Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/6D5rHhT6_f9rQaXE20ZXHi8LBUw.roa
File: 6D5rHhT6_f9rQaXE20ZXHi8LBUw.roa (raw, json)
Hash identifier: +5T1j1iifxJLSRA2NMNqZpofAxXg59BMlyV6zRtJ6Tc=
Subject key identifier: E8:3E:6B:1E:14:FA:FD:FF:6B:41:A5:C4:DB:46:57:1E:2F:0B:05:4C
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 032D848D
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/6D5rHhT6_f9rQaXE20ZXHi8LBUw.roa
Signing time: Sat 01 Jan 2022 01:54:29 +0000
ROA not before: Sat 01 Jan 2022 01:54:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211603
IP address blocks: 78.135.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53314701 (0x32d848d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 1 01:54:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e83e6b1e14fafdff6b41a5c4db46571e2f0b054c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:28:6e:fa:1c:be:f6:75:91:50:2b:c1:69:e0:
6f:60:05:c0:de:61:b9:fb:77:ac:96:a3:b6:10:ba:
43:b6:79:f1:7a:5e:a9:45:1d:72:a5:d1:72:2d:9a:
83:84:42:fa:f6:7e:8f:b9:5b:7d:0d:bd:e5:9c:7b:
34:cb:2d:75:64:88:77:da:19:d8:08:01:1c:f4:7a:
e3:79:78:6d:9e:4f:d8:1a:62:c0:fd:66:08:67:50:
0d:3a:71:0a:2b:82:f5:dc:ff:97:94:8f:ce:52:24:
8e:c3:8a:59:44:2a:40:56:e6:f7:a1:49:a6:da:0e:
b9:2f:bd:33:50:7c:aa:20:e5:36:b8:2e:61:9b:65:
c1:bb:d8:2f:96:b9:1f:18:f1:77:6e:61:ff:59:e4:
81:8e:50:39:50:84:dc:90:3d:c2:42:80:d0:07:88:
95:b7:a6:28:92:18:12:fc:24:9f:9c:8d:b1:2a:2a:
c4:6e:75:cc:9a:07:22:78:53:0c:50:6c:a9:52:3e:
7c:65:50:26:0d:75:8e:c7:5c:6c:4c:4f:ec:08:23:
48:f6:47:95:fe:5d:b3:85:61:d5:a5:aa:9f:95:29:
0e:28:8b:28:b4:a5:a0:f4:b1:61:37:b5:4c:6d:7a:
36:86:0c:2e:af:4a:37:04:7b:ee:a4:b9:32:7e:c9:
b1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3E:6B:1E:14:FA:FD:FF:6B:41:A5:C4:DB:46:57:1E:2F:0B:05:4C
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/6D5rHhT6_f9rQaXE20ZXHi8LBUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.104.0/24
Signature Algorithm: sha256WithRSAEncryption
00:9c:97:66:96:13:fd:a3:c0:73:af:d3:b9:32:27:21:cb:c3:
bc:3b:1d:22:40:0b:6a:32:41:b9:0b:5e:53:39:d9:f0:84:ed:
90:15:bc:3c:d5:ea:d7:54:d7:d3:9c:52:d1:2b:4e:79:70:7b:
bb:b2:8d:c1:8b:d4:09:11:bc:ec:94:f5:7f:55:f2:49:59:25:
19:8d:1c:47:4f:c0:cd:a3:00:f7:92:70:be:a1:22:eb:7a:77:
aa:3e:ad:7c:b9:54:43:90:4f:76:4b:f9:73:bf:fa:fc:5d:a7:
cc:f8:ae:33:58:80:50:4f:f0:05:cd:e4:06:d1:e7:19:11:a8:
91:bd:64:14:4e:6b:a6:d6:4d:13:f2:c5:9a:3e:2d:d3:a4:14:
69:b5:85:ca:e2:4a:98:77:ea:0a:f0:df:2f:76:61:a6:0a:b4:
3f:31:69:f4:2a:d4:b6:5c:b1:5e:08:58:4c:8d:4f:31:7d:0c:
77:97:e6:5a:65:4a:c6:97:28:2f:80:ba:6b:14:a9:30:a6:2d:
89:02:b9:4f:ac:74:7c:d1:05:77:e4:88:d9:24:34:5f:51:85:
e5:36:45:85:af:03:80:85:24:36:bf:ab:67:7b:9e:0b:65:c5:
d1:ac:be:74:da:16:31:7d:cb:e2:42:51:22:68:56:bd:c5:b4:
f5:71:52:cb
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAy2EjTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
OWQ1NzQ0N2UzNDIwYjg1Mzg3NWI2ZmE0MDM3MmFhZGUzMTkyY2EyMB4XDTIyMDEw
MTAxNTQyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTgzZTZiMWUxNGZh
ZmRmZjZiNDFhNWM0ZGI0NjU3MWUyZjBiMDU0YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJEobvocvvZ1kVArwWngb2AFwN5huft3rJajthC6Q7Z58Xpe
qUUdcqXRci2ag4RC+vZ+j7lbfQ295Zx7NMstdWSId9oZ2AgBHPR643l4bZ5P2Bpi
wP1mCGdQDTpxCiuC9dz/l5SPzlIkjsOKWUQqQFbm96FJptoOuS+9M1B8qiDlNrgu
YZtlwbvYL5a5Hxjxd25h/1nkgY5QOVCE3JA9wkKA0AeIlbemKJIYEvwkn5yNsSoq
xG51zJoHInhTDFBsqVI+fGVQJg11jsdcbExP7AgjSPZHlf5ds4Vh1aWqn5UpDiiL
KLSloPSxYTe1TG16NoYMLq9KNwR77qS5Mn7Jsb0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBToPmseFPr9/2tBpcTbRlceLwsFTDAfBgNVHSMEGDAWgBTJ1XRH40ILhTh1
tvpANyqt4xksojAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lkVjBSLU5DQzRVNGRiYjZRRGNxcmVNWkxLSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGQvMTU4NmZkLWZkMmMtNDFmOC04ZmU5LTRlMTk4ZjBhNjAxMy8x
LzZENXJIaFQ2X2Y5clFhWEUyMFpYSGk4TEJVdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQv
MTU4NmZkLWZkMmMtNDFmOC04ZmU5LTRlMTk4ZjBhNjAxMy8xL3lkVjBSLU5DQzRV
NGRiYjZRRGNxcmVNWkxLSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE6HaDANBgkqhkiG9w0BAQsFAAOC
AQEAAJyXZpYT/aPAc6/TuTInIcvDvDsdIkALajJBuQteUznZ8ITtkBW8PNXq11TX
05xS0StOeXB7u7KNwYvUCRG87JT1f1XySVklGY0cR0/AzaMA95JwvqEi63p3qj6t
fLlUQ5BPdkv5c7/6/F2nzPiuM1iAUE/wBc3kBtHnGRGokb1kFE5rptZNE/LFmj4t
06QUabWFyuJKmHfqCvDfL3Zhpgq0PzFp9CrUtlyxXghYTI1PMX0Md5fmWmVKxpco
L4C6axSpMKYtiQK5T6x0fNEFd+SI2SQ0X1GF5TZFha8DgIUkNr+rZ3ueC2XF0ay+
dNoWMX3L4kJRImhWvcW09XFSyw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:43 2024 by rpki-client on console-fra.rpki-client.org