Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/AHG0sohPhEO-L5SMW6EfoXXy-ns.roa
File: AHG0sohPhEO-L5SMW6EfoXXy-ns.roa (raw, json)
Hash identifier: j8DOgZVwncodx6DXOQxBPd/ppHVZTWP2xpKHFsO1jZo=
Subject key identifier: 00:71:B4:B2:88:4F:84:43:BE:2F:94:8C:5B:A1:1F:A1:75:F2:FA:7B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 032E5B55
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/AHG0sohPhEO-L5SMW6EfoXXy-ns.roa
Signing time: Sat 01 Jan 2022 01:54:29 +0000
ROA not before: Sat 01 Jan 2022 01:54:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211634
IP address blocks: 78.135.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53369685 (0x32e5b55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 1 01:54:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0071b4b2884f8443be2f948c5ba11fa175f2fa7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3a:25:c4:9f:04:7d:30:cc:6c:52:6f:87:0e:
8f:e6:78:b3:d2:13:a4:79:ba:63:6b:ae:4f:ca:29:
dc:8f:72:b0:bc:83:30:5f:17:34:c5:c8:6d:89:04:
b4:6b:8c:bb:b2:0c:ee:d9:b6:3e:9a:e9:99:6a:47:
d4:f1:64:02:f6:bb:a5:ec:d4:fa:b5:d9:ff:16:1c:
54:b7:4f:19:43:0b:77:41:46:13:96:83:31:3a:17:
29:51:9f:21:fb:6c:27:52:46:a0:4f:10:74:37:d3:
d3:33:a1:28:f0:d7:85:81:94:11:fe:cc:bc:82:99:
96:b8:85:d3:08:05:7a:a5:61:32:e1:54:4e:c2:d9:
86:13:a4:e7:f8:7c:3e:63:ca:22:39:5f:d1:fd:56:
fc:62:d8:94:86:74:fe:1f:e6:4e:db:3e:3f:33:f5:
13:d8:79:39:a8:48:34:c8:db:93:de:e2:62:c4:f3:
b4:82:db:fe:78:27:30:a1:97:aa:16:da:52:0f:c5:
1c:92:3a:9b:45:8b:7d:9f:fe:91:79:c3:dc:cf:8b:
05:b7:b6:7d:0e:19:7a:b3:fa:0c:e4:bb:9f:b7:a5:
1c:61:7a:43:07:1b:e3:97:74:86:2d:82:50:02:82:
82:0b:85:75:e7:a3:5c:e8:43:0f:ba:8b:09:fc:6c:
a0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:71:B4:B2:88:4F:84:43:BE:2F:94:8C:5B:A1:1F:A1:75:F2:FA:7B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/AHG0sohPhEO-L5SMW6EfoXXy-ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.81.0/24
Signature Algorithm: sha256WithRSAEncryption
87:4b:2a:05:83:7c:db:55:f6:17:52:c7:86:b6:30:5c:19:30:
55:9e:54:e6:55:f6:a1:76:61:03:eb:bb:86:86:8d:40:32:c5:
70:be:12:8e:13:3d:2e:ae:1e:c0:39:c4:09:38:1b:6a:33:f9:
8a:c3:29:52:1f:f5:e3:96:77:59:6c:fc:45:bb:48:72:7e:ac:
f8:20:b0:cf:6e:d7:7e:0c:6d:34:42:b6:98:bd:86:a7:0b:d7:
6b:51:7b:3c:22:93:e0:b6:e8:98:95:4e:34:c6:d6:19:ca:2e:
c7:2f:4b:59:19:54:02:0c:9d:f9:0f:67:70:b6:e4:0e:e2:b8:
54:95:1a:50:0d:5f:cb:82:09:00:ac:15:ce:2f:fb:8d:a9:a5:
24:a9:91:0d:16:39:2a:f1:ca:53:55:b7:5d:98:a3:40:2f:ef:
4c:2a:54:0a:a5:b5:b7:3d:cd:ca:0d:13:6a:d6:88:a8:25:9a:
9d:ef:a8:31:92:ec:8c:3d:d5:48:a7:84:2b:1b:20:2d:19:7d:
44:cf:fc:62:cf:0b:b4:2d:26:fd:81:19:80:eb:0c:95:90:ff:
87:49:d0:1f:4e:f1:9b:5b:d7:1d:6c:55:8a:39:9d:a8:4c:f2:
4a:ea:8a:2f:c8:ef:ef:5a:1c:d4:05:16:9e:6b:77:cc:d1:dc:
a0:f0:ad:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org