Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/AoqJNrHECj92VLR3LPYE0aW5wFo.roa
File: AoqJNrHECj92VLR3LPYE0aW5wFo.roa (raw, json)
Hash identifier: hP/LlQW+8D0dqmHwAXw+RTlnwRHGvgtNXVaKbZ4sxic=
Subject key identifier: 02:8A:89:36:B1:C4:0A:3F:76:54:B4:77:2C:F6:04:D1:A5:B9:C0:5A
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 384FA6EB
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/AoqJNrHECj92VLR3LPYE0aW5wFo.roa
Signing time: Sat 01 Jan 2022 10:00:49 +0000
ROA not before: Sat 01 Jan 2022 10:00:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21472
IP address blocks: 78.143.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 944744171 (0x384fa6eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Jan 1 10:00:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=028a8936b1c40a3f7654b4772cf604d1a5b9c05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:eb:1b:ad:13:c3:0f:92:f7:50:18:0b:3a:
38:b2:8f:b5:e1:23:ea:56:44:8a:87:08:c7:3d:74:
d1:05:dc:22:8b:db:93:6f:32:f0:dd:72:63:5c:4d:
ce:1e:c5:85:8d:74:dc:0b:a3:45:4f:a1:f5:5c:16:
ea:67:ff:e7:aa:10:e4:c9:e2:ad:fa:f0:3d:0e:88:
93:b9:fa:a0:10:a0:2b:cb:b0:b9:f9:bc:6b:c2:3d:
be:40:05:c0:d2:16:a9:95:b9:02:9d:21:76:81:be:
f7:71:7b:a1:9a:af:aa:23:da:1b:86:a5:d5:d6:7c:
f4:21:b4:f7:e7:01:0c:f1:14:01:4c:95:0e:d1:04:
79:03:03:f4:75:89:3d:83:03:5d:ee:a4:33:32:0d:
c4:8b:9f:3a:32:e8:d9:50:5c:56:92:e3:91:4f:62:
1d:75:2f:67:dc:60:2d:10:a2:ac:83:41:c6:f8:77:
3c:30:12:8b:68:ab:7b:4a:34:01:ef:51:bf:dc:6f:
2d:3d:89:fd:0c:96:b9:94:35:ae:2e:ac:5b:97:f8:
f8:1f:a6:d6:21:e5:c4:1b:37:6b:91:b9:d8:f7:fc:
21:92:56:66:41:67:88:3e:40:ba:90:b0:cb:f4:04:
d7:c9:61:35:d6:16:88:36:1c:c0:5d:06:94:50:3d:
99:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8A:89:36:B1:C4:0A:3F:76:54:B4:77:2C:F6:04:D1:A5:B9:C0:5A
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/AoqJNrHECj92VLR3LPYE0aW5wFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.143.255.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d2:25:14:06:9e:ca:3f:3a:8e:21:5c:a7:a2:57:9b:ec:6b:
de:37:5e:41:7b:e9:93:f4:e1:5d:6c:fe:0c:b4:8e:bd:8d:69:
04:09:3d:74:a1:af:f9:8a:32:5e:70:0b:b1:a5:83:c6:a4:6e:
38:41:54:a6:d6:aa:fa:a7:b9:cf:32:67:28:f6:eb:28:56:2f:
a7:c4:e4:3d:96:07:c6:53:65:46:68:68:ea:dc:7b:77:a5:55:
7f:c9:e3:c8:62:ac:13:d9:ed:6d:00:43:53:a3:54:97:2b:9e:
90:3f:86:ec:79:19:a2:da:24:b9:e9:db:70:d7:4c:c7:38:45:
1b:45:15:3c:6b:32:35:09:52:d8:80:e1:11:6f:1f:e7:a2:de:
d6:74:4b:a8:45:b6:27:3e:f8:8f:04:12:6c:a4:cc:ef:1f:ad:
9e:04:4e:36:22:06:ad:01:39:67:53:28:26:b9:4f:06:69:cf:
e5:0e:70:1f:a7:2f:6a:97:ee:d6:da:1f:5f:e7:c2:7c:2c:fc:
5a:ef:dc:33:cc:0b:a0:ac:86:44:48:21:f1:72:04:17:d2:e0:
94:4a:de:7b:c9:80:21:18:17:51:0c:4b:eb:79:86:2b:aa:64:
6e:6f:cb:37:b4:9e:98:02:f8:90:12:74:0f:fe:61:43:67:d0:
1b:73:2e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:19 2024 by rpki-client on console-fra.rpki-client.org