Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/DWhMWrEIrmh2LxRDHKSlI9V7ZAg.roa
File: DWhMWrEIrmh2LxRDHKSlI9V7ZAg.roa (raw, json)
Hash identifier: H2pMujX0a1KZXJU1TaqohBgi6NMo02pbxFD5cVbnDjw=
Subject key identifier: 0D:68:4C:5A:B1:08:AE:68:76:2F:14:43:1C:A4:A5:23:D5:7B:64:08
Certificate issuer: /CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
Certificate serial: 05553D04
Authority key identifier: 2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/DWhMWrEIrmh2LxRDHKSlI9V7ZAg.roa
Signing time: Sat 01 Jan 2022 13:55:04 +0000
ROA not before: Sat 01 Jan 2022 13:55:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39232
IP address blocks: 78.111.48.0/21 maxlen: 21
78.111.48.0/20 maxlen: 20
185.81.82.0/23 maxlen: 23
185.81.80.0/22 maxlen: 22
185.81.80.0/23 maxlen: 23
78.111.56.0/21 maxlen: 21
2a03:7740::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89472260 (0x5553d04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e827c87cbbfc261a274e9cb1b095026a80c6136
Validity
Not Before: Jan 1 13:55:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d684c5ab108ae68762f14431ca4a523d57b6408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:72:ee:2d:86:fd:8a:1b:cf:cc:c0:e5:69:
27:20:4e:9c:18:e0:a4:ee:40:94:7b:ae:c8:17:cc:
24:50:de:5c:98:d6:57:4c:9c:27:d1:ab:85:f1:0b:
41:cf:89:c3:a2:9c:ab:6a:e9:aa:b2:b2:db:31:24:
0c:5a:32:6b:ba:18:36:23:ea:e0:3d:79:96:d0:6b:
e7:a3:2e:56:8a:6b:8f:22:71:15:76:6a:a1:f1:d4:
91:0d:b2:21:92:44:e1:21:c7:6b:39:b2:68:99:78:
f8:09:7a:ec:ce:71:bd:a9:c0:6f:3f:7d:70:0d:c2:
67:8a:8b:57:76:e7:00:11:57:a9:66:ec:aa:3d:3b:
a1:47:86:fe:9e:1a:7a:0d:c9:ec:21:31:3b:64:33:
e4:f9:97:34:d0:57:0a:f2:1c:b0:91:f4:90:8f:d5:
43:5c:00:eb:ce:0d:20:9c:f2:1b:42:eb:1e:9a:1c:
6a:03:d7:7e:81:7e:17:51:11:56:1f:22:00:e2:df:
31:50:58:8f:bb:e3:a0:11:49:ec:94:48:95:2f:b8:
57:a2:ce:02:f6:af:d5:c1:b2:7c:09:c1:c0:ed:4a:
6f:7e:8e:57:5f:81:a9:d7:63:c6:aa:81:b8:a1:9c:
47:45:33:70:a1:a2:66:f4:9a:1b:39:ab:cd:4f:a7:
06:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:68:4C:5A:B1:08:AE:68:76:2F:14:43:1C:A4:A5:23:D5:7B:64:08
X509v3 Authority Key Identifier:
keyid:2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/DWhMWrEIrmh2LxRDHKSlI9V7ZAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.111.48.0/20
185.81.80.0/22
IPv6:
2a03:7740::/32
Signature Algorithm: sha256WithRSAEncryption
c4:d9:a9:1c:ac:5b:5f:ed:44:32:6b:52:fe:85:3c:ba:b4:ac:
5e:02:36:c2:31:f0:8b:8d:ca:2a:c1:e8:ef:9c:37:7a:5a:73:
56:1a:09:f0:34:4f:b7:32:e1:de:e4:7d:d8:7a:d6:3a:2c:3e:
cd:16:1f:17:ed:28:d6:ba:c8:92:25:c9:7a:b3:1d:bd:83:25:
74:b1:ff:08:06:e5:00:b7:6f:c0:d0:c1:dc:ad:3d:c4:5c:1e:
71:df:09:6f:0e:91:21:fe:35:62:81:b0:fa:f6:93:40:7f:57:
5b:f7:3a:1c:8b:2f:e5:6c:df:79:cf:0a:d0:a8:75:22:55:56:
e6:57:39:3b:19:31:89:5a:40:89:f9:27:29:aa:72:9b:87:27:
6e:2c:b9:d1:3e:ec:67:7b:c6:5a:f6:ec:2e:58:f6:aa:7d:e0:
44:50:45:40:ed:85:c9:40:76:03:10:b5:b0:93:02:af:fe:c1:
3a:15:22:52:da:46:8f:36:ef:59:6a:55:a8:d0:4c:f4:a7:9d:
fd:7a:cd:82:21:cb:e2:f9:d4:60:c2:5d:4f:7e:a0:df:4c:a6:
9f:37:0c:e3:c6:c7:d7:18:22:f0:fc:5c:59:a2:7e:0a:9a:5c:
39:f4:d0:a1:d0:e9:9b:4c:81:36:22:a4:ed:81:b4:df:ad:23:
b0:d4:9a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:46 2023 by rpki-client on console-ams.rpki-client.org