Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Br4F69eDP5pZ7Em_J5weOTa7CCA.roa
File: Br4F69eDP5pZ7Em_J5weOTa7CCA.roa (raw, json)
Hash identifier: 691sPNFfpqr5KU8oKdYPGVYhRnpV96EM6KXKBbbyH34=
Subject key identifier: 06:BE:05:EB:D7:83:3F:9A:59:EC:49:BF:27:9C:1E:39:36:BB:08:20
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 04FC99F3
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Br4F69eDP5pZ7Em_J5weOTa7CCA.roa
Signing time: Wed 29 Jun 2022 12:54:02 +0000
ROA not before: Wed 29 Jun 2022 12:54:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48678
IP address blocks: 78.135.100.0/24 maxlen: 24
188.132.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83663347 (0x4fc99f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 29 12:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06be05ebd7833f9a59ec49bf279c1e3936bb0820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8c:51:d8:b6:ca:f5:5a:88:e4:6b:d4:b7:36:
42:4d:34:83:3b:7f:3b:35:8a:a4:6f:f4:af:5c:43:
e8:d5:ec:cd:ab:b7:bf:67:a6:b6:2d:57:b9:74:fb:
96:83:30:5c:43:a1:6b:98:ac:8e:85:2c:1c:27:aa:
c9:27:dc:15:f0:8f:dc:64:0b:6e:ca:1e:f5:5b:05:
36:53:3a:d7:a1:ef:8f:37:e7:08:34:6c:de:48:a8:
0e:e1:ab:70:23:a2:2f:02:d4:be:a1:f3:f3:c8:2f:
7c:e4:8a:e1:64:e6:d7:86:85:c2:a8:93:76:dd:20:
1b:e2:0d:36:e1:71:93:2b:af:c1:14:6c:4f:e4:d6:
c4:af:47:1b:71:3b:a2:73:82:7f:3b:cf:d4:23:71:
e2:14:18:fc:7a:f6:7c:20:77:d1:53:d4:0d:fe:5a:
a7:b0:f3:7f:f0:b7:cc:ce:de:af:d5:94:4a:7a:3d:
5b:70:a6:2a:1b:e2:c8:8b:c1:76:a6:7f:4c:45:dd:
bc:55:0b:a2:d6:85:32:2f:34:f0:ba:82:8f:a9:7c:
9f:5d:82:04:55:77:56:cb:c7:83:38:1c:9d:c9:de:
67:6f:7e:a4:aa:88:eb:e2:74:e1:13:b7:12:55:e8:
f7:0d:81:34:67:f1:1b:67:11:97:79:1c:8c:7c:d2:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BE:05:EB:D7:83:3F:9A:59:EC:49:BF:27:9C:1E:39:36:BB:08:20
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Br4F69eDP5pZ7Em_J5weOTa7CCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.100.0/24
188.132.130.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:1f:66:21:8f:83:dc:b4:df:8b:45:58:30:df:2a:9f:9c:bc:
51:45:00:c2:f1:0d:cb:6d:ba:21:38:e2:7a:70:e6:6f:af:bf:
c9:58:ef:d1:1e:4d:3f:86:dd:2e:05:69:43:3c:b1:ab:12:3e:
54:af:6b:fe:8c:ba:a9:32:fa:3e:a7:3f:6f:6d:ed:dd:87:85:
80:17:6e:59:b8:3a:ce:e3:6e:b9:24:17:3b:07:d7:c3:e2:32:
34:2b:84:6a:ed:2e:3b:ca:33:43:a2:27:41:bf:4a:28:f1:4c:
cd:69:cb:fe:7e:ed:61:0b:9c:cb:e5:e2:a7:a1:99:ce:49:69:
a0:45:c8:94:46:e3:6a:9f:3b:9e:9e:3d:80:0e:f5:b4:82:05:
b5:58:75:9c:25:44:d2:22:b1:7b:8f:58:2b:37:a6:5e:75:0e:
be:b6:07:3c:fa:99:00:d1:1c:e0:87:b2:e7:f5:e6:ba:0a:0a:
75:64:3c:a5:24:27:3d:a3:f8:ad:fb:fe:d1:1d:9f:46:ab:50:
6b:89:a6:9f:cb:ad:4f:44:f5:4d:e7:27:27:a5:40:e6:95:21:
6f:a5:2e:73:10:4f:1a:48:2b:6b:96:4c:10:2e:bd:3f:13:7f:
10:c9:d3:ec:bf:a5:15:a2:2b:37:64:a6:f7:02:0c:84:11:bc:
90:5f:eb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org