Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/g9MQ3wpHQNwZNQW7OHLt9G3mpW0.roa
File: g9MQ3wpHQNwZNQW7OHLt9G3mpW0.roa (raw, json)
Hash identifier: oSUuFVOlDWiMHDzrSBQEkeJxVZwN5DN7GdjLxHql/cc=
Subject key identifier: 83:D3:10:DF:0A:47:40:DC:19:35:05:BB:38:72:ED:F4:6D:E6:A5:6D
Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Certificate serial: 0182D07355585990B52F1E7B3DCDAC443131
Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/g9MQ3wpHQNwZNQW7OHLt9G3mpW0.roa
Signing time: Wed 24 Aug 2022 15:23:15 +0000
ROA not before: Wed 24 Aug 2022 15:23:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 87.247.231.0/24 maxlen: 24
87.247.230.0/23 maxlen: 23
87.247.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d0:73:55:58:59:90:b5:2f:1e:7b:3d:cd:ac:44:31:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Validity
Not Before: Aug 24 15:23:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83d310df0a4740dc193505bb3872edf46de6a56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:77:24:b0:31:6e:6c:73:a1:a9:d7:8d:4a:d3:
66:dd:10:0e:e7:e1:02:60:21:62:c4:28:57:81:01:
fd:e2:dc:cc:cf:07:81:2d:f4:e3:df:2c:5a:4a:dc:
82:c5:13:c2:85:01:08:39:dd:a0:8e:b0:84:74:58:
81:8a:5e:7e:0b:ca:b5:40:6a:e5:a2:de:bb:b5:05:
6b:50:8c:38:45:88:7e:8e:d3:c4:09:5f:df:6a:c6:
b3:28:cd:aa:e1:70:cb:7e:84:86:fe:af:9a:36:6e:
a6:25:9d:a5:c1:6c:ac:76:cc:c8:38:d7:89:8c:50:
61:9d:9f:9b:73:64:e4:ec:21:ed:e3:b0:c0:0b:52:
f2:1b:6a:c6:06:18:d8:29:8a:19:8e:cf:0e:40:80:
72:c3:d1:39:55:2c:b8:d1:44:79:04:a2:f6:11:ac:
24:bb:fd:f4:18:91:b2:cb:d1:ae:0b:c4:19:70:a0:
57:56:45:ae:7b:0b:38:b1:98:b8:b7:64:e9:c9:87:
c3:22:e8:bc:fc:63:a6:5b:b2:86:77:8f:75:d4:e5:
9b:c1:63:9b:a8:c8:c3:79:c7:d2:ca:4f:e4:7b:88:
d8:31:6b:7a:b5:82:48:f9:49:fe:2b:14:6e:34:8c:
52:e1:00:5d:8b:b4:fc:cb:44:3c:af:af:88:85:0c:
2b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D3:10:DF:0A:47:40:DC:19:35:05:BB:38:72:ED:F4:6D:E6:A5:6D
X509v3 Authority Key Identifier:
keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/g9MQ3wpHQNwZNQW7OHLt9G3mpW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.230.0/23
Signature Algorithm: sha256WithRSAEncryption
02:e7:86:46:16:b3:7f:6b:f9:18:51:b5:35:08:be:4b:11:96:
21:f0:fc:16:78:c9:a3:ff:10:1c:0f:21:25:47:52:45:ff:29:
62:1e:49:be:51:7c:f8:ff:fd:9e:0a:47:7a:cd:a4:0b:51:ff:
f6:84:56:45:10:de:fa:b6:e3:1f:65:75:d9:50:cf:3f:da:10:
6a:01:d5:e6:88:0f:76:bc:15:91:c7:e8:93:11:b7:a0:c1:9c:
32:e0:ad:18:d9:57:df:7d:e8:d8:a0:e8:53:5b:4d:a0:ae:6b:
ba:9d:e6:a0:70:ef:da:3f:9e:58:a7:c2:ee:de:93:7c:ee:5d:
18:7b:1f:48:4c:75:0b:c2:e7:1e:39:55:12:d5:20:e6:12:26:
eb:60:33:7a:f0:91:5e:31:dc:a6:55:66:d7:ec:81:a6:c3:9e:
24:f8:fa:6e:df:05:00:27:3d:c3:8e:f7:41:13:ad:7f:e2:16:
ee:16:45:88:47:72:bb:57:fa:13:e8:5b:40:3d:1d:5d:65:32:
0d:93:e1:e1:0d:2d:7f:c1:54:a5:08:18:31:81:74:e4:9d:21:
c4:6a:93:f6:9a:83:47:7e:fb:7f:b8:2f:ad:f7:ac:fb:77:f4:
8a:d0:81:8c:d3:86:e7:a6:09:39:bf:aa:3c:d1:c2:30:44:eb:
59:a1:c2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:57 2023 by rpki-client on console.sobornost.net