Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/vm0W2ZHMYSqWoDcTkypcR9h7A9M.roa
File: vm0W2ZHMYSqWoDcTkypcR9h7A9M.roa (raw, json)
Hash identifier: DGcinuIeyURDlp3D8kO+2yuB7Akk4RrAV07dvD6WrhI=
Subject key identifier: BE:6D:16:D9:91:CC:61:2A:96:A0:37:13:93:2A:5C:47:D8:7B:03:D3
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 37A76280
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/vm0W2ZHMYSqWoDcTkypcR9h7A9M.roa
Signing time: Sat 01 Jan 2022 08:55:49 +0000
ROA not before: Sat 01 Jan 2022 08:55:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56547
IP address blocks: 87.107.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933716608 (0x37a76280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 08:55:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be6d16d991cc612a96a03713932a5c47d87b03d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cd:37:e8:5b:80:92:62:fc:d8:e8:a2:02:65:
66:16:28:63:7f:80:c5:86:b4:cf:8e:50:90:d3:81:
b2:7e:09:c2:8d:5b:7c:65:ff:7a:cc:8b:f5:fa:0e:
09:c5:eb:ad:b1:53:48:73:5c:28:54:85:be:96:6c:
8f:bb:29:9e:9c:87:25:32:8f:9b:1e:e7:e0:49:b8:
6a:b8:ce:08:7c:10:57:07:5a:e7:a6:42:45:a7:7d:
7c:29:20:15:31:e9:30:0c:fd:6e:f6:f1:b9:7e:16:
e9:7a:eb:ef:aa:32:d6:fb:47:0d:e2:cb:7d:8b:22:
96:30:b8:7c:76:7d:6a:6b:13:44:87:ea:6c:d8:d6:
d7:30:e2:74:d3:c5:1c:d6:a9:95:3c:4f:f1:14:72:
38:74:83:16:a9:d8:e4:d6:b5:84:00:f7:0d:e3:b0:
e4:59:e5:c5:fa:d5:e6:66:d0:e8:c0:76:e8:5a:5a:
ad:d9:2e:36:39:fa:24:c6:ce:ea:5e:4d:26:32:14:
19:4b:92:8d:63:f9:58:37:82:97:1f:02:00:0c:2a:
62:9f:68:01:2e:45:c2:39:23:24:71:0e:22:d0:b7:
d2:65:53:d5:40:fd:c6:3e:e7:95:2e:07:94:ea:e1:
74:e6:57:8c:2f:c1:79:57:17:a6:04:a2:be:63:bf:
1a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6D:16:D9:91:CC:61:2A:96:A0:37:13:93:2A:5C:47:D8:7B:03:D3
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/vm0W2ZHMYSqWoDcTkypcR9h7A9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.110.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:e9:c4:eb:10:f8:5f:1d:03:96:7a:14:46:cd:d6:ba:26:07:
93:b7:2e:7b:c1:0f:fe:0c:e5:86:b1:56:e7:32:64:a1:36:36:
56:63:b9:86:b7:e6:e0:ec:83:93:83:11:f6:15:f3:77:50:02:
11:bf:b0:c6:81:e4:ce:72:a5:6b:82:c6:25:3c:39:32:56:b1:
38:f6:82:f2:16:f5:fe:68:8b:db:78:d4:75:53:51:fb:8a:4b:
82:9a:be:9b:94:2f:4d:f8:97:41:ee:5f:c1:8b:ef:e3:5f:68:
92:b4:2f:24:7c:20:8c:3a:fb:3d:08:8b:4e:9c:4e:fc:9e:c9:
e7:da:b9:48:67:73:42:44:2c:0b:bb:4a:a2:2a:37:c9:25:e0:
76:6b:ab:5e:0b:a9:79:c5:5e:40:76:a5:41:a8:14:b2:45:9a:
a3:66:f8:a8:10:16:f9:5f:60:11:be:ee:db:fe:ce:20:46:10:
6e:89:a6:a4:55:41:f6:55:e8:22:f2:f0:90:f4:4d:69:07:d8:
74:21:ea:f5:2e:39:0f:cd:54:d4:7e:db:bf:97:a5:01:dc:55:
44:96:f3:be:be:16:f5:a7:a3:2f:01:48:1a:0c:e7:7a:43:42:
41:59:d4:19:01:bd:5b:9c:37:fb:97:2a:46:c9:c0:94:00:5c:
ac:2c:b6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-ams.rpki-client.org