Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/eHLvIuiCs4NQn6_V8bld33ALCM8.roa
File: eHLvIuiCs4NQn6_V8bld33ALCM8.roa (raw, json)
Hash identifier: +h1nbaLnbcW4qXF/L5ojTYYa7Pa5Qq55LvDckIKzz/8=
Subject key identifier: 78:72:EF:22:E8:82:B3:83:50:9F:AF:D5:F1:B9:5D:DF:70:0B:08:CF
Certificate issuer: /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Certificate serial: 12405084
Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/eHLvIuiCs4NQn6_V8bld33ALCM8.roa
Signing time: Sat 01 Jan 2022 05:58:55 +0000
ROA not before: Sat 01 Jan 2022 05:58:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201613
IP address blocks: 87.246.43.0/24 maxlen: 24
87.246.42.0/24 maxlen: 24
87.246.41.0/24 maxlen: 24
212.5.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306204804 (0x12405084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Validity
Not Before: Jan 1 05:58:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7872ef22e882b383509fafd5f1b95ddf700b08cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c8:49:57:19:39:57:ac:8f:ca:ab:c1:f4:34:
68:82:76:ce:cd:f9:32:20:bd:70:d6:a0:cd:ba:79:
65:4e:38:0b:b3:c3:d1:c3:dd:53:a4:e9:29:83:b9:
c6:84:2e:1d:9f:d5:7e:4b:3f:b6:70:c1:64:3a:2c:
36:68:a4:a3:ba:1b:f6:5a:eb:17:80:5e:10:67:1c:
95:7a:9f:3c:4c:1b:53:cf:68:4b:8f:77:af:04:d1:
6b:41:a0:39:01:bb:35:7b:54:60:c0:f2:c3:45:9c:
98:6c:62:a9:44:ab:56:5e:c9:1e:10:24:3b:bc:74:
94:52:8c:b2:45:1d:cc:44:1a:cd:b7:7c:1a:05:f7:
64:3a:91:5f:51:5c:c3:ae:84:0a:ab:15:48:f8:3e:
29:4d:40:3f:cf:5e:0b:cd:cc:08:62:5b:fc:42:a1:
49:3f:51:56:e7:9b:49:80:58:38:45:90:b2:a2:00:
50:72:70:d1:09:4f:ec:2b:19:ac:d1:79:79:79:a3:
99:8e:e7:88:44:8c:83:9f:c7:44:01:cb:c9:d3:c0:
23:d2:d3:ad:8e:17:d6:0c:1e:b6:46:52:c1:e4:4a:
be:c3:98:f9:2c:76:2b:c1:84:2d:5b:9d:e2:ad:0d:
68:11:14:41:27:9f:49:33:bc:78:09:d5:9a:6d:65:
10:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:72:EF:22:E8:82:B3:83:50:9F:AF:D5:F1:B9:5D:DF:70:0B:08:CF
X509v3 Authority Key Identifier:
keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/eHLvIuiCs4NQn6_V8bld33ALCM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.41.0-87.246.43.255
212.5.60.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ae:3e:ee:ca:93:d1:15:cf:bc:d5:2e:6c:8f:c0:cc:0b:32:
9b:56:a5:04:24:0e:33:61:9c:cc:d6:45:81:bf:34:ff:17:99:
18:bc:4f:5c:05:1d:6e:d5:c1:a4:d3:84:0d:03:35:a1:54:03:
c5:81:8e:39:79:eb:25:e8:04:6a:b1:75:fc:c6:7f:de:4a:f6:
38:df:e8:30:41:95:ca:91:1f:b1:56:f0:56:88:40:e6:d3:af:
01:27:f1:07:b0:a2:cc:e7:9e:86:57:00:fa:c5:a3:3f:4d:0a:
ae:f1:cc:cf:34:fb:8b:7c:77:ac:06:60:ff:d0:0b:13:64:e4:
a2:15:74:eb:bd:54:5e:55:d5:f2:8f:8b:e6:45:07:d9:ce:f4:
02:5b:0f:ae:f0:94:0d:8d:f6:34:dd:21:37:0f:9c:99:40:81:
39:14:bc:c4:da:af:52:e9:34:16:5d:cb:e2:49:46:a8:f2:44:
80:51:80:65:0d:a0:d0:dc:b2:92:45:7c:2a:de:42:ff:09:6a:
10:fc:c6:7c:89:55:e0:93:5b:ef:da:8c:96:a0:0b:f2:28:fe:
79:bc:4d:e2:c7:f9:18:3e:a6:b1:f5:fd:1e:cc:19:90:10:cc:
22:ba:a0:16:da:ed:7e:64:f3:1f:2b:fe:0e:6c:22:91:07:38:
42:92:22:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:35 2024 by rpki-client on console-fra.rpki-client.org