Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/rxsYbgw-AEFV-xumhPm6j6eKgMs.roa
File: rxsYbgw-AEFV-xumhPm6j6eKgMs.roa (raw, json)
Hash identifier: JTPdT/i+xklnvDDYzza7KJnhtP92vcPvIB+ICU9AvVM=
Subject key identifier: AF:1B:18:6E:0C:3E:00:41:55:FB:1B:A6:84:F9:BA:8F:A7:8A:80:CB
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 379B5B00
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/rxsYbgw-AEFV-xumhPm6j6eKgMs.roa
Signing time: Sat 01 Jan 2022 08:55:43 +0000
ROA not before: Sat 01 Jan 2022 08:55:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16322
IP address blocks: 87.107.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932928256 (0x379b5b00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 08:55:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af1b186e0c3e004155fb1ba684f9ba8fa78a80cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fd:4e:82:38:73:a5:e8:34:1b:22:db:d0:ef:
e4:de:73:24:09:4b:fd:a5:77:59:3a:d6:1a:20:70:
31:82:ac:d1:ef:9c:96:75:e9:31:c6:26:7d:0d:d1:
cf:d8:fa:d7:24:1c:34:9e:2c:56:5a:77:d0:96:c9:
d6:57:31:f0:40:b0:dc:2f:7a:1c:db:f0:1b:13:d9:
3f:4b:f6:45:f0:8d:27:6f:32:52:8e:c7:2e:83:49:
1e:5c:ba:de:6c:d3:ac:62:e2:6e:d2:78:ad:d6:24:
bb:ca:e9:1b:4f:ae:1c:87:11:e9:16:b9:39:fb:de:
19:e5:f6:f8:2e:ad:bc:78:38:b2:ec:41:db:8f:04:
33:c5:19:fd:b9:85:a5:e0:3f:df:68:ec:4b:f4:1a:
b5:e0:04:af:23:72:c0:ce:03:a6:4d:19:fd:99:4d:
f9:d0:f1:78:50:33:73:7e:a0:94:3f:a3:ce:89:ce:
f9:57:48:70:04:eb:ba:58:ad:3b:ee:d1:21:07:66:
dc:bf:cb:12:02:59:2e:4d:e3:5a:b6:f8:6d:50:4f:
57:ea:ea:c2:51:0b:21:44:28:24:a7:19:8c:99:50:
4a:2d:cf:68:fa:d3:20:e4:ab:47:9d:b7:6a:44:91:
9f:b4:23:d4:e2:a7:12:a1:7b:fe:27:c9:07:95:6f:
e6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1B:18:6E:0C:3E:00:41:55:FB:1B:A6:84:F9:BA:8F:A7:8A:80:CB
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/rxsYbgw-AEFV-xumhPm6j6eKgMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.134.0/24
Signature Algorithm: sha256WithRSAEncryption
04:2e:28:60:04:59:ff:d3:50:38:62:1e:39:96:af:ce:0a:ef:
77:45:c7:71:20:2b:ad:ba:17:63:e2:3a:e2:8b:57:58:ba:07:
bc:79:14:35:4e:66:43:cb:bc:85:b9:28:da:e8:6f:56:c3:a1:
7c:35:c6:09:f6:60:a1:0d:1b:b5:a4:0d:11:dd:b2:ca:c3:31:
fc:c2:04:69:c9:1c:a0:31:a9:4a:5e:09:dd:c3:37:f4:e6:16:
43:45:33:6b:d7:1d:71:c1:ba:a9:e0:af:7c:2f:ed:06:79:42:
12:63:99:53:e3:65:39:05:ff:f7:b1:e7:21:bf:d4:05:fd:5e:
f1:4d:52:ce:a1:92:15:e9:68:0c:ec:a1:32:bb:2a:72:2b:3d:
f4:95:b6:38:75:f4:9c:8b:72:a1:51:19:dd:54:4b:e0:f6:9f:
41:59:a2:26:14:37:02:e9:d2:6c:2c:31:bd:4b:24:55:b1:15:
1c:86:22:f1:cb:d3:7f:9a:a4:15:7a:57:3e:33:a0:46:2d:b1:
7e:8b:3b:59:1b:76:01:c1:f5:5d:95:88:ef:a0:09:ca:72:ed:
45:22:2e:71:36:20:1d:59:1e:39:fc:c7:a0:2a:bf:9f:2a:b8:
2e:d2:e0:64:34:8b:ae:09:67:7b:94:a6:c1:a8:56:d2:3f:dd:
71:e0:b2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-ams.rpki-client.org