Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/zbIL0J6hHQ8NGzwCjBhAhtf8wyE.roa
File: zbIL0J6hHQ8NGzwCjBhAhtf8wyE.roa (raw, json)
Hash identifier: 9rklsfRjqaUSuYyAISGmy+dPsKRH4KwyAvmzIUGhbkk=
Subject key identifier: CD:B2:0B:D0:9E:A1:1D:0F:0D:1B:3C:02:8C:18:40:86:D7:FC:C3:21
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 37A6D1EB
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/zbIL0J6hHQ8NGzwCjBhAhtf8wyE.roa
Signing time: Sat 01 Jan 2022 08:55:49 +0000
ROA not before: Sat 01 Jan 2022 08:55:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56466
IP address blocks: 87.107.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 933679595 (0x37a6d1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 08:55:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdb20bd09ea11d0f0d1b3c028c184086d7fcc321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:74:ab:a6:fa:28:d9:ec:ff:b3:01:0a:56:
43:9b:17:6f:54:a6:05:26:7c:b9:03:3a:9c:26:b2:
05:09:88:7e:58:8c:2e:ec:ec:5b:ea:b3:fb:d0:d7:
84:d9:f6:3c:46:dd:bb:0f:74:55:76:d2:df:ba:d2:
8d:83:10:06:48:b6:a8:c1:d0:59:cd:7b:3d:02:62:
cf:be:42:f5:eb:11:55:e3:6a:e4:1a:21:e6:62:25:
4a:2f:ae:9e:37:cb:2d:4a:f9:f3:3f:b7:03:b8:02:
15:b6:b4:06:b1:68:77:56:2b:26:c6:ef:77:da:eb:
1a:9f:4d:9b:91:9c:d6:9d:7e:a9:35:3a:a4:96:09:
1b:56:a9:a0:f1:50:d7:d3:bb:e2:e7:91:0d:6b:1a:
de:08:c7:a1:45:bb:23:3a:d4:6e:57:98:98:99:3c:
04:ca:d7:6d:2a:26:81:69:3e:31:a8:d6:40:0f:ea:
4b:22:cf:ec:4f:f4:3c:f2:d8:49:7b:05:fc:1a:b5:
38:4b:fe:7b:8c:07:1e:7d:77:55:81:20:87:2a:69:
20:a0:8b:54:07:4f:17:5c:32:f3:bf:3b:e3:fc:e2:
f5:4a:6b:9f:e7:ba:42:63:2d:98:62:97:5c:81:d0:
7f:9f:98:1f:d8:12:dd:26:60:4c:22:d0:54:fc:db:
f4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B2:0B:D0:9E:A1:1D:0F:0D:1B:3C:02:8C:18:40:86:D7:FC:C3:21
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/zbIL0J6hHQ8NGzwCjBhAhtf8wyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.141.0/24
Signature Algorithm: sha256WithRSAEncryption
72:6c:f3:a6:24:7a:b1:cf:c2:20:d2:bb:fc:e7:cb:ed:a7:b7:
2d:ab:2b:64:1f:f9:00:e7:8a:29:01:55:a8:b3:f1:bd:d2:b0:
ca:a2:b2:62:c1:8e:54:80:74:1f:74:0d:b5:6a:ac:b5:32:be:
95:87:a1:44:40:23:d8:bb:9a:b9:0c:63:a7:73:1e:3b:92:7d:
2d:75:ec:f9:c5:11:72:e7:35:8e:4c:c4:0f:f1:1a:fb:73:d8:
61:0a:d2:fd:4c:93:aa:91:c1:3a:6d:10:92:15:f6:aa:39:3a:
15:40:68:52:17:b3:d4:79:f7:65:fd:8b:0b:46:0b:c9:f8:d7:
85:34:be:16:12:2a:ff:3f:dc:67:74:3d:e7:c5:73:9b:72:c5:
4e:be:9e:17:af:cd:c9:13:85:d9:77:a7:36:4a:63:72:48:55:
62:b6:0b:01:0b:28:c2:ef:33:2d:0c:30:76:21:50:f8:ec:f6:
f1:51:b7:0c:a9:ba:eb:bc:8e:04:0c:4e:5e:c0:4d:a3:69:cd:
da:88:98:70:74:5f:e8:98:f0:a9:0a:37:cb:b6:ad:f6:cb:89:
cf:a6:ad:43:b4:ae:44:50:f3:eb:cd:96:66:59:af:e3:20:b3:
ac:51:c5:8c:07:4a:4b:11:07:a2:7c:c6:72:35:a4:56:30:d2:
c4:f8:1a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:33 2023 by rpki-client on console-ams.rpki-client.org