Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-chBkRsgOhSJoVpOqMbRPnx7JRw.roa
File: 1-chBkRsgOhSJoVpOqMbRPnx7JRw.roa (raw, json)
Hash identifier: TuA3oyc4z3TCRwLLGjBWqY3vFYf/Wa46Nse2SbRkfR0=
Subject key identifier: F9:C8:41:91:1B:20:3A:14:89:A1:5A:4E:A8:C6:D1:3E:7C:7B:25:1C
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0324091C
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-chBkRsgOhSJoVpOqMbRPnx7JRw.roa
Signing time: Sat 01 Jan 2022 01:54:24 +0000
ROA not before: Sat 01 Jan 2022 01:54:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60446
IP address blocks: 78.135.76.0/24 maxlen: 24
78.135.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52693276 (0x324091c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 1 01:54:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9c841911b203a1489a15a4ea8c6d13e7c7b251c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:27:90:16:33:11:76:66:ff:54:95:ff:6b:69:
e8:fa:16:af:e7:c0:e3:8d:a1:e5:a6:ba:cf:c6:c9:
27:55:82:64:23:d7:70:49:d4:94:41:f6:16:20:6e:
d7:ad:65:66:1f:62:ec:a6:2b:ba:90:79:58:a5:33:
20:80:06:24:0d:87:2a:b2:6c:d0:e9:e0:56:cf:a4:
9d:fc:5a:e6:78:03:3a:f1:eb:48:e3:f3:2f:e4:a9:
df:eb:83:1e:30:8c:22:ae:8c:a5:9c:e2:8c:22:4b:
bc:5a:28:77:f8:c9:7d:81:61:25:4a:e0:a2:03:3d:
b4:78:55:ff:cd:c3:4c:54:c3:4f:76:6d:ba:07:e6:
ab:9d:9e:25:6c:3b:6e:19:c6:6e:50:1c:90:f8:cf:
79:df:46:20:f5:a8:15:df:97:20:cb:08:9a:04:1e:
5e:77:8a:13:de:34:f5:60:33:4d:90:36:47:f0:46:
31:fb:31:9e:cd:8e:84:f8:ce:04:db:57:94:ee:23:
a4:0d:80:ce:bc:c2:e7:9c:15:50:97:5b:69:b2:5c:
3b:34:c8:81:5c:86:ed:44:f7:5f:7d:a4:02:52:42:
02:8a:1c:d3:67:b6:5a:48:a0:28:2d:6c:b8:27:47:
45:02:fb:0b:4e:bd:cb:3a:62:4f:93:9a:c3:3e:59:
b0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C8:41:91:1B:20:3A:14:89:A1:5A:4E:A8:C6:D1:3E:7C:7B:25:1C
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-chBkRsgOhSJoVpOqMbRPnx7JRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.75.0-78.135.76.255
Signature Algorithm: sha256WithRSAEncryption
67:24:4b:4a:92:89:4a:63:2e:95:19:6d:38:51:4d:80:19:b0:
e4:af:9c:24:9e:74:b6:da:9f:08:93:40:40:cc:e0:63:be:b7:
98:b0:08:ae:48:11:a9:72:30:06:01:fa:a5:73:a9:a7:fa:54:
f9:e0:e4:1d:2e:1b:af:b9:a8:16:06:5e:50:57:fd:65:52:54:
62:ff:bd:88:0e:9c:99:e8:c6:a6:78:5b:06:9e:96:8c:7c:25:
25:70:24:25:55:83:71:5c:39:23:db:e2:c1:ec:9b:bc:04:ab:
5d:bd:f4:96:50:50:d5:af:75:ba:1c:37:f8:0f:65:50:40:72:
10:f4:02:61:bb:73:54:b3:5c:88:d7:bb:8b:d9:22:2f:7c:0e:
68:19:c2:6f:1c:89:7c:4f:b6:9a:bc:54:e2:07:13:d2:8a:ca:
2b:f4:6d:1d:fc:f5:62:c3:30:7f:c0:40:9a:ce:e5:c7:c6:34:
8c:5b:de:33:6b:35:b9:a5:c0:b2:19:1d:ad:dd:72:05:28:b1:
42:45:5a:d0:4a:00:40:ab:00:30:a0:5d:2e:2c:79:63:b1:97:
4b:91:ae:32:ee:c7:07:6a:17:b2:b8:18:c6:f9:f2:a4:03:55:
aa:fc:59:11:65:22:b3:36:7a:63:76:f8:3f:f9:3a:f0:00:54:
5a:40:e1:37
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgIEAyQJHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
OWQ1NzQ0N2UzNDIwYjg1Mzg3NWI2ZmE0MDM3MmFhZGUzMTkyY2EyMB4XDTIyMDEw
MTAxNTQyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjljODQxOTExYjIw
M2ExNDg5YTE1YTRlYThjNmQxM2U3YzdiMjUxYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANMnkBYzEXZm/1SV/2tp6PoWr+fA442h5aa6z8bJJ1WCZCPX
cEnUlEH2FiBu161lZh9i7KYrupB5WKUzIIAGJA2HKrJs0OngVs+knfxa5ngDOvHr
SOPzL+Sp3+uDHjCMIq6MpZzijCJLvFood/jJfYFhJUrgogM9tHhV/83DTFTDT3Zt
ugfmq52eJWw7bhnGblAckPjPed9GIPWoFd+XIMsImgQeXneKE9409WAzTZA2R/BG
Mfsxns2OhPjOBNtXlO4jpA2AzrzC55wVUJdbabJcOzTIgVyG7UT3X32kAlJCAooc
02e2WkigKC1suCdHRQL7C069yzpiT5Oawz5ZsK8CAwEAAaOCAhIwggIOMB0GA1Ud
DgQWBBT5yEGRGyA6FImhWk6oxtE+fHslHDAfBgNVHSMEGDAWgBTJ1XRH40ILhTh1
tvpANyqt4xksojAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lkVjBSLU5DQzRVNGRiYjZRRGNxcmVNWkxLSS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGQvMTU4NmZkLWZkMmMtNDFmOC04ZmU5LTRlMTk4ZjBhNjAxMy8x
LzEtY2hCa1JzZ09oU0pvVnBPcU1iUlBueDdKUncucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRk
LzE1ODZmZC1mZDJjLTQxZjgtOGZlOS00ZTE5OGYwYTYwMTMvMS95ZFYwUi1OQ0M0
VTRkYmI2UURjcXJlTVpMS0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
JwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4wDAMEAE6HSwMEAE6HTDANBgkqhkiG
9w0BAQsFAAOCAQEAZyRLSpKJSmMulRltOFFNgBmw5K+cJJ50ttqfCJNAQMzgY763
mLAIrkgRqXIwBgH6pXOpp/pU+eDkHS4br7moFgZeUFf9ZVJUYv+9iA6cmejGpnhb
Bp6WjHwlJXAkJVWDcVw5I9viweybvASrXb30llBQ1a91uhw3+A9lUEByEPQCYbtz
VLNciNe7i9kiL3wOaBnCbxyJfE+2mrxU4gcT0orKK/RtHfz1YsMwf8BAms7lx8Y0
jFveM2s1uaXAshkdrd1yBSixQkVa0EoAQKsAMKBdLix5Y7GXS5GuMu7HB2oXsrgY
xvnypANVqvxZEWUiszZ6Y3b4P/k68ABUWkDhNw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org