Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ltvrMmDkRtBjnSBuPhjsiEjtR8g.roa
File: ltvrMmDkRtBjnSBuPhjsiEjtR8g.roa (raw, json)
Hash identifier: yNhkel4R/4/Kw57oSQ4bKpynKEYFmxY7ZId6BODl3Zk=
Subject key identifier: 96:DB:EB:32:60:E4:46:D0:63:9D:20:6E:3E:18:EC:88:48:ED:47:C8
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 0F286B6B
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ltvrMmDkRtBjnSBuPhjsiEjtR8g.roa
Signing time: Thu 24 Feb 2022 19:35:55 +0000
ROA not before: Thu 24 Feb 2022 19:35:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21325
IP address blocks: 87.246.184.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254307179 (0xf286b6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Feb 24 19:35:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96dbeb3260e446d0639d206e3e18ec8848ed47c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c1:f2:9b:0c:35:44:50:53:ca:3d:cb:f3:70:
68:6a:c9:97:12:37:4e:d2:b9:a4:46:d9:69:75:cb:
94:5d:be:34:90:87:5d:65:4b:34:9c:74:ac:02:a8:
f7:b3:79:5f:d2:c5:22:ab:ee:42:71:3a:d6:d7:d4:
83:a2:9a:df:1b:a1:b8:d6:aa:7d:2a:ec:b3:14:97:
e0:cf:ff:c0:a4:e9:db:61:e8:3e:80:35:49:e4:ac:
6f:1d:7b:26:2a:3a:15:89:2e:4c:89:8b:54:76:4d:
7f:c8:8f:1d:d1:1f:39:0b:7b:86:87:05:27:e7:f9:
7a:96:9b:6b:5f:a6:5f:f4:61:3c:47:5d:91:86:d7:
de:3c:1d:40:f0:9e:60:dd:64:78:b0:33:05:14:cd:
53:4e:55:85:72:62:b6:65:4c:d2:86:e3:06:07:28:
15:19:dd:46:82:cf:05:0b:80:0f:bc:11:40:11:10:
c3:a0:b3:94:d4:ce:19:7b:5b:05:28:e9:00:7b:e9:
0b:1a:8a:58:5f:8c:46:77:a3:39:c9:dc:2e:ee:6e:
3a:fa:88:25:79:7c:f6:a6:d1:0f:02:0b:20:d4:78:
a1:8e:6e:6e:f8:ce:0b:64:11:fc:9d:8a:8c:ae:ee:
1f:7b:1e:c0:a2:3c:ef:30:72:9d:d1:69:85:04:42:
58:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DB:EB:32:60:E4:46:D0:63:9D:20:6E:3E:18:EC:88:48:ED:47:C8
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/ltvrMmDkRtBjnSBuPhjsiEjtR8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.184.0/23
Signature Algorithm: sha256WithRSAEncryption
62:9d:83:2c:7e:2f:76:2b:59:c6:00:c7:f3:82:d8:ca:1d:16:
2b:e4:7e:22:7d:2b:ec:14:87:94:37:06:c4:a6:a7:84:04:ac:
78:b5:90:2d:7b:3b:6a:70:ad:1d:7e:83:a3:62:22:70:22:9c:
aa:a1:21:d7:66:9d:70:55:d0:46:fa:e9:03:fc:ed:df:05:2e:
50:5a:c0:16:86:e7:27:d9:34:09:76:f9:dd:0a:55:66:8c:31:
c7:1a:42:eb:3d:f0:59:b6:80:88:ff:22:e2:03:53:d6:b4:65:
24:d4:90:46:c5:b5:bd:9b:ec:28:b6:8c:c9:ba:50:67:83:ec:
b0:f4:68:0f:f9:d0:ff:2a:a8:16:2e:78:11:46:ff:63:d7:ef:
c3:e1:33:05:17:fa:8f:5e:32:ec:92:01:32:01:91:3a:ad:36:
2f:9a:a6:de:51:76:3a:81:00:41:58:86:4f:0d:e3:7a:6c:ad:
1a:64:6e:33:81:41:63:ba:6e:fc:15:8b:76:ef:49:4f:2a:e2:
9f:04:dd:4e:3c:97:c3:41:c6:e9:19:c0:87:02:fe:b1:24:07:
46:39:77:c9:d8:79:57:a7:90:cb:01:bc:58:e3:11:19:73:07:
0f:99:14:c9:1a:c6:a3:da:89:5c:61:6c:ae:10:78:bc:a3:8b:
1c:9a:67:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:29 2024 by rpki-client on console-fra.rpki-client.org