Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/6DzxmtNuf6YfxrLRZs7OqoHihUk.roa
File: 6DzxmtNuf6YfxrLRZs7OqoHihUk.roa (raw, json)
Hash identifier: xHOKeCdABh4UQ0pXLJtSVhphEGkCfYXGgzDU29x3KCc=
Subject key identifier: E8:3C:F1:9A:D3:6E:7F:A6:1F:C6:B2:D1:66:CE:CE:AA:81:E2:85:49
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018447B0A6579CF91467079614B7D127C55D
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/6DzxmtNuf6YfxrLRZs7OqoHihUk.roa
Signing time: Sat 05 Nov 2022 12:07:50 +0000
ROA not before: Sat 05 Nov 2022 12:07:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203576
IP address blocks: 78.135.110.0/24 maxlen: 24
78.135.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:47:b0:a6:57:9c:f9:14:67:07:96:14:b7:d1:27:c5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Nov 5 12:07:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e83cf19ad36e7fa61fc6b2d166ceceaa81e28549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:1f:11:38:fa:c4:f3:31:f4:73:4d:e3:40:
10:15:77:ad:99:42:f7:c1:28:9e:e6:2f:61:82:73:
83:57:68:22:c6:6b:bd:bb:7d:f3:79:ff:e8:5f:10:
96:9a:af:cf:1f:ec:27:e6:a1:84:39:92:92:eb:f2:
ad:b2:2c:e9:43:e5:c5:d2:60:93:f1:e6:ac:d2:17:
3d:59:24:68:62:7f:b6:61:59:00:3f:56:67:b8:c8:
df:d2:1c:4d:4e:ba:53:83:11:f3:60:4f:ea:84:56:
19:73:38:7f:01:e7:b5:fd:5d:40:25:66:15:29:83:
0a:44:1e:2a:d1:c5:b7:49:8d:83:e3:c3:5b:9d:a7:
55:a3:4e:1c:a4:a6:89:34:2f:6d:e9:42:86:09:70:
ef:3d:c1:9b:1d:97:37:1b:d3:39:50:93:13:e5:b4:
d8:c8:3c:60:83:74:b9:1c:fb:01:52:ad:06:2e:81:
2b:0c:c6:6d:9c:c6:29:1e:7f:86:18:78:b0:09:82:
2f:9d:1e:90:dd:fc:81:94:32:62:ca:c0:f1:0a:9b:
fe:5d:b3:7b:73:03:d1:1c:54:82:fe:8b:3d:0d:df:
0c:af:45:ba:3e:e1:c5:89:5f:69:14:c4:58:18:5a:
d4:b8:b5:ce:30:ec:f3:8f:90:b9:5d:a2:0f:6c:dd:
0b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3C:F1:9A:D3:6E:7F:A6:1F:C6:B2:D1:66:CE:CE:AA:81:E2:85:49
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/6DzxmtNuf6YfxrLRZs7OqoHihUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.89.0/24
78.135.110.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e3:50:dc:06:a5:2d:5b:52:70:bc:af:60:81:0c:82:ac:ef:
c2:e7:33:d2:42:a9:68:9a:cf:e4:3b:39:04:8d:78:fd:cd:75:
40:8a:75:f6:0b:d0:be:2a:4e:ee:cc:2b:b5:31:35:1f:91:9f:
7e:c4:89:03:1e:00:bd:ec:7a:02:1e:c7:91:56:b5:f2:c4:1d:
1f:79:d7:12:81:aa:3b:59:08:ee:3b:2b:87:3d:db:94:d0:84:
82:55:68:37:f3:c5:fa:bd:cc:88:8b:ef:a7:08:f6:68:2b:20:
36:82:1a:72:d3:3e:08:05:08:39:d0:07:16:aa:cf:af:c1:d4:
6e:91:f5:fd:cf:08:17:5b:a2:25:3a:15:89:a7:d7:21:e6:8e:
8b:bd:d5:9b:a5:ad:27:a7:f1:e1:b3:b4:b1:09:8b:93:b8:5b:
17:7a:bb:51:c0:68:e6:0d:a3:2a:d0:cd:6e:66:bb:20:28:2f:
57:cd:24:2e:a0:e3:de:fc:ca:34:5c:18:13:6a:ed:ff:3b:88:
88:64:2a:98:53:a9:1a:01:00:5b:af:fb:f8:67:3a:dd:a4:d8:
0c:07:c8:d4:da:41:a5:b9:11:89:50:ce:10:79:2f:ce:1a:e9:
cd:32:90:5b:eb:16:85:c4:e1:de:02:fb:d0:03:17:79:a0:14:
c2:4d:1e:08
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYRHsKZXnPkUZweWFLfRJ8VdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjIxMTA1MTIwNzUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODNjZjE5YWQzNmU3ZmE2MWZjNmIyZDE2NmNlY2VhYTgxZTI4NTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq10fETj6xPMx9HNN40AQFXetmUL3
wSie5i9hgnODV2gixmu9u33zef/oXxCWmq/PH+wn5qGEOZKS6/KtsizpQ+XF0mCT
8eas0hc9WSRoYn+2YVkAP1ZnuMjf0hxNTrpTgxHzYE/qhFYZczh/Aee1/V1AJWYV
KYMKRB4q0cW3SY2D48NbnadVo04cpKaJNC9t6UKGCXDvPcGbHZc3G9M5UJMT5bTY
yDxgg3S5HPsBUq0GLoErDMZtnMYpHn+GGHiwCYIvnR6Q3fyBlDJiysDxCpv+XbN7
cwPRHFSC/os9Dd8Mr0W6PuHFiV9pFMRYGFrUuLXOMOzzj5C5XaIPbN0LpQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOg88ZrTbn+mH8ay0WbOzqqB4oVJMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvNkR6eG10TnVmNllmeHJMUlpzN09xb0hpaFVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATodZAwQA
ToduMA0GCSqGSIb3DQEBCwUAA4IBAQCc41DcBqUtW1JwvK9ggQyCrO/C5zPSQqlo
ms/kOzkEjXj9zXVAinX2C9C+Kk7uzCu1MTUfkZ9+xIkDHgC97HoCHseRVrXyxB0f
edcSgao7WQjuOyuHPduU0ISCVWg388X6vcyIi++nCPZoKyA2ghpy0z4IBQg50AcW
qs+vwdRukfX9zwgXW6IlOhWJp9ch5o6LvdWbpa0np/Hhs7SxCYuTuFsXertRwGjm
DaMq0M1uZrsgKC9XzSQuoOPe/Mo0XBgTau3/O4iIZCqYU6kaAQBbr/v4ZzrdpNgM
B8jU2kGluRGJUM4QeS/OGunNMpBb6xaFxOHeAvvQAxd5oBTCTR4I
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org