Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/mS1E0WoAAlcZP0ZdzjdP5UgwQkI.roa
File: mS1E0WoAAlcZP0ZdzjdP5UgwQkI.roa (raw, json)
Hash identifier: lAeaYhmfv81JeaK9wJYxsdaLC9/yXiekuvMXy3dcr/s=
Subject key identifier: 99:2D:44:D1:6A:00:02:57:19:3F:46:5D:CE:37:4F:E5:48:30:42:42
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 37AE796E
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/mS1E0WoAAlcZP0ZdzjdP5UgwQkI.roa
Signing time: Sat 01 Jan 2022 08:55:52 +0000
ROA not before: Sat 01 Jan 2022 08:55:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204544
IP address blocks: 87.107.152.0/23 maxlen: 23
87.107.166.0/23 maxlen: 23
87.107.174.0/23 maxlen: 23
87.107.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 934181230 (0x37ae796e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 08:55:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=992d44d16a000257193f465dce374fe548304242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:b3:56:95:23:e4:45:de:42:a4:0f:d7:bf:
e7:9a:42:17:fc:2e:66:40:d2:52:f5:88:a6:18:36:
fc:0c:b8:53:60:89:37:39:af:81:bd:50:fe:95:07:
28:9b:1f:9e:47:61:c8:20:f8:d9:71:9f:c9:6e:f4:
1f:9a:d5:70:7c:21:c9:36:ce:fb:1a:7e:8b:8e:4a:
8f:88:2c:bf:af:58:f0:03:1c:ef:57:bc:07:7f:c8:
4e:ef:b9:63:7b:9a:26:04:d2:43:f5:a8:6a:4b:bb:
e9:16:61:1d:c9:7c:00:c8:60:66:54:15:9d:25:13:
35:9b:d9:63:9e:08:94:44:cb:fe:cd:41:83:f4:33:
80:6a:c9:52:a2:74:15:55:91:4c:1e:fa:29:be:76:
8a:53:1f:01:e9:36:54:a7:4a:f0:93:d5:0d:ca:51:
82:62:80:29:cc:28:70:86:36:02:e6:3e:41:ab:c2:
97:dc:27:e4:df:87:e3:ed:c1:09:1f:9f:58:b0:10:
01:63:8a:19:f2:5b:66:cd:2a:3f:b4:c9:89:1e:0f:
03:b7:bd:92:4d:a6:02:75:37:9e:fb:09:63:16:74:
a0:4f:42:e0:61:21:9f:f6:a8:ee:0e:9c:45:8e:a0:
21:77:05:7f:05:a9:8a:f4:27:de:88:25:3b:89:cc:
bd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2D:44:D1:6A:00:02:57:19:3F:46:5D:CE:37:4F:E5:48:30:42:42
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/mS1E0WoAAlcZP0ZdzjdP5UgwQkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.144.0/24
87.107.152.0/23
87.107.166.0/23
87.107.174.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:0f:d6:3a:f2:a1:37:11:55:f0:4e:7b:94:8c:a3:ef:7c:36:
13:87:4b:5d:d6:74:68:f7:35:73:d8:57:84:f4:fc:dd:98:e8:
b6:3e:26:12:10:80:94:13:c2:d2:ae:89:0f:81:f4:ff:74:13:
ab:10:4a:59:fe:b9:b2:98:3e:e3:a7:51:87:d3:9f:81:c0:d0:
2d:b0:94:26:42:47:22:fd:14:20:86:28:7c:76:1d:bc:5b:01:
0e:18:ed:55:11:2d:a6:72:fc:25:52:bb:b2:54:6c:86:60:de:
e9:d2:ce:cb:6a:60:8f:6b:97:8f:cc:27:7c:64:e3:67:c8:0a:
7e:e9:8f:34:e2:9e:e6:a4:c9:c8:26:d5:79:aa:eb:69:d6:10:
9b:8b:73:fe:f6:39:59:5c:b2:7f:e3:e7:f8:05:7c:97:ac:5e:
40:3e:d0:50:40:8d:2e:1d:ef:ac:64:d2:e8:3b:e3:9c:ec:56:
90:b5:6f:17:36:39:95:a2:95:21:e4:64:b0:65:8e:ae:b6:4b:
bd:ab:ed:fa:17:36:41:3f:d4:c0:95:5c:0d:1f:91:42:f6:1c:
c8:96:e4:a9:83:05:9b:2b:41:1a:e0:a2:e1:24:df:75:11:d6:
c6:46:41:de:43:e5:db:25:50:3c:40:61:20:02:46:a6:4b:b1:
41:c9:ff:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:39 2023 by rpki-client on console-fra.rpki-client.org