Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/CkOxqmPN5-zYYOqVSSvx5DcacWU.roa
File: CkOxqmPN5-zYYOqVSSvx5DcacWU.roa (raw, json)
Hash identifier: JNdggDq0TDBw7Orsjgq0Lskzq/Jugx2Ltz4CgTBuaTo=
Subject key identifier: 0A:43:B1:AA:63:CD:E7:EC:D8:60:EA:95:49:2B:F1:E4:37:1A:71:65
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0183371BBB5786083C037AA9DA365C7A12AD
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/CkOxqmPN5-zYYOqVSSvx5DcacWU.roa
Signing time: Tue 13 Sep 2022 13:48:27 +0000
ROA not before: Tue 13 Sep 2022 13:48:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 87.254.17.0/24 maxlen: 24
87.254.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:37:1b:bb:57:86:08:3c:03:7a:a9:da:36:5c:7a:12:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Sep 13 13:48:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a43b1aa63cde7ecd860ea95492bf1e4371a7165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:88:37:2a:a5:a4:f5:c3:98:25:0a:67:06:02:
5c:d6:f7:32:79:5c:a5:f8:8a:b6:ff:24:9a:75:3a:
9e:18:71:14:2e:b3:8d:2e:ab:97:5d:4c:96:ef:4d:
a5:82:33:32:a4:3d:ae:52:97:bd:4a:c2:8f:d3:64:
8b:3e:77:a8:dd:13:5d:ad:1e:d9:01:c8:34:89:48:
fd:33:10:6d:e6:f0:b2:01:c1:c3:ed:76:25:1d:c1:
58:82:ca:f5:f5:92:01:3a:df:35:a2:c7:fc:4d:c4:
02:e2:91:42:08:0e:0a:b8:5b:66:27:13:fd:9a:84:
46:cd:6b:0e:79:ac:e8:08:9f:71:15:1f:df:04:85:
2c:5c:3f:e2:79:bc:6a:77:32:17:33:36:62:de:50:
cf:c4:6b:97:61:13:f4:11:f9:f6:30:07:ef:45:f7:
f4:71:f0:0b:f9:8e:f5:e1:f8:66:76:28:0e:e4:4e:
4a:7a:1c:f7:83:56:77:32:e7:09:c6:f4:ea:5b:37:
45:c9:da:49:b1:e4:71:a6:0b:31:1d:09:05:a0:bd:
5e:d5:a4:99:de:88:a2:3a:05:18:ff:eb:52:4b:ec:
cb:37:91:1d:ec:06:d6:b0:86:fc:9b:42:05:3c:17:
71:f1:7b:9f:49:cb:a3:d2:d2:f4:68:87:9a:67:b4:
e3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:43:B1:AA:63:CD:E7:EC:D8:60:EA:95:49:2B:F1:E4:37:1A:71:65
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/CkOxqmPN5-zYYOqVSSvx5DcacWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.17.0/24
87.254.19.0/24
Signature Algorithm: sha256WithRSAEncryption
03:f0:a6:1b:20:50:98:c5:dc:b7:f0:d4:30:0f:cb:a3:65:27:
16:27:b7:6a:7f:48:30:41:a3:d4:35:fa:c1:fe:9b:ed:35:77:
96:77:05:a4:65:1d:1c:3f:38:65:4b:f3:a9:46:79:ca:72:17:
d4:f5:fc:c3:77:f4:37:cd:54:ea:27:ea:69:c4:e0:3a:b8:77:
bd:83:cd:04:8c:54:56:44:76:e8:e6:e1:93:19:07:73:b8:c8:
54:9e:75:ef:4e:08:82:9c:e3:b5:fc:81:05:8c:cb:67:34:31:
5b:45:5f:36:90:9f:02:d5:cd:73:59:4e:1c:a2:90:1c:f5:9a:
25:4d:60:23:8d:ad:75:6d:bf:de:49:bf:04:d9:83:24:22:09:
b2:9f:40:37:88:6b:ab:90:2e:79:1a:2f:79:90:82:f1:95:c0:
04:3c:e4:bd:cd:41:f0:77:78:f0:77:e9:0b:01:c5:bd:db:67:
42:76:2c:99:4a:fa:82:18:d7:1f:b1:d3:61:de:f6:89:ec:10:
56:23:ba:bc:06:b4:90:5f:9f:4b:67:f8:02:b8:e9:4b:7c:f0:
a9:7c:a3:cf:a6:c1:54:d5:04:66:d8:7a:51:25:b7:70:13:6e:
e9:3f:90:48:da:86:a0:e1:c3:14:a4:4e:13:2a:7d:ee:f3:ac:
24:ba:35:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org