:e2:ab:01:43:
f3:a9:8c:84:bb:07:86:84:ac:6f:0a:98:44:9b:77:
b9:28:70:8e:4a:ea:03:bb:0b:7d:41:11:56:7f:c7:
5f:7a:8c:b1:26:40:eb:fb:c6:a9:bc:b3:9b:84:00:
45:55:71:15:9d:3d:11:09:88:49:66:50:eb:17:fe:
2c:bb:ca:83:b8:88:b5:b1:f8:8a:d4:20:cd:37:05:
61:50:7e:6b:0c:ea:a7:c7:28:64:6b:0e:b7:da:81:
cf:cd:34:37:28:d3:da:7f:b9:44:6f:f4:7e:ca:5e:
94:2a:60:4e:fd:10:9b:06:d1:7d:b1:40:d4:53:ef:
06:ff:c4:42:69:4c:0b:60:ba:e0:3b:a4:3a:1c:40:
36:b8:d8:05:0b:c7:26:f9:8a:a1:3e:aa:72:f2:b8:
77:e7:81:b0:e7:af:a3:6f:81:6a:8f:5a:47:8a:cf:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E4:AB:67:76:20:19:0F:0C:C8:A1:7B:11:81:FC:4A:44:FF:20:42
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/VuSrZ3YgGQ8MyKF7EYH8SkT_IEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.101.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ba:bc:a7:17:34:20:58:b1:cc:51:2f:55:55:14:ab:a5:03:
84:04:09:5b:cb:c8:09:1a:40:d5:4d:db:9c:ba:29:d4:a6:fc:
8c:1f:b9:3c:09:bb:d6:d5:22:1c:ef:50:a3:6b:7a:67:58:98:
c8:2f:c6:1f:a6:68:49:47:b5:0a:ed:83:d7:d0:8f:49:05:8e:
dd:a9:b8:55:54:5c:a1:4b:d0:a7:c8:a1:a6:47:dd:ae:b6:ed:
ab:5c:80:99:27:ba:2e:4d:bc:93:91:d6:c5:a3:e0:4b:3e:63:
70:8e:a4:70:d5:a5:d6:b4:68:0c:e0:b0:25:38:65:ef:d5:a7:
5c:7d:74:d9:75:cc:6f:a8:a3:db:cd:5e:87:37:79:28:c6:e8:
59:d0:9f:76:94:94:93:79:d4:e1:8a:dd:1c:ba:3c:0a:ad:d7:
52:6d:51:c6:a6:36:93:7f:45:ec:61:09:e7:59:53:d0:78:72:
f8:48:6a:e9:af:9c:22:08:59:f6:7d:41:0b:31:9f:5c:f9:69:
8c:ff:55:64:96:76:73:cf:a5:40:5f:05:89:6f:50:7f:bf:14:
04:8f:01:b1:03:f4:94:04:7e:96:3b:b2:e2:6a:a4:5b:bc:df:
ee:4d:de:d4:de:a6:7c:d7:93:aa:e2:ce:bb:03:f1:f5:84:23:
05:41:11:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-fra.rpki-client.org