Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/RQgz3_OO8GkQpEgvGSp18apGDM0.roa
File: RQgz3_OO8GkQpEgvGSp18apGDM0.roa (raw, json)
Hash identifier: ljjKyDRwUTqRWY7qWIguE15HhSMAuIXn4etnN7RJl38=
Subject key identifier: 45:08:33:DF:F3:8E:F0:69:10:A4:48:2F:19:2A:75:F1:AA:46:0C:CD
Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial: 03F8FCCA
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/RQgz3_OO8GkQpEgvGSp18apGDM0.roa
Signing time: Sat 01 Jan 2022 05:56:36 +0000
ROA not before: Sat 01 Jan 2022 05:56:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43277
IP address blocks: 78.109.96.0/24 maxlen: 24
78.109.104.0/22 maxlen: 22
78.109.108.0/22 maxlen: 22
185.90.132.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66649290 (0x3f8fcca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Validity
Not Before: Jan 1 05:56:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=450833dff38ef06910a4482f192a75f1aa460ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:17:14:3f:09:9a:12:fd:59:e5:d0:71:b7:23:
45:6b:13:4e:bc:6c:85:41:9e:4f:62:98:48:f1:1c:
6a:99:73:98:83:44:61:17:71:c6:1b:f3:69:d2:48:
4f:00:f5:bb:90:dd:75:b6:5e:6c:fb:a0:6e:e3:72:
56:06:ad:de:ee:7a:85:a0:b1:35:ac:21:7b:2d:46:
48:d9:08:d1:21:40:d3:84:46:bc:db:e7:fd:9c:67:
b9:23:a0:01:93:a3:dc:ed:50:2f:90:b8:e8:b0:ee:
b3:08:4d:f2:65:7e:01:76:97:85:a9:9a:3f:14:65:
ff:a6:42:95:f4:c3:f0:3c:74:4e:a3:44:30:4e:96:
48:b7:d1:f6:77:0f:fc:3b:33:38:07:66:13:3f:9a:
86:da:b9:43:f4:0f:db:a6:ed:c9:b0:f4:9e:c3:17:
74:f8:41:0f:08:64:2b:ba:87:3f:e4:01:e9:5a:48:
91:38:24:13:96:44:b5:69:6c:18:bc:79:19:e3:6d:
d3:d1:0d:b4:6b:31:16:22:c6:9a:da:9b:fc:8e:90:
8f:a4:0e:e7:4b:04:43:aa:91:22:ac:a2:37:13:63:
24:48:b2:5c:32:06:f1:5d:d8:b6:c7:ba:fd:47:13:
d2:63:2a:23:45:d7:5f:aa:68:a3:07:91:6c:05:e2:
87:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:08:33:DF:F3:8E:F0:69:10:A4:48:2F:19:2A:75:F1:AA:46:0C:CD
X509v3 Authority Key Identifier:
keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/RQgz3_OO8GkQpEgvGSp18apGDM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.96.0/24
78.109.104.0/21
185.90.132.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:f7:0d:de:bd:19:53:52:12:e2:65:c6:aa:76:1b:3b:19:1e:
03:05:47:bf:f8:2d:91:3b:38:4f:55:8a:cc:d7:d4:a7:07:84:
b2:3c:17:1a:07:ae:a5:9e:2d:0b:21:b7:2b:38:8a:fa:03:95:
c9:b4:34:ef:85:e0:a1:85:ec:96:50:52:9c:7b:76:d0:77:95:
58:c8:36:1b:c6:2f:2f:0a:1f:01:00:e5:33:30:72:29:5f:23:
ee:ca:da:57:f9:48:8d:2c:d2:e5:2c:0d:29:5d:ca:dd:4e:d3:
ea:9a:f0:b6:8e:87:a8:03:72:d0:3d:36:f0:29:7d:fa:04:55:
ac:8c:27:e8:4d:3b:fe:c4:79:95:43:55:0b:16:d8:d6:3e:be:
c1:0c:ef:7e:44:e3:bf:80:59:ab:d6:fe:2e:bf:0c:55:8a:25:
17:9c:b0:2c:25:43:74:a9:86:2e:0c:0b:20:b5:91:c4:4e:02:
0b:40:e9:01:60:93:f0:93:17:21:1e:c9:72:b8:55:a3:82:fc:
06:c3:7c:2e:26:37:02:4a:c2:01:d7:ca:31:e3:87:66:7d:d7:
10:8f:0e:cd:8f:75:5d:22:da:ca:92:b9:ef:5b:45:66:3c:aa:
fe:3a:38:1f:36:10:dc:6f:dc:45:e0:1f:d2:bc:f2:33:69:0a:
f9:02:71:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:09 2023 by rpki-client on console-fra.rpki-client.org