Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/EoIg2SR5ElCgueiByvGTqWwE-8Y.roa
File: EoIg2SR5ElCgueiByvGTqWwE-8Y.roa (raw, json)
Hash identifier: 71iOANHW794qzLyt3hupt8PR2PMkgQRwtu82BzUFvBI=
Subject key identifier: 12:82:20:D9:24:79:12:50:A0:B9:E8:81:CA:F1:93:A9:6C:04:FB:C6
Certificate issuer: /CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Certificate serial: 0413123E
Authority key identifier: 32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/EoIg2SR5ElCgueiByvGTqWwE-8Y.roa
Signing time: Sat 01 Jan 2022 00:52:24 +0000
ROA not before: Sat 01 Jan 2022 00:52:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8426
IP address blocks: 87.236.246.0/24 maxlen: 24
87.236.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68358718 (0x413123e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3246795ad68a6badd5afcb6ba4653e9c090fc85a
Validity
Not Before: Jan 1 00:52:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=128220d924791250a0b9e881caf193a96c04fbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d9:02:8d:aa:c3:3b:09:74:02:05:66:c3:c3:
85:d4:d6:55:80:32:eb:cb:05:46:06:10:76:a6:9e:
23:53:b5:70:a5:3c:28:7c:9d:78:4e:97:25:e4:bb:
38:f0:12:2e:1f:4d:35:ac:e3:94:fe:8e:11:e3:5b:
d9:da:0f:03:70:b1:24:dd:da:76:c1:53:64:a0:9c:
a5:28:0c:d0:21:2e:a7:46:6a:77:59:18:3a:4a:d0:
25:3b:fb:c7:c2:b6:b0:70:5e:af:46:89:a1:13:02:
d8:fe:45:c1:74:56:2a:7f:da:5f:ea:9d:eb:cf:15:
ae:eb:a4:47:59:73:13:61:51:85:62:da:89:ce:6a:
53:e8:0b:05:05:d1:ed:69:8b:b5:a7:52:87:1c:44:
81:8c:c3:a5:f6:fd:e1:80:c4:24:57:ec:2b:2f:98:
d9:10:b6:90:10:f5:6e:9a:fc:c8:b5:89:94:13:ec:
2b:76:91:5d:6c:08:b2:fe:6c:fc:45:02:5f:5a:ba:
0c:59:18:7e:3f:f2:1d:24:3a:da:6b:a0:3b:0d:0a:
03:86:0c:ae:34:14:96:fd:c1:b5:05:90:c5:a8:3b:
7c:48:f8:2b:c3:e0:72:52:51:b8:8d:19:ef:5f:6e:
73:6d:96:e0:97:95:4e:f1:bc:d3:70:d9:b8:58:b8:
9a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:82:20:D9:24:79:12:50:A0:B9:E8:81:CA:F1:93:A9:6C:04:FB:C6
X509v3 Authority Key Identifier:
keyid:32:46:79:5A:D6:8A:6B:AD:D5:AF:CB:6B:A4:65:3E:9C:09:0F:C8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkZ5WtaKa63Vr8trpGU-nAkPyFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/EoIg2SR5ElCgueiByvGTqWwE-8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/9479ca-3db5-4f62-8e23-730b17f069ab/1/MkZ5WtaKa63Vr8trpGU-nAkPyFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.245.0-87.236.246.255
Signature Algorithm: sha256WithRSAEncryption
a9:06:a8:5e:24:5e:53:10:3d:59:2d:7f:12:18:d1:2f:72:68:
10:9a:1f:5b:ea:c0:f3:b2:18:8c:96:ad:c5:61:e5:66:22:3f:
1e:e4:e9:44:0a:ca:f9:fa:0d:b5:3f:17:39:20:2f:26:a8:96:
7f:32:bb:87:cd:9b:bb:9b:b5:fa:b5:06:eb:65:6d:85:67:9c:
66:21:c7:bd:3c:66:e6:3f:7c:61:7b:59:dc:e0:5a:cc:28:7a:
26:17:72:29:a0:e9:66:5c:d7:3e:c4:43:cd:1a:49:0c:8b:e6:
88:ef:c4:85:a1:b3:8b:15:64:60:e5:8f:90:2f:ef:f1:cb:74:
67:eb:32:2f:8c:61:b6:38:7b:d7:1f:76:1a:2a:20:a8:6c:f7:
69:2f:91:15:fa:e7:d8:e5:48:d4:33:c2:e2:c6:b8:78:35:69:
ba:04:10:58:a0:10:66:f2:db:e2:a8:35:7c:cf:12:fc:42:c0:
e3:44:96:83:b4:2f:00:28:f8:39:50:66:c7:3d:ac:f3:44:a6:
af:4f:09:86:e6:94:13:e8:26:dd:b3:8b:be:be:a0:f6:ac:c8:
04:f4:bd:50:81:5a:09:7f:ed:1d:69:3b:29:ea:98:ad:ee:cc:
ce:70:d8:42:94:2b:19:c5:f0:c9:05:0b:e3:a1:1b:ea:eb:e2:
61:8b:72:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:26 2024 by rpki-client on console-ams.rpki-client.org