Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/uNi9TjbXtdOxz6j3_O58I05Xoy0.roa
File: uNi9TjbXtdOxz6j3_O58I05Xoy0.roa (raw, json)
Hash identifier: s1C9SirOmAyEJV7+aOPth5qImBLrY5ndWpAeDfDksM4=
Subject key identifier: B8:D8:BD:4E:36:D7:B5:D3:B1:CF:A8:F7:FC:EE:7C:23:4E:57:A3:2D
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01856F5DB4C28D5D7DF4CD8608D18DB0C987
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/uNi9TjbXtdOxz6j3_O58I05Xoy0.roa
Signing time: Sun 01 Jan 2023 22:04:49 +0000
ROA not before: Sun 01 Jan 2023 22:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43415
IP address blocks: 87.107.80.0/22 maxlen: 22
87.107.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:b4:c2:8d:5d:7d:f4:cd:86:08:d1:8d:b0:c9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 22:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8d8bd4e36d7b5d3b1cfa8f7fcee7c234e57a32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:06:d0:c0:5e:cc:ae:ec:2b:a3:17:78:9c:
b2:50:a1:f1:c5:49:55:dc:89:5a:f1:56:8f:7f:de:
ac:1e:93:17:cb:35:b0:96:d8:dd:9c:a3:32:20:87:
ec:6a:f6:76:d1:45:31:23:e9:2c:f0:a5:c5:a4:41:
6e:e0:65:e1:41:5b:8f:86:22:4c:0a:da:92:6e:f2:
da:3a:1c:14:f1:ee:ef:da:4b:3f:50:ef:0a:f0:7a:
7b:13:97:af:86:65:98:3c:f6:d2:64:ef:c2:00:e4:
49:8d:83:bc:84:01:09:e0:37:ad:0b:12:d9:43:39:
b1:97:8a:f6:b4:b3:74:16:7f:f5:9d:9e:75:37:29:
70:a4:12:86:2c:a4:8b:86:72:cd:fe:a4:36:cb:32:
f5:c2:ee:4c:d4:f2:6d:0b:b2:34:bf:b2:87:31:78:
34:6d:37:ab:13:fe:4a:43:55:04:ac:65:ee:7e:20:
8a:54:ae:b0:0b:6d:ed:9d:99:8a:ae:ff:25:6d:34:
1c:7a:bf:01:82:b2:7a:87:7a:b5:25:38:2e:86:6f:
36:1d:31:9e:b5:40:2b:71:8a:e3:bc:f2:e8:e9:ae:
2e:77:94:e5:8d:89:2d:66:71:48:84:74:58:15:19:
c7:f8:1b:33:43:01:68:0f:e1:1c:c3:ea:50:80:94:
d9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D8:BD:4E:36:D7:B5:D3:B1:CF:A8:F7:FC:EE:7C:23:4E:57:A3:2D
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/uNi9TjbXtdOxz6j3_O58I05Xoy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.80.0/22
87.107.93.0/24
Signature Algorithm: sha256WithRSAEncryption
62:2f:f7:b0:07:46:ec:8e:0b:06:8a:3f:ac:49:6e:3d:62:1f:
23:67:27:3b:a6:05:2a:c9:4e:b2:53:a8:cf:52:e8:65:7f:4a:
cb:39:b2:64:e5:c1:71:8b:6a:42:df:82:50:ad:b4:b5:fc:2f:
92:05:91:3e:6a:65:8f:e3:12:a8:b4:b9:30:f2:79:f7:8c:f2:
07:84:7e:48:73:88:41:49:bd:d2:1c:a6:fb:89:30:47:91:06:
4e:af:60:a0:8e:48:e7:72:2e:6c:20:b7:f8:77:fa:b8:3f:03:
b6:42:a2:b3:74:32:ef:b0:c4:7e:b5:4b:e8:e5:73:45:96:b7:
aa:77:b7:d4:df:dd:45:c3:03:ed:fb:bd:04:bf:b3:0e:c7:f9:
1c:d9:53:ab:7e:4e:21:b2:dc:48:f0:ae:b4:e1:06:50:d4:4f:
86:e3:38:77:08:d6:87:45:e0:d8:db:ab:6e:fb:e4:77:47:3a:
99:32:d0:2f:52:a6:58:e5:b4:63:2c:38:cc:0d:36:58:57:88:
76:3c:fa:c7:72:bd:f8:f1:7d:22:25:75:03:f3:d4:e4:4d:fe:
2b:28:2e:88:e3:74:c5:25:8f:df:ec:e5:92:1b:70:df:7f:88:
39:ee:8e:5c:54:3b:60:a3:95:65:98:14:cf:cc:c7:32:84:e1:
4b:21:f1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:33 2025 by rpki-client