Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/cFhDHkyU68olGRnwzIvoz5V1IUE.roa
File: cFhDHkyU68olGRnwzIvoz5V1IUE.roa (raw, json)
Hash identifier: inDnKdIyF7ACO0/kLcRI2haGsORhNr7bWP/QEeVCHXI=
Subject key identifier: 70:58:43:1E:4C:94:EB:CA:25:19:19:F0:CC:8B:E8:CF:95:75:21:41
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0A099E0D
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/cFhDHkyU68olGRnwzIvoz5V1IUE.roa
Signing time: Sat 01 Jan 2022 05:03:29 +0000
ROA not before: Sat 01 Jan 2022 05:03:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209241
IP address blocks: 80.78.134.0/24 maxlen: 24
2a0d:2146:8050::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168402445 (0xa099e0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 05:03:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7058431e4c94ebca251919f0cc8be8cf95752141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:a0:ab:94:a8:4a:57:d5:37:15:c1:13:27:
eb:06:17:72:32:2c:f2:bf:ee:f4:d3:56:58:bb:38:
0a:e9:73:8a:4e:49:3e:44:76:71:d4:7a:7b:19:a8:
3a:bf:76:8c:23:09:e0:b6:56:06:d3:5c:0c:89:56:
f0:17:6b:ee:11:0b:f3:20:c8:e7:99:c4:34:c0:1f:
f3:4f:1b:59:2a:35:5e:11:c9:33:07:36:9a:80:b2:
dd:97:dd:87:64:a3:90:49:0c:45:fc:94:d2:f5:27:
35:9a:71:53:43:f9:8f:81:3b:ea:7c:dd:b7:39:71:
5b:ca:44:ef:25:fb:2e:5c:ca:21:c6:35:f1:62:d1:
b8:27:3d:c7:7e:62:09:64:76:82:d4:7b:d6:32:d7:
a9:68:a4:5b:41:e4:90:46:c2:24:b5:07:f1:72:8a:
27:dd:16:75:26:e0:61:30:34:c3:b2:6d:3d:2a:97:
0b:8d:59:58:2b:59:03:ed:20:19:40:20:c3:35:26:
ec:2b:b9:49:67:26:c8:fb:44:3e:88:80:a5:9b:3a:
52:d8:a6:4a:1c:fe:e3:db:a6:4e:13:7f:f1:f9:ec:
f7:cb:b0:1b:f4:47:ce:f2:3e:1b:26:b2:7b:87:1e:
5c:0a:4a:be:b0:cd:8c:3b:92:2b:43:cb:72:a7:a1:
b5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:58:43:1E:4C:94:EB:CA:25:19:19:F0:CC:8B:E8:CF:95:75:21:41
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/cFhDHkyU68olGRnwzIvoz5V1IUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.78.134.0/24
IPv6:
2a0d:2146:8050::/44
Signature Algorithm: sha256WithRSAEncryption
ac:42:81:e7:c0:54:6a:2f:17:c5:98:f1:14:c7:05:bc:71:1f:
e5:56:36:d8:6b:37:9c:26:3c:89:41:9b:97:12:45:bd:25:ac:
68:ea:6e:98:8b:bf:d9:58:1d:d6:84:19:5a:a5:78:b8:a1:28:
d4:22:47:0d:92:71:c6:5a:a1:a9:8c:f7:65:cb:47:0d:fe:41:
b2:30:46:b3:c3:7b:cc:cc:b0:eb:fe:98:eb:ad:75:30:3c:7b:
57:6d:69:62:77:a8:49:aa:6a:61:04:da:0d:75:48:e5:09:80:
b7:81:9f:33:70:36:0f:6f:d4:2c:7f:66:43:fd:59:01:9a:7c:
de:e1:74:3e:77:51:dd:14:d2:3b:42:9c:29:d2:c5:3e:6a:ee:
ee:dd:e6:4c:14:64:e3:b3:ee:0a:39:89:90:ec:83:3c:b1:7a:
97:cd:6e:bd:8e:bf:cc:13:cf:09:79:98:20:f8:80:93:33:17:
50:49:3f:c5:ad:6d:d3:ec:89:d6:88:05:c9:2a:d2:77:08:2c:
35:ff:06:61:a1:e3:b3:fc:45:0b:58:db:a0:7c:36:81:01:62:
9f:09:63:f6:e0:2f:11:51:00:78:35:5a:62:78:b4:31:17:8a:
4c:47:54:d3:ab:2f:4e:86:32:fd:54:27:f1:54:7d:55:51:5c:
44:04:39:53
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECgmeDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MTRhYzYxMTYxNGRkMTY1ZDk0NTU3Mjk2ZWQ3ZWQ0NmM4ZmMwMjVmMB4XDTIyMDEw
MTA1MDMyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzA1ODQzMWU0Yzk0
ZWJjYTI1MTkxOWYwY2M4YmU4Y2Y5NTc1MjE0MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALlKoKuUqEpX1TcVwRMn6wYXcjIs8r/u9NNWWLs4Culzik5J
PkR2cdR6exmoOr92jCMJ4LZWBtNcDIlW8Bdr7hEL8yDI55nENMAf808bWSo1XhHJ
Mwc2moCy3Zfdh2SjkEkMRfyU0vUnNZpxU0P5j4E76nzdtzlxW8pE7yX7LlzKIcY1
8WLRuCc9x35iCWR2gtR71jLXqWikW0HkkEbCJLUH8XKKJ90WdSbgYTA0w7JtPSqX
C41ZWCtZA+0gGUAgwzUm7Cu5SWcmyPtEPoiApZs6UtimShz+49umThN/8fns98uw
G/RHzvI+Gyaye4ceXApKvrDNjDuSK0PLcqehtSsCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRwWEMeTJTryiUZGfDMi+jPlXUhQTAfBgNVHSMEGDAWgBThSsYRYU3RZdlF
Vylu1+1GyPwCXzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRVckdFV0ZOMFdYWlJWY3BidGZ0UnNqOEFsOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWEvNmU3OWI4LTJiOGYtNGVjYy05YTZlLTcwZTg5OGJiMzhkZC8x
L2NGaERIa3lVNjhvbEdSbnd6SXZvejVWMUlVRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEv
NmU3OWI4LTJiOGYtNGVjYy05YTZlLTcwZTg5OGJiMzhkZC8xLzRVckdFV0ZOMFdY
WlJWY3BidGZ0UnNqOEFsOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAFBOhjAPBAIAAjAJAwcEKg0hRoBQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCsQoHnwFRqLxfFmPEUxwW8cR/lVjbYazecJjyJ
QZuXEkW9Jaxo6m6Yi7/ZWB3WhBlapXi4oSjUIkcNknHGWqGpjPdly0cN/kGyMEaz
w3vMzLDr/pjrrXUwPHtXbWlid6hJqmphBNoNdUjlCYC3gZ8zcDYPb9Qsf2ZD/VkB
mnze4XQ+d1HdFNI7Qpwp0sU+au7u3eZMFGTjs+4KOYmQ7IM8sXqXzW69jr/ME88J
eZgg+ICTMxdQST/FrW3T7InWiAXJKtJ3CCw1/wZhoeOz/EULWNugfDaBAWKfCWP2
4C8RUQB4NVpieLQxF4pMR1TTqy9OhjL9VCfxVH1VUVxEBDlT
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org