Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/7GjOpON9yPQ_wenmLRjt0FukBo4.roa
File: 7GjOpON9yPQ_wenmLRjt0FukBo4.roa (raw, json)
Hash identifier: QoXx3zV7Wip2vjpBr5YYS0WtGb9Sq12z6lOXRHbe8Vs=
Subject key identifier: EC:68:CE:A4:E3:7D:C8:F4:3F:C1:E9:E6:2D:18:ED:D0:5B:A4:06:8E
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 04302716
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/7GjOpON9yPQ_wenmLRjt0FukBo4.roa
Signing time: Tue 05 Apr 2022 15:15:41 +0000
ROA not before: Tue 05 Apr 2022 15:15:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48678
IP address blocks: 78.135.105.0/24 maxlen: 24
78.135.100.0/24 maxlen: 24
188.132.156.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70264598 (0x4302716)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 5 15:15:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec68cea4e37dc8f43fc1e9e62d18edd05ba4068e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ba:f0:ff:47:c0:ec:01:69:a5:62:81:7a:90:
a7:75:50:fd:c9:15:3b:61:30:c9:45:58:be:3f:ac:
e3:3d:62:75:d5:30:dc:96:18:fe:7e:d8:36:31:4a:
1a:75:6c:c0:4d:bd:05:63:13:14:d5:17:bb:ea:1c:
78:81:5a:06:b9:2e:79:0b:5d:6d:1d:91:b1:9b:d9:
0d:07:46:23:ce:71:bd:d4:02:38:d2:ee:1e:85:6a:
fd:78:b0:ce:2b:df:7d:ef:dc:26:a9:94:36:90:57:
a8:1f:61:73:4b:ba:93:c1:0a:bf:1b:c1:9f:e4:fb:
32:e4:57:b2:e8:79:88:38:49:36:1c:12:28:10:ef:
aa:01:e8:46:6b:7d:80:2b:41:0b:59:4c:32:c2:7e:
e4:21:16:f6:a8:1d:41:ef:a3:b9:50:fe:a6:f2:cb:
59:a4:30:59:e5:b6:d0:79:fe:d4:68:af:1e:5b:86:
ca:42:15:73:30:85:9d:d0:5f:3a:38:e7:ee:fe:01:
19:d7:ac:72:90:e9:dc:71:d1:ca:cc:69:9c:4a:42:
6a:20:1f:49:59:ec:1a:59:3b:2d:8a:e7:20:79:8b:
8a:f7:c4:f0:ff:fb:58:61:51:76:85:f0:bd:55:f3:
a9:b4:96:72:06:ed:5d:b6:e5:60:99:be:87:0e:0e:
3b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:68:CE:A4:E3:7D:C8:F4:3F:C1:E9:E6:2D:18:ED:D0:5B:A4:06:8E
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/7GjOpON9yPQ_wenmLRjt0FukBo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.100.0/24
78.135.105.0/24
188.132.156.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:c4:74:54:95:7d:c3:1b:33:85:0f:44:f2:cf:22:dd:70:09:
7f:02:54:4a:c1:fa:5f:e6:b2:f6:d9:6c:4e:c1:c3:1d:15:f0:
f0:35:a2:a5:52:d5:c1:4f:20:a4:6f:a0:be:9a:97:7d:29:df:
77:3c:15:85:84:ba:92:4a:b5:b9:b5:4b:77:a6:fb:7b:05:f3:
6a:9f:76:96:86:b8:b4:08:41:9d:70:54:bd:a5:ca:eb:9d:4c:
53:82:ba:20:f6:0a:0f:ec:bd:15:6a:ad:3f:da:86:ec:92:e5:
a7:67:01:ac:60:f1:db:bf:cd:24:68:0c:35:cc:5b:cc:bf:7a:
55:7d:0a:11:92:6b:0c:ea:2e:9e:7e:90:2c:4f:63:53:03:6a:
cf:88:4d:e0:86:ae:47:17:e9:d4:93:68:88:52:ae:f6:17:d7:
6d:47:6c:0e:76:45:1e:66:9e:11:64:6a:c6:02:95:6d:09:6b:
1b:f7:f5:75:eb:73:62:b4:30:8e:42:46:2a:a3:2c:49:9e:bc:
a0:74:d3:99:e8:16:0b:6f:27:9a:8b:e1:f7:71:36:e0:7b:96:
ee:ce:52:a1:ff:54:2f:5e:32:dc:d4:ab:75:c6:94:b0:de:6b:
1c:da:4a:18:a5:b3:e0:bc:61:39:c4:47:2c:e4:7e:6b:56:26:
e6:f6:9e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:43 2024 by rpki-client on console-fra.rpki-client.org