Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/BoiU2o9s1VklgmJLq4AtmJP9_rY.roa
File: BoiU2o9s1VklgmJLq4AtmJP9_rY.roa (raw, json)
Hash identifier: zALttnmMkoBlMA23GZvsOZM35ow1bFw0EkrY+dkc8gU=
Subject key identifier: 06:88:94:DA:8F:6C:D5:59:25:82:62:4B:AB:80:2D:98:93:FD:FE:B6
Certificate issuer: /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Certificate serial: 0183A82AAEE6D4EA666DDFA60DF4EFF1F771
Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/BoiU2o9s1VklgmJLq4AtmJP9_rY.roa
Signing time: Wed 05 Oct 2022 12:41:53 +0000
ROA not before: Wed 05 Oct 2022 12:41:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39505
IP address blocks: 87.247.250.0/24 maxlen: 24
93.93.8.0/24 maxlen: 24
87.247.248.0/24 maxlen: 24
87.247.249.0/24 maxlen: 24
87.247.254.0/24 maxlen: 24
93.93.12.0/24 maxlen: 24
87.247.255.0/24 maxlen: 24
93.93.13.0/24 maxlen: 24
78.40.136.0/24 maxlen: 24
78.40.137.0/24 maxlen: 24
78.40.138.0/24 maxlen: 24
2a00:6580::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a8:2a:ae:e6:d4:ea:66:6d:df:a6:0d:f4:ef:f1:f7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Validity
Not Before: Oct 5 12:41:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=068894da8f6cd5592582624bab802d9893fdfeb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:df:98:60:77:ce:30:9c:d7:8c:a3:d0:02:f4:
25:1d:de:1f:ea:c4:76:52:b0:b5:21:62:ba:4f:ec:
bd:57:18:94:fa:ba:01:de:cc:46:51:47:8d:32:20:
25:bb:54:c8:5c:80:76:fb:cf:01:90:6e:3e:9a:75:
f8:63:2e:ce:a0:be:20:f9:1c:86:3d:66:b1:d1:e8:
27:93:0d:5f:32:c5:19:4c:87:c0:d2:a8:db:1c:a0:
09:a2:a5:26:d4:53:3f:b6:8f:10:4c:03:a6:0b:e3:
61:aa:e0:7b:c3:ca:84:f6:1f:d7:9d:f0:59:4d:0d:
6f:e4:f8:f9:3d:94:1d:3b:59:d2:0c:0a:4a:a7:2a:
ac:30:04:92:d5:94:78:93:df:38:a6:ce:3d:82:d3:
95:6e:0d:75:e7:0e:d8:b4:5c:6d:26:37:d4:51:ca:
95:49:e5:72:d6:68:d2:4f:29:14:e0:b4:4a:8c:28:
28:a1:08:c3:7e:68:75:f3:23:3b:da:18:d8:42:55:
cc:66:a3:c2:d8:d2:ec:d9:8c:2e:ab:2b:b0:7f:37:
2e:c0:eb:88:c0:a1:d7:3d:41:be:27:26:80:3f:37:
e5:4b:ca:f3:f6:5f:c6:10:c5:75:71:12:3f:e5:6f:
f6:dc:d2:63:ea:80:8e:6d:d1:a3:a6:5f:4a:c0:3b:
e6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:88:94:DA:8F:6C:D5:59:25:82:62:4B:AB:80:2D:98:93:FD:FE:B6
X509v3 Authority Key Identifier:
keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/BoiU2o9s1VklgmJLq4AtmJP9_rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.136.0-78.40.138.255
87.247.248.0-87.247.250.255
87.247.254.0/23
93.93.8.0/24
93.93.12.0/23
IPv6:
2a00:6580::/32
Signature Algorithm: sha256WithRSAEncryption
a2:3a:6d:54:e4:4d:d5:2e:7e:63:1e:ed:87:cd:ed:27:23:c9:
fa:45:0f:21:f1:0d:fd:56:3e:e5:b4:d6:54:57:e9:13:94:b1:
a6:c0:fb:51:4d:ba:06:4d:af:d7:bc:27:b0:d6:dd:96:5d:53:
13:4c:f0:7e:98:ad:b5:69:0d:c6:2b:22:d9:1e:00:4e:1d:d4:
cf:31:91:be:22:00:e4:10:5b:08:fa:df:c5:4e:74:0c:08:2c:
5c:7f:0b:11:8e:5c:98:03:e0:af:0d:b9:24:eb:ca:00:5a:c5:
3b:69:2c:0c:e2:57:3c:07:ba:04:5a:b1:8a:10:0b:c0:88:1f:
52:53:4b:c8:52:a6:f4:7b:14:49:6d:b6:9b:2c:cf:6d:99:f7:
a1:2b:eb:2e:90:96:18:f3:6f:44:53:b9:5b:2b:a9:dd:ee:29:
c1:c5:3c:d1:6a:06:01:e6:e0:0e:13:a8:3d:e5:56:a0:05:4a:
54:aa:04:13:db:57:73:47:95:70:87:6b:bd:de:7a:ef:6b:f6:
65:23:2c:70:e7:c6:80:3a:77:11:9a:3d:46:79:64:6d:da:ff:
71:29:d4:d5:36:ce:76:df:54:48:2b:90:5a:48:62:a5:12:ef:
7f:86:89:29:ba:39:20:4c:b2:d7:c1:96:1b:6a:4e:ae:f7:0c:
fc:a5:10:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:29 2023 by rpki-client on console-ams.rpki-client.org