Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/s5ifFpra_6-j25sJPoeHdGn6wBo.roa
File: s5ifFpra_6-j25sJPoeHdGn6wBo.roa (raw, json)
Hash identifier: fmDtuaPX1t2Lh8U3n6eKzV9mqVwn7Kog6z0zeUgcuGI=
Subject key identifier: B3:98:9F:16:9A:DA:FF:AF:A3:DB:9B:09:3E:87:87:74:69:FA:C0:1A
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 37A36C21
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/s5ifFpra_6-j25sJPoeHdGn6wBo.roa
Signing time: Sat 01 Jan 2022 08:55:48 +0000
ROA not before: Sat 01 Jan 2022 08:55:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49847
IP address blocks: 87.107.155.0/24 maxlen: 24
87.107.154.0/24 maxlen: 24
87.107.157.0/24 maxlen: 24
87.107.156.0/24 maxlen: 24
87.107.158.0/24 maxlen: 24
87.107.159.0/24 maxlen: 24
87.107.164.0/24 maxlen: 24
87.107.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933456929 (0x37a36c21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 08:55:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3989f169adaffafa3db9b093e87877469fac01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:27:bb:b4:e5:f5:c4:1d:25:a5:b7:3d:39:
1c:08:97:5e:b2:39:0a:59:66:8a:4c:23:f3:28:7f:
b0:dc:08:03:62:0a:7a:79:58:bc:8a:4c:af:47:07:
d1:a2:c1:4a:d4:fa:65:d4:71:d2:83:15:85:bf:9c:
0b:bf:96:1a:5c:43:2c:39:d4:03:1a:e7:a4:58:ec:
5e:52:87:12:81:2a:9c:28:f4:d8:e8:26:d1:e7:0e:
7b:23:e8:dd:91:bf:af:c4:6e:32:f2:90:f1:a5:01:
4e:79:69:d8:33:85:a1:57:f5:68:f0:89:b6:3d:20:
83:df:65:fe:6f:89:31:f0:52:f3:96:33:92:31:13:
73:1d:de:7e:0f:c0:03:3b:57:cf:00:e6:d7:65:44:
4a:a6:a6:77:f9:13:4b:68:f8:c0:99:88:b9:eb:c1:
79:25:91:7b:3a:95:b5:77:d9:88:10:07:27:98:e0:
d9:fb:c6:aa:c7:bf:6f:bc:cc:9b:f7:98:49:2e:1f:
63:57:25:dd:f9:6c:c9:96:4c:52:f6:7f:66:82:8d:
e1:3d:fd:4a:93:d9:ab:49:ce:41:68:24:66:e9:69:
b4:fa:63:67:de:3c:08:01:b8:dc:9b:6e:0a:09:bb:
6e:a5:34:72:41:5a:c5:d4:c4:c7:71:b4:8d:34:ba:
36:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:98:9F:16:9A:DA:FF:AF:A3:DB:9B:09:3E:87:87:74:69:FA:C0:1A
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/s5ifFpra_6-j25sJPoeHdGn6wBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.154.0-87.107.159.255
87.107.164.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:84:68:98:72:64:02:eb:5c:b0:b5:01:fa:9c:7e:8d:2b:7a:
5a:68:c4:40:90:ed:eb:14:72:e3:a3:62:98:dd:21:98:ea:d8:
35:8f:20:04:64:7d:57:8b:a9:c6:70:17:65:fc:21:ac:5c:4b:
b7:19:bc:8e:1e:c6:63:c8:18:77:ec:66:21:06:60:d0:2d:3f:
ec:a7:ec:ac:f1:3c:d0:8e:e0:af:5a:9a:e4:68:da:b8:42:c6:
8f:8e:ca:34:c7:1a:0d:cc:36:9f:57:7a:bf:b0:80:9b:1a:bf:
46:9f:3f:54:04:78:ca:35:66:ec:d8:7a:a6:8d:8d:69:f5:db:
3b:1a:30:dd:5d:50:e4:4c:50:b2:70:1c:37:5c:85:fd:37:02:
0c:83:35:83:1f:bc:ec:2e:80:01:4d:65:8e:45:66:ab:e9:5b:
bb:85:6e:93:ba:77:f8:4a:7c:6b:06:8e:70:84:80:03:8a:89:
86:5f:73:fc:55:94:58:1d:22:75:34:50:99:33:04:6f:27:e5:
e1:87:7b:52:d8:f1:47:4c:46:2e:c4:bd:e2:91:fb:fe:3f:c1:
18:16:cf:3e:cc:f5:26:b7:05:a5:f6:a4:ca:dd:ea:c2:31:b8:
4b:dc:62:04:1b:cb:62:c4:93:34:34:c8:e4:05:22:b8:69:0d:
56:9b:ed:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:56 2024 by rpki-client on console-fra.rpki-client.org