Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-3x0TCJ0pnoV7tJPwFaJ5MywQeI.roa
File: 1-3x0TCJ0pnoV7tJPwFaJ5MywQeI.roa (raw, json)
Hash identifier: mQN6KqrIAKqfam5PLouPdgS4k/9pz6fqaqvLNMthCXU=
Subject key identifier: FB:7C:74:4C:22:74:A6:7A:15:EE:D2:4F:C0:56:89:E4:CC:B0:41:E2
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 03FDBF65
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-3x0TCJ0pnoV7tJPwFaJ5MywQeI.roa
Signing time: Thu 17 Mar 2022 21:14:21 +0000
ROA not before: Thu 17 Mar 2022 21:14:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207633
IP address blocks: 78.135.111.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66961253 (0x3fdbf65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Mar 17 21:14:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb7c744c2274a67a15eed24fc05689e4ccb041e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:06:25:97:00:1c:06:bb:ed:32:91:22:45:
34:9f:43:55:5b:be:dd:2c:b9:0b:82:73:fc:a4:01:
a3:b6:89:d6:0f:c7:93:43:2f:74:f3:8b:f4:64:b2:
37:e3:86:d6:1e:a1:c5:0e:cd:65:d6:4f:31:df:57:
6e:df:f3:64:40:f8:06:d3:65:b2:a8:5e:95:ee:28:
94:d5:c4:e2:da:21:c5:eb:aa:0e:67:a4:92:44:f0:
bf:1f:26:5d:bb:01:83:5b:45:c1:d2:6d:17:4f:c7:
3d:8b:bc:b2:8c:58:7c:07:2c:7a:5c:a3:e8:d6:03:
cc:32:10:f1:c2:4a:f1:c1:87:f9:fa:54:b3:35:09:
86:94:31:84:27:41:97:31:de:1b:6a:11:bb:d8:c7:
b5:c1:f2:d5:01:fc:00:58:9c:33:ac:9d:be:de:f8:
d9:d8:ed:57:48:45:3a:a2:e9:c0:89:b6:03:45:e6:
43:37:78:1f:db:53:53:90:21:a5:77:60:b2:45:b7:
e6:69:f1:00:de:45:1e:f7:13:a7:ea:b9:84:8e:97:
55:e3:9d:bb:a0:f9:a6:63:19:59:a0:e4:18:02:03:
cc:6e:a4:60:34:dc:3f:e9:86:81:ff:e4:4a:4b:40:
64:d7:3e:33:8b:b7:16:66:8f:e0:71:bd:97:bb:b8:
02:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7C:74:4C:22:74:A6:7A:15:EE:D2:4F:C0:56:89:E4:CC:B0:41:E2
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-3x0TCJ0pnoV7tJPwFaJ5MywQeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.111.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:24:db:d0:a7:87:06:b7:9b:7b:14:7f:44:de:a0:2d:ea:d8:
d4:a5:85:af:a1:11:e0:ac:7d:39:73:42:71:5b:e0:a8:b8:b2:
15:b6:1c:5e:d4:52:2a:b4:46:3e:82:5c:38:75:99:84:b8:51:
15:8b:93:3d:4a:7d:3b:b3:d1:07:b5:4d:c3:d1:c0:05:38:64:
e4:a1:15:bc:10:52:96:e9:c5:3d:87:3c:75:82:f8:ab:9b:0f:
51:a2:d6:77:a7:68:3f:9a:eb:f3:3e:4f:dd:e8:c8:17:40:d6:
f6:18:48:23:c8:ef:0a:ce:f0:f4:bc:ea:40:25:f8:17:0f:9d:
ac:f3:52:6d:31:42:07:1e:ef:bf:85:5d:ff:0d:75:4a:a6:13:
d8:56:7b:8d:33:78:5c:6b:3b:6a:d8:05:2c:e6:3c:48:83:d7:
45:2f:84:fc:91:d4:74:fb:63:4f:13:3e:4d:2d:80:1f:90:7b:
3f:70:a5:6d:27:fc:31:35:e6:88:d3:b8:23:bf:0a:cc:f9:26:
87:ea:49:1e:79:a3:4b:ea:5a:80:dc:a4:e6:01:a1:f3:13:2e:
40:d5:12:71:dc:5f:0b:e9:00:0d:81:8b:bf:15:d3:14:ed:d3:
ac:4a:b4:a3:73:01:3d:dd:77:fe:05:8b:94:12:94:75:50:40:
46:3e:18:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org