Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2rA_w_YCLYgdf0VlHLwyisqGDKE.roa
File: 2rA_w_YCLYgdf0VlHLwyisqGDKE.roa (raw, json)
Hash identifier: P8xsQgz3xuLKRa/wXEb6QtViFAOMuHvu2uDpst2cppQ=
Subject key identifier: DA:B0:3F:C3:F6:02:2D:88:1D:7F:45:65:1C:BC:32:8A:CA:86:0C:A1
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 03241A70
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2rA_w_YCLYgdf0VlHLwyisqGDKE.roa
Signing time: Sat 01 Jan 2022 01:54:24 +0000
ROA not before: Sat 01 Jan 2022 01:54:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61135
IP address blocks: 212.68.35.0/24 maxlen: 32
78.135.80.0/24 maxlen: 32
78.135.87.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52697712 (0x3241a70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 1 01:54:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dab03fc3f6022d881d7f45651cbc328aca860ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:84:2d:52:46:c9:53:57:58:55:af:3a:78:14:
8a:4c:a9:ca:85:56:7c:30:57:93:25:2b:d4:0b:1b:
77:00:bc:94:2e:f3:04:a4:97:63:6a:8b:81:30:41:
a6:b3:fe:89:3a:a3:4e:a9:b4:9f:61:5a:54:de:25:
04:93:1f:d8:d7:ce:72:93:8a:9e:9f:25:be:b9:94:
65:82:13:9e:55:0b:22:c8:fb:42:e4:77:74:92:e8:
ef:5b:72:4c:eb:f2:64:7c:56:db:08:4a:04:95:68:
bd:41:a0:f6:04:16:93:e1:5e:ca:e3:f0:9d:aa:77:
f1:61:c7:5d:d3:bf:55:4d:96:fd:a5:db:36:f3:a1:
71:61:7c:86:e4:06:83:0c:62:d9:8a:27:d1:2d:fc:
a4:31:e3:5c:d3:d6:34:5c:95:e0:3d:ba:f6:51:af:
3e:f3:a5:75:72:5f:80:e4:59:95:19:50:0c:db:ca:
e8:31:07:61:1c:82:c0:32:ef:fa:3d:44:68:d3:9c:
91:4a:b7:1e:83:d9:7c:14:37:e2:4a:a1:f8:0b:15:
49:bb:7d:73:b3:24:6a:0b:b7:6c:a3:05:1c:25:81:
49:ea:c8:95:bc:ad:c3:ee:40:c7:d8:e9:7e:14:89:
60:05:27:4e:b8:c7:fd:fd:bb:1a:d3:aa:79:03:29:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B0:3F:C3:F6:02:2D:88:1D:7F:45:65:1C:BC:32:8A:CA:86:0C:A1
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/2rA_w_YCLYgdf0VlHLwyisqGDKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.80.0/24
78.135.87.0/24
212.68.35.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:6e:1c:e9:84:73:91:51:61:22:86:1d:7d:0c:f7:a6:ff:01:
54:a0:8b:e8:cb:c1:ba:8f:ae:c5:19:30:4b:ce:4c:ea:6b:59:
81:07:31:b1:72:be:9b:30:a8:6b:12:f3:c4:ca:82:1f:d2:d1:
3a:d9:98:2a:a2:cc:b5:94:61:f9:1f:a3:9b:82:28:58:76:b0:
67:c2:c1:49:4e:61:c8:c9:9e:9b:43:1b:82:ec:bf:8e:34:aa:
53:38:fd:95:1d:fd:aa:c1:8c:14:0b:ca:1f:40:88:dc:1a:5a:
79:ae:74:ad:30:dd:cf:5b:5f:6d:fe:77:f0:29:9b:40:ff:16:
1f:05:03:d7:a7:1f:73:b4:88:6e:0e:08:a7:db:bc:21:99:5d:
7b:63:e7:cf:2a:71:1d:1e:eb:ec:09:b1:3e:e0:68:a8:62:aa:
ed:5b:5d:a0:e1:46:68:f2:10:c0:9b:c4:4c:22:a6:e9:44:fb:
84:ed:63:55:5f:bb:cf:28:e3:8b:95:6c:b1:5f:18:4e:79:69:
20:84:e3:42:42:60:b1:0f:cd:cf:c3:36:ae:d8:37:61:a3:5c:
fd:19:42:c5:f3:7d:15:09:fa:09:e6:de:9d:62:83:96:c9:fd:
c7:b2:51:bc:14:b2:fb:98:b1:be:36:da:24:00:d6:9a:85:d7:
38:a2:f1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org