Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/6L95czWbtkMppBrBGGDk9MIfNec.roa
File: 6L95czWbtkMppBrBGGDk9MIfNec.roa (raw, json)
Hash identifier: +h/tGxigNhSvF7dWDYTJ16Vntpk3b5R5Ws+jue9u9+E=
Subject key identifier: E8:BF:79:73:35:9B:B6:43:29:A4:1A:C1:18:60:E4:F4:C2:1F:35:E7
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 051422FF
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/6L95czWbtkMppBrBGGDk9MIfNec.roa
Signing time: Wed 29 Jun 2022 14:02:02 +0000
ROA not before: Wed 29 Jun 2022 14:02:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210666
IP address blocks: 212.68.60.0/24 maxlen: 24
212.68.59.0/24 maxlen: 24
78.135.89.0/24 maxlen: 24
78.135.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85205759 (0x51422ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 29 14:02:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8bf7973359bb64329a41ac11860e4f4c21f35e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:60:6d:27:8f:e0:93:a6:e0:22:8e:c2:3a:d1:
90:84:db:be:30:06:fc:12:7a:c3:71:78:fa:ee:9d:
2c:8c:cb:fc:2c:86:51:09:d0:4f:22:24:81:3b:4d:
3f:db:6b:da:03:ec:49:42:19:90:94:99:1a:9c:9f:
63:bf:f0:fa:66:d1:5c:6a:f3:45:61:95:fc:03:ba:
7a:88:32:a6:85:4b:1c:08:58:64:15:60:29:5b:90:
b8:7a:74:d1:fe:3d:be:46:4e:77:b5:0e:b2:0d:55:
aa:3c:5d:ac:ee:1c:0a:15:77:39:fc:c0:4f:ac:68:
24:ba:21:4e:39:f0:96:dc:36:11:ca:b1:5c:98:a7:
83:82:f5:0b:0f:b6:dd:75:58:15:73:f0:66:00:9c:
ea:25:5d:38:09:7b:8d:ec:79:52:f5:04:99:5e:68:
3e:91:4d:30:53:8c:3a:1a:fd:16:04:8e:46:04:d8:
a0:db:d1:3d:46:9e:88:eb:9d:8f:e6:6f:e4:52:2e:
cd:63:32:cc:67:d0:27:5f:6b:74:14:90:70:ae:b6:
dd:98:e4:4e:8f:77:31:8c:aa:1b:4f:44:21:dd:52:
3d:c4:12:62:82:24:58:7b:3a:31:47:15:63:d9:1a:
ee:2d:93:9c:f6:d0:06:c8:23:95:1b:3b:db:45:3e:
2b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BF:79:73:35:9B:B6:43:29:A4:1A:C1:18:60:E4:F4:C2:1F:35:E7
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/6L95czWbtkMppBrBGGDk9MIfNec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.88.0/23
212.68.59.0-212.68.60.255
Signature Algorithm: sha256WithRSAEncryption
41:7a:cc:88:3c:25:f5:c5:72:81:f1:d5:df:dd:c4:f6:b9:3c:
c9:4a:78:97:c4:4e:0b:ef:6f:f8:c8:dd:13:f2:7b:0e:f1:2e:
4e:86:f2:27:da:0c:a5:5e:ae:8e:81:c4:63:e4:84:6a:8a:4a:
d4:1d:8a:a3:24:b3:2b:16:64:46:43:6b:7e:13:a5:55:82:11:
35:b3:8f:43:84:fd:1e:b9:70:63:7b:3a:40:aa:5b:dc:1f:68:
f2:06:c4:94:71:e4:58:e3:e8:70:9b:32:8b:83:f5:71:e2:e8:
02:62:19:08:4a:00:9b:0f:bd:eb:96:7e:a5:2f:7a:8c:a9:e7:
fd:40:85:a0:f7:9f:0d:aa:de:cb:44:0e:f7:4c:ca:f3:bc:d9:
cb:46:62:f9:c1:6d:ce:10:7e:3d:a8:06:ca:51:e8:5b:36:e8:
66:0a:5b:64:5c:38:af:62:45:d9:17:e5:75:4c:81:12:cf:e3:
7f:4e:89:45:f9:06:b3:ee:c3:50:18:50:f7:cd:cd:42:11:6f:
90:07:3a:22:e5:8b:b9:53:bc:b5:e8:03:f1:e2:f4:3e:c0:01:
95:d7:51:8d:13:f3:34:91:8f:23:d6:f2:52:e7:99:3d:ea:7d:
7d:a2:4b:13:c2:50:e4:5b:93:fa:be:f2:b0:2e:70:fc:76:04:
af:fc:b9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org