Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/d_9m-_AioFXgWZZZ_1LGjI-yt5M.roa
File: d_9m-_AioFXgWZZZ_1LGjI-yt5M.roa (raw, json)
Hash identifier: 5izEM/Cz1zK9Nr/m5Od2q+l4uIihUh0+evXn+QEzMeI=
Subject key identifier: 77:FF:66:FB:F0:22:A0:55:E0:59:96:59:FF:52:C6:8C:8F:B2:B7:93
Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial: 03110630
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/d_9m-_AioFXgWZZZ_1LGjI-yt5M.roa
Signing time: Thu 21 Apr 2022 06:11:15 +0000
ROA not before: Thu 21 Apr 2022 06:11:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3330
IP address blocks: 92.63.213.0/24 maxlen: 24
78.142.66.0/23 maxlen: 23
78.142.85.0/24 maxlen: 24
78.142.86.0/23 maxlen: 24
78.142.90.0/24 maxlen: 24
78.142.88.0/23 maxlen: 24
195.16.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51447344 (0x3110630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
Validity
Not Before: Apr 21 06:11:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77ff66fbf022a055e0599659ff52c68c8fb2b793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:e1:1d:7d:f7:c0:e1:e0:d3:22:2e:cc:44:
b9:e2:2b:c9:2a:79:2c:32:de:80:cf:d8:64:73:a8:
d8:3f:98:50:57:45:e1:78:66:b6:6e:a8:b8:7e:28:
d2:b9:df:1f:36:02:13:0f:65:ec:7d:7d:f4:34:6a:
93:f7:e5:b2:59:16:86:f0:06:05:b4:b7:c7:9c:46:
59:bc:ff:db:20:7f:c6:e7:49:ec:ac:6f:96:8e:ab:
8d:42:be:59:5d:5f:67:ba:3e:a0:21:fd:cb:b8:e3:
6d:0a:df:e6:44:53:71:11:16:cf:b4:4b:d8:f0:6b:
42:c9:9e:45:23:27:91:59:9b:7c:fd:a3:8f:80:13:
a0:18:b7:74:3f:01:3d:3a:cf:87:69:ac:15:ce:f0:
27:00:17:c0:6d:32:e1:bc:43:57:0e:7e:4b:88:7b:
a9:c1:80:7a:a2:f7:23:8c:86:23:20:9d:6d:a8:23:
9d:af:d8:45:26:85:b8:df:03:ac:f7:f5:04:1a:42:
73:81:11:bd:9f:9a:d7:78:03:a5:2f:e7:b8:92:16:
a3:04:b8:5d:44:e5:94:80:d4:74:59:bc:23:2d:86:
82:04:13:a8:5b:46:06:32:72:35:48:00:de:a0:fc:
f8:dd:5c:e5:cb:8b:78:4b:a9:a3:13:eb:e3:23:9d:
9a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FF:66:FB:F0:22:A0:55:E0:59:96:59:FF:52:C6:8C:8F:B2:B7:93
X509v3 Authority Key Identifier:
keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/d_9m-_AioFXgWZZZ_1LGjI-yt5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.66.0/23
78.142.85.0-78.142.90.255
92.63.213.0/24
195.16.244.0/24
Signature Algorithm: sha256WithRSAEncryption
24:bf:1d:34:a8:2d:8f:75:74:5e:e8:88:72:a8:3e:72:99:79:
16:96:cb:dc:21:a5:64:a9:4c:a1:0e:cc:55:58:eb:38:ac:af:
c1:17:11:e8:5d:7c:d5:4d:6f:d7:ad:b7:f5:6a:21:86:59:f7:
66:40:1e:90:66:83:0b:dc:c3:ea:66:ab:fc:18:b9:b7:47:3b:
27:8f:79:be:59:7b:65:75:3b:57:c7:ce:10:2d:a2:b0:97:51:
49:f4:6d:05:a6:dc:ac:e1:4b:82:6e:53:86:c5:45:5c:0a:98:
e4:3e:df:31:6c:61:f2:14:28:7c:e5:ab:79:13:62:5c:5a:6d:
89:7c:f9:5b:ec:ef:ae:6d:93:9b:6b:6b:03:b8:54:9b:d5:39:
01:f3:11:76:f9:59:c9:ac:a1:ee:8d:e6:7b:ed:87:8f:a1:f0:
2b:54:d2:95:93:12:d5:40:49:d8:58:14:f5:62:8b:61:cf:d9:
04:4c:41:84:4d:7b:c5:52:6e:8a:21:b0:1d:b9:0a:6b:d2:e2:
50:40:99:55:1f:56:04:5d:38:a7:df:d2:1f:66:c2:19:c0:08:
2a:ff:ee:fe:35:6d:50:aa:c9:ed:c5:9a:5e:27:1b:ef:04:32:
c0:7a:f0:6a:fb:0e:14:cc:ae:04:d1:58:cd:80:eb:d3:dc:c7:
84:a8:d2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:37 2024 by rpki-client on console-fra.rpki-client.org