Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/t7v3Yh-QSp3EAAwDMd0YX8T22lM.roa
File: t7v3Yh-QSp3EAAwDMd0YX8T22lM.roa (raw, json)
Hash identifier: VzcoMJxRTa8+noqHw/pQ7/QzrIJMLsJKct0SvE6IXdg=
Subject key identifier: B7:BB:F7:62:1F:90:4A:9D:C4:00:0C:03:31:DD:18:5F:C4:F6:DA:53
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0335F015
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/t7v3Yh-QSp3EAAwDMd0YX8T22lM.roa
Signing time: Thu 12 May 2022 11:56:02 +0000
ROA not before: Thu 12 May 2022 11:56:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 87.254.2.0/24 maxlen: 24
185.210.168.0/22 maxlen: 24
87.254.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53866517 (0x335f015)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: May 12 11:56:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7bbf7621f904a9dc4000c0331dd185fc4f6da53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c4:4a:18:56:12:05:34:ca:41:66:8f:12:ac:
ec:5d:04:e5:41:09:ee:0f:14:82:fb:a3:84:fd:d5:
30:be:aa:ec:12:f3:5d:81:36:63:72:45:7b:aa:4a:
6a:47:4a:0c:d5:27:1a:04:c2:a0:c2:ec:34:5e:e2:
c3:10:98:55:2d:df:08:07:a2:b7:6a:b8:31:98:4e:
bb:79:6a:b1:f7:59:03:9f:9d:90:44:39:43:61:d3:
79:2c:c6:63:53:2a:34:3f:79:b1:d3:ca:84:d8:fc:
1e:33:b4:94:7a:37:e8:bf:2b:d8:ec:4e:08:f7:53:
2c:fe:d4:00:a3:9b:05:d4:a6:91:4a:dd:98:9a:a2:
8f:8e:46:da:b7:56:25:57:91:d6:69:48:84:c3:d7:
7f:c7:eb:8f:b1:09:44:33:92:7c:97:40:5f:b2:b9:
93:ae:38:89:89:e8:bf:3c:44:12:16:53:6a:2f:28:
87:6d:ce:5a:f1:52:07:6b:84:db:da:33:5f:20:b1:
84:2d:f2:d8:78:19:e7:1b:76:7c:ef:ce:91:1d:11:
02:6c:f6:97:7c:3c:b7:40:42:95:b9:72:8e:13:bc:
8b:2a:85:6c:d9:46:c2:d2:69:58:44:25:c3:82:ac:
45:66:2c:47:aa:a1:57:e2:55:82:60:b4:c6:09:6c:
54:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BB:F7:62:1F:90:4A:9D:C4:00:0C:03:31:DD:18:5F:C4:F6:DA:53
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/t7v3Yh-QSp3EAAwDMd0YX8T22lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.2.0/24
87.254.22.0/24
185.210.168.0/22
Signature Algorithm: sha256WithRSAEncryption
80:b8:82:19:4e:7a:0c:7c:31:bb:20:9a:90:e0:cf:6d:43:2e:
49:35:63:a7:7d:6e:c1:12:bc:f3:99:36:df:af:96:40:83:b8:
db:8d:6e:bb:10:26:30:79:cf:5d:50:60:58:09:9b:9c:b5:00:
c3:d8:97:f0:8a:a8:bf:ba:39:9c:f0:44:d3:be:df:70:7e:ec:
a9:7e:ab:21:be:c4:c0:e6:79:5b:63:a5:12:23:f0:16:d5:be:
51:36:cf:ef:4b:b6:ad:2f:d1:f7:02:ec:f0:00:7e:9e:bc:14:
a0:eb:20:0f:41:a9:52:3d:16:12:c5:de:9b:58:80:22:cb:1b:
af:3b:f6:a3:6e:c7:dd:53:7d:93:74:12:c5:33:07:33:99:c1:
e4:b4:42:74:83:96:a7:7d:7f:ec:be:c8:40:9f:a3:62:22:5f:
a2:b1:c6:06:6d:28:7d:e6:ae:ef:be:5c:11:93:13:75:e4:01:
53:1d:fe:70:56:9b:1f:6f:48:df:95:3d:31:4c:39:79:43:12:
a6:5e:98:47:f9:58:cf:d5:51:ef:9c:db:72:fb:c3:7e:e9:60:
c4:fa:41:78:18:32:fa:34:45:b9:3a:7b:0d:f0:00:46:55:f7:
c3:63:b0:d2:51:3a:30:f5:42:54:90:2e:24:92:58:0e:3b:d0:
16:9e:ac:9e
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEAzXwFTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
ZmY4MGNiZGZlMTgzNTRhM2NmZGJhMmZlMDc5YWEyZWJjNThkY2Q0MB4XDTIyMDUx
MjExNTYwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjdiYmY3NjIxZjkw
NGE5ZGM0MDAwYzAzMzFkZDE4NWZjNGY2ZGE1MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMXEShhWEgU0ykFmjxKs7F0E5UEJ7g8UgvujhP3VML6q7BLz
XYE2Y3JFe6pKakdKDNUnGgTCoMLsNF7iwxCYVS3fCAeit2q4MZhOu3lqsfdZA5+d
kEQ5Q2HTeSzGY1MqND95sdPKhNj8HjO0lHo36L8r2OxOCPdTLP7UAKObBdSmkUrd
mJqij45G2rdWJVeR1mlIhMPXf8frj7EJRDOSfJdAX7K5k644iYnovzxEEhZTai8o
h23OWvFSB2uE29ozXyCxhC3y2HgZ5xt2fO/OkR0RAmz2l3w8t0BClblyjhO8iyqF
bNlGwtJpWEQlw4KsRWYsR6qhV+JVgmC0xglsVOkCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBS3u/diH5BKncQADAMx3RhfxPbaUzAfBgNVHSMEGDAWgBQP+Ay9/hg1Sjz9
ui/geaouvFjc1DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0RfZ012ZjRZTlVvOF9ib3Y0SG1xTHJ4WTNOUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTkvMTI5NTY0LWYxZGItNGRjNS04OTA2LTZmY2RjZDVhYjY2MC8x
L3Q3djNZaC1RU3AzRUFBd0RNZDBZWDhUMjJsTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkv
MTI5NTY0LWYxZGItNGRjNS04OTA2LTZmY2RjZDVhYjY2MC8xL0RfZ012ZjRZTlVv
OF9ib3Y0SG1xTHJ4WTNOUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFf+AgMEAFf+FgMEArnSqDANBgkq
hkiG9w0BAQsFAAOCAQEAgLiCGU56DHwxuyCakODPbUMuSTVjp31uwRK885k236+W
QIO4241uuxAmMHnPXVBgWAmbnLUAw9iX8Iqov7o5nPBE077fcH7sqX6rIb7EwOZ5
W2OlEiPwFtW+UTbP70u2rS/R9wLs8AB+nrwUoOsgD0GpUj0WEsXem1iAIssbrzv2
o27H3VN9k3QSxTMHM5nB5LRCdIOWp31/7L7IQJ+jYiJforHGBm0ofeau775cEZMT
deQBUx3+cFabH29I35U9MUw5eUMSpl6YR/lYz9VR75zbcvvDfulgxPpBeBgy+jRF
uTp7DfAARlX3w2Ow0lE6MPVCVJAuJJJYDjvQFp6sng==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:48 2023 by rpki-client on console-fra.rpki-client.org