Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/K0h7XhAP_5ZQnAJMrEZ5A08mLg8.roa
File: K0h7XhAP_5ZQnAJMrEZ5A08mLg8.roa (raw, json)
Hash identifier: YsJSLLTEOCh56eVuMHbaPOeqkehHaZ95iFEW3GIP04o=
Subject key identifier: 2B:48:7B:5E:10:0F:FF:96:50:9C:02:4C:AC:46:79:03:4F:26:2E:0F
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0183ACF94DDB333A667D02B82A2A4873D9E5
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/K0h7XhAP_5ZQnAJMrEZ5A08mLg8.roa
Signing time: Thu 06 Oct 2022 11:06:03 +0000
ROA not before: Thu 06 Oct 2022 11:06:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 87.254.10.0/24 maxlen: 24
87.254.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ac:f9:4d:db:33:3a:66:7d:02:b8:2a:2a:48:73:d9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Oct 6 11:06:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b487b5e100fff96509c024cac4679034f262e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:05:82:00:60:6a:6b:1c:78:c4:35:53:d4:
9e:6c:3b:b8:ff:89:9c:28:d4:30:47:6b:ac:3d:e3:
3a:00:9c:3b:6d:38:1a:57:00:5b:f8:93:ce:7d:44:
38:5c:d5:ed:bc:a8:38:96:52:36:97:40:6c:67:c7:
ce:1f:b5:26:6f:2c:c9:0e:f2:39:cb:d8:3e:8f:6d:
4c:85:30:8a:91:73:43:02:e8:40:af:f2:5d:f3:58:
79:0f:7d:12:5a:df:67:54:e1:1a:2e:a7:52:f0:44:
58:40:22:34:7f:45:6b:df:5f:e6:35:a8:5a:2b:a0:
a0:27:71:d9:4b:c6:dd:18:fa:35:6b:f0:08:95:d9:
34:05:66:1e:8e:55:fc:65:a4:f2:c0:b5:3c:a5:c3:
a1:27:3c:2e:41:69:f5:56:8b:45:8f:f3:96:75:39:
ae:bc:c4:e4:99:26:67:0a:1b:f1:8e:77:b4:f9:36:
3b:2b:cc:02:c3:f2:38:10:dc:2d:3d:7f:95:42:0d:
24:d2:3c:1c:fd:69:fe:4e:aa:4e:54:08:8b:72:0a:
41:ac:ed:8f:86:14:ce:36:f3:61:a1:54:1e:c6:31:
f7:e9:40:88:74:9e:9c:b0:b5:f6:b6:e7:a4:02:aa:
60:80:77:86:23:45:88:7f:96:b8:6d:bc:cc:d8:97:
4f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:48:7B:5E:10:0F:FF:96:50:9C:02:4C:AC:46:79:03:4F:26:2E:0F
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/K0h7XhAP_5ZQnAJMrEZ5A08mLg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.10.0/24
87.254.23.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:64:5f:73:e4:37:17:93:b8:77:5e:ad:14:53:ab:cb:a6:97:
bb:56:c4:0e:7b:7d:95:f8:24:87:a5:2f:8b:c4:fa:6c:ce:62:
66:df:00:b5:74:7c:0f:de:ed:c0:ec:5b:7f:f0:97:ad:f3:e0:
60:eb:db:3d:b0:71:7a:a8:f2:8e:87:91:14:6c:25:68:30:19:
22:bd:8d:13:4b:f4:b2:4c:da:4e:69:ff:d4:db:67:88:46:9d:
22:5b:c3:4e:8e:53:b5:a4:49:ab:10:91:7f:78:9c:60:e1:07:
53:09:92:e3:d3:f2:5a:2c:89:ad:1f:6c:37:3f:97:f2:13:e2:
9d:a5:d2:da:8b:d5:12:36:10:7b:52:3d:14:fb:ce:f2:26:00:
73:d8:6a:e3:2b:61:ad:cd:f0:2b:7e:64:15:c9:32:c0:03:92:
d5:ca:ea:ba:90:8e:a2:78:3d:43:17:16:4e:b4:5e:d3:71:cb:
1c:2d:50:ab:57:e3:9c:40:a8:6c:31:e5:cd:14:37:8a:f4:01:
fc:df:b0:96:c4:e0:d5:58:22:88:f8:23:a9:fc:bb:86:dc:0d:
02:30:3e:37:26:da:31:93:c0:94:24:da:d9:84:81:0f:24:62:
9c:2c:7a:63:b4:46:f3:c9:87:b7:de:7d:e3:67:bc:98:13:fd:
18:ce:2d:3f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYOs+U3bMzpmfQK4KipIc9nlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZjgwY2JkZmUxODM1NGEzY2ZkYmEyZmUwNzlhYTJlYmM1
OGRjZDQwHhcNMjIxMDA2MTEwNjAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjQ4N2I1ZTEwMGZmZjk2NTA5YzAyNGNhYzQ2NzkwMzRmMjYyZTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrQFggBgamsceMQ1U9SebDu4/4mc
KNQwR2usPeM6AJw7bTgaVwBb+JPOfUQ4XNXtvKg4llI2l0BsZ8fOH7UmbyzJDvI5
y9g+j21MhTCKkXNDAuhAr/Jd81h5D30SWt9nVOEaLqdS8ERYQCI0f0Vr31/mNaha
K6CgJ3HZS8bdGPo1a/AIldk0BWYejlX8ZaTywLU8pcOhJzwuQWn1VotFj/OWdTmu
vMTkmSZnChvxjne0+TY7K8wCw/I4ENwtPX+VQg0k0jwc/Wn+TqpOVAiLcgpBrO2P
hhTONvNhoVQexjH36UCIdJ6csLX2tuekAqpggHeGI0WIf5a4bbzM2JdP5wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCtIe14QD/+WUJwCTKxGeQNPJi4PMB8GA1UdIwQY
MBaAFA/4DL3+GDVKPP26L+B5qi68WNzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYt
NmZjZGNkNWFiNjYwLzEvSzBoN1hoQVBfNVpRbkFKTXJFWjVBMDhtTGc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xMjk1NjQtZjFkYi00ZGM1LTg5MDYtNmZjZGNkNWFiNjYw
LzEvRF9nTXZmNFlOVW84X2JvdjRIbXFMcnhZM05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/4KAwQA
V/4XMA0GCSqGSIb3DQEBCwUAA4IBAQAtZF9z5DcXk7h3Xq0UU6vLppe7VsQOe32V
+CSHpS+LxPpszmJm3wC1dHwP3u3A7Ft/8Jet8+Bg69s9sHF6qPKOh5EUbCVoMBki
vY0TS/SyTNpOaf/U22eIRp0iW8NOjlO1pEmrEJF/eJxg4QdTCZLj0/JaLImtH2w3
P5fyE+KdpdLai9USNhB7Uj0U+87yJgBz2GrjK2GtzfArfmQVyTLAA5LVyuq6kI6i
eD1DFxZOtF7TccscLVCrV+OcQKhsMeXNFDeK9AH837CWxODVWCKI+COp/LuG3A0C
MD43Jtoxk8CUJNrZhIEPJGKcLHpjtEbzyYe33n3jZ7yYE/0Yzi0/
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org