Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/nmEEAyfsg4aHRQ-8kpBaX4v8sAU.roa
File: nmEEAyfsg4aHRQ-8kpBaX4v8sAU.roa (raw, json)
Hash identifier: 1l0+jHZZTovrMqEtcu3b3R03+PjA/qhRUisL2f5rj5Y=
Subject key identifier: 9E:61:04:03:27:EC:83:86:87:45:0F:BC:92:90:5A:5F:8B:FC:B0:05
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0183F9F69D446A24C2B3CB1CBB7A1D42F8FD
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/nmEEAyfsg4aHRQ-8kpBaX4v8sAU.roa
Signing time: Fri 21 Oct 2022 09:53:52 +0000
ROA not before: Fri 21 Oct 2022 09:53:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14445
IP address blocks: 87.254.29.0/24 maxlen: 24
87.254.8.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f9:f6:9d:44:6a:24:c2:b3:cb:1c:bb:7a:1d:42:f8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Oct 21 09:53:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e61040327ec838687450fbc92905a5f8bfcb005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:ae:48:8d:fe:e8:23:6b:d5:49:d1:ce:c4:
5f:53:80:89:58:fc:1b:49:e6:64:87:e8:05:37:1c:
29:d7:89:5c:27:5a:1f:45:55:84:fb:a4:28:51:b2:
ce:f6:4b:5d:50:80:50:c2:ce:11:39:d7:61:40:ea:
1c:73:f4:e5:86:24:bf:1a:90:3a:da:83:88:94:b8:
7f:26:69:e4:2b:4f:67:96:8c:06:f0:a4:7a:e0:b3:
a1:96:52:f9:94:e2:18:88:59:ff:75:4e:af:33:2e:
d7:15:ad:48:86:38:06:30:a8:a9:7e:9a:18:7f:51:
50:66:8f:6b:2c:52:67:1a:34:67:dc:75:fa:79:ce:
0f:b8:54:07:27:17:f8:53:13:e9:45:d4:44:8e:39:
7d:d5:d2:56:5a:2e:5f:e4:73:db:82:64:43:b9:c4:
15:4c:db:8a:85:17:a4:51:a3:9c:53:5b:19:16:d0:
1e:18:8c:f7:aa:fb:8d:0b:a3:19:1d:1f:f0:91:b2:
f2:b2:be:1a:44:4b:cc:2c:de:e6:83:92:a2:a2:9c:
86:58:a5:fb:d1:d7:f4:13:fb:f1:07:ad:73:43:15:
a7:f7:d6:0c:3d:3d:36:eb:75:25:00:2f:ac:bc:ab:
b6:09:ce:78:98:f1:4f:5c:39:9b:58:67:88:21:8f:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:61:04:03:27:EC:83:86:87:45:0F:BC:92:90:5A:5F:8B:FC:B0:05
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/nmEEAyfsg4aHRQ-8kpBaX4v8sAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.8.0/24
87.254.29.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:bf:40:a5:04:94:95:e5:3c:1a:e8:82:77:6d:d5:38:ff:74:
f9:6f:41:1b:4f:d6:3e:a1:44:9c:90:09:0a:c4:98:7c:86:c6:
09:32:7e:a6:88:bd:2d:1f:a3:31:13:a4:ff:e9:78:cd:04:ff:
63:f3:29:0c:1c:ae:ca:6f:a2:c9:f3:fb:70:93:32:64:ca:af:
41:77:fd:94:3d:fa:6d:8f:4f:ad:8c:2d:0a:f3:ee:56:15:07:
e3:81:f8:6b:9a:f6:3e:39:81:99:69:16:c1:3f:e1:e0:6f:86:
c2:e1:4a:64:b9:6e:5d:e2:61:5f:36:90:46:04:fe:39:50:e8:
bf:aa:5c:f4:ab:7e:f7:95:5a:a3:83:07:64:b0:8a:97:6b:fc:
b1:57:04:4b:10:47:1a:d5:75:5b:ab:e3:f6:67:16:bb:d6:dc:
ed:20:53:28:b9:bb:88:56:1d:c1:d2:27:c5:5a:cd:a2:0e:79:
f1:ad:7a:76:60:e8:f3:ff:05:09:94:ff:f0:53:39:d4:d4:f4:
6f:3b:2b:a7:b5:0e:85:b0:cf:d4:df:e5:ef:72:85:ee:d9:95:
77:b1:bb:02:19:ea:cb:f9:48:40:bf:44:cb:5a:01:8e:e7:9a:
25:62:57:93:97:bd:85:7d:96:83:58:e0:5f:de:88:63:c8:c5:
0d:f7:f3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:38 2023 by rpki-client on console-ams.rpki-client.org