Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/9nfCNlxlx4KuhHBPZK93JxdTL_A.roa
File: 9nfCNlxlx4KuhHBPZK93JxdTL_A.roa (raw, json)
Hash identifier: l1Nd3yK6R37149roBnS/owPkxlYsrFt0jH7KCnRNVes=
Subject key identifier: F6:77:C2:36:5C:65:C7:82:AE:84:70:4F:64:AF:77:27:17:53:2F:F0
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 0F1C5E88
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/9nfCNlxlx4KuhHBPZK93JxdTL_A.roa
Signing time: Thu 24 Feb 2022 19:32:13 +0000
ROA not before: Thu 24 Feb 2022 19:32:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34417
IP address blocks: 87.110.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253517448 (0xf1c5e88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Feb 24 19:32:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f677c2365c65c782ae84704f64af772717532ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:2b:71:7a:77:ce:8b:75:cc:b0:08:36:1e:1b:
f5:9a:f7:18:ea:f2:b0:d1:10:ee:17:9a:f0:a8:f7:
a1:ab:63:0b:a5:82:21:eb:77:30:ad:d2:ae:a2:a9:
67:72:c1:ff:e9:18:bd:db:47:67:32:71:f1:fa:93:
cb:22:fc:f2:6c:fe:57:c1:59:c1:9b:2e:e2:69:bd:
4c:74:b7:18:1a:15:eb:a2:a3:68:3f:93:48:e0:29:
64:7c:ab:58:83:5a:a4:47:e7:0e:73:89:e5:db:13:
52:69:18:da:44:ca:b9:04:0e:8f:bf:bc:9a:a7:e4:
f0:45:a5:87:d3:fd:9f:aa:9e:7d:43:f1:ac:2e:ab:
31:03:17:05:b4:e7:da:d9:40:0e:f6:75:98:e5:68:
62:46:6d:1e:ef:ea:a8:a3:17:5e:b2:06:dd:ec:bb:
e5:dc:e6:fc:ca:04:ef:54:19:36:1d:69:94:08:87:
f3:a8:50:44:63:2f:fe:dc:fc:6a:f9:78:1b:34:2e:
78:c8:6c:f5:0a:18:1e:37:3a:5b:2d:ec:1b:0e:ad:
54:be:03:0f:ae:86:2d:4d:28:10:61:d6:4e:07:ed:
f6:8b:d5:a4:23:89:d9:d7:87:4f:01:85:c8:c6:ab:
c8:f4:f6:b9:78:59:d6:86:f3:c7:dc:8e:d0:e9:01:
66:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:77:C2:36:5C:65:C7:82:AE:84:70:4F:64:AF:77:27:17:53:2F:F0
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/9nfCNlxlx4KuhHBPZK93JxdTL_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.110.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:63:ac:f6:df:f1:d8:54:d9:6f:70:80:12:64:81:85:db:a5:
1d:9a:d5:ef:6d:74:b8:82:0d:d7:bb:88:8f:a9:26:1c:e2:16:
7f:e3:0a:a3:82:48:92:e7:de:63:7c:a2:40:bc:92:bc:77:d7:
00:21:64:f3:a7:e2:c5:3a:49:a9:06:8c:93:24:86:93:92:68:
6f:86:ec:b7:c9:99:5a:87:13:ad:cd:54:12:48:43:2f:6a:d5:
3a:8c:ed:a5:51:34:fc:9e:8b:06:ed:1b:ee:f8:85:1f:9a:c0:
a0:4f:72:b8:01:53:8a:1a:2c:ef:ce:1c:2d:bd:3a:92:6f:c1:
9f:b8:0f:5c:39:f9:9e:b9:d9:11:19:7f:3a:ab:6d:f6:75:b9:
67:88:bd:ff:81:94:e3:84:08:1d:c3:3d:31:ff:a1:40:6f:69:
f8:f7:23:8b:4d:5c:16:51:08:84:1c:f1:4d:e7:e7:3a:42:95:
bd:b5:ad:2b:aa:64:57:39:e8:6b:90:48:14:1f:44:e6:53:b8:
38:9c:d5:e8:16:d9:8b:eb:ec:91:d8:be:0b:f5:5f:01:c1:65:
c8:0c:81:33:43:fc:82:84:58:d8:8f:aa:81:d4:5b:6d:17:a7:
05:ac:5d:81:75:49:c3:5c:15:ef:66:43:9c:6d:70:92:5f:76:
b6:62:32:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:51 2023 by rpki-client on console-fra.rpki-client.org