Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/CejC7rmc3uH76UXDp8MSwmnqJMA.roa
File: CejC7rmc3uH76UXDp8MSwmnqJMA.roa (raw, json)
Hash identifier: ez30zqJG6pEDS+MgsR2vlbzAPM2jqREWFpDaymJ0ze8=
Subject key identifier: 09:E8:C2:EE:B9:9C:DE:E1:FB:E9:45:C3:A7:C3:12:C2:69:EA:24:C0
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018318505D642BDE6748ED8A35268867ECD9
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/CejC7rmc3uH76UXDp8MSwmnqJMA.roa
Signing time: Wed 07 Sep 2022 14:17:43 +0000
ROA not before: Wed 07 Sep 2022 14:17:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 78.135.67.0/24 maxlen: 24
188.132.201.0/24 maxlen: 24
78.135.83.0/24 maxlen: 24
78.135.82.0/24 maxlen: 24
78.135.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:18:50:5d:64:2b:de:67:48:ed:8a:35:26:88:67:ec:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Sep 7 14:17:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09e8c2eeb99cdee1fbe945c3a7c312c269ea24c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:69:a7:6c:61:19:3e:65:73:07:2b:24:4c:
a1:90:6d:81:ca:a4:d5:52:a7:a3:10:52:e4:d9:d0:
86:44:e5:92:78:f8:8f:f2:f6:b4:30:9c:4b:55:ab:
64:95:2a:be:a0:66:69:be:78:ac:85:df:ae:03:c3:
77:29:1a:3c:ab:8d:16:e9:cc:b3:92:e4:dc:7f:cd:
de:db:fd:3e:4f:ec:0d:a0:5d:78:cf:26:16:a4:c3:
79:58:28:e6:09:fb:84:63:d5:14:e7:f3:13:6f:5b:
f3:89:ee:05:fd:ce:76:b4:12:33:cd:99:b7:fb:37:
5b:69:03:3f:e9:23:84:8c:ad:5b:d1:65:8e:b6:43:
cb:b9:37:72:7e:94:ed:e4:d9:c1:21:24:e0:60:8d:
12:96:a7:a6:4a:27:ea:9a:b2:3b:11:d9:96:0a:bb:
20:10:09:fe:0c:fd:2d:12:e2:cb:a0:ca:0e:c3:b2:
8a:8e:37:00:79:78:af:f2:30:2e:43:37:9a:25:ca:
ac:47:33:0f:de:e8:3e:cd:a2:a5:ab:a9:e5:62:4e:
f2:63:8f:15:9c:33:a4:8a:61:2d:ce:a6:a8:da:9c:
a3:91:14:ca:3c:a6:5e:2a:05:d2:a5:32:28:90:f7:
e3:14:50:5f:0e:08:9f:fd:50:e3:76:af:6d:35:07:
67:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E8:C2:EE:B9:9C:DE:E1:FB:E9:45:C3:A7:C3:12:C2:69:EA:24:C0
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/CejC7rmc3uH76UXDp8MSwmnqJMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.67.0/24
78.135.81.0-78.135.83.255
188.132.201.0/24
Signature Algorithm: sha256WithRSAEncryption
85:12:d5:df:1d:25:a0:2e:19:a3:f3:1f:4c:12:de:88:3f:6b:
23:92:fc:0d:7e:bf:e7:c7:7e:73:fb:ae:9c:44:e6:df:cb:15:
b5:a0:b1:ee:5d:a5:31:21:54:33:30:f2:c9:16:a7:a3:a4:ae:
ea:a5:31:bd:e9:e1:e0:87:4e:4e:1b:64:d0:ce:1b:ee:96:ef:
88:94:1a:55:71:43:92:52:f1:ef:09:d1:3e:5d:6c:2d:d6:6e:
24:9e:09:fd:c8:89:e4:42:ba:18:9c:b8:0c:55:bc:cf:7a:79:
0c:c7:87:d8:26:bc:62:de:48:81:9f:fd:63:c8:cb:04:20:a6:
51:02:72:fe:03:cb:19:c9:13:56:a5:24:59:73:85:42:39:9a:
a6:eb:a4:66:1d:fd:c8:06:1c:1f:13:3d:d8:6a:ed:ce:8c:8e:
23:dc:d9:68:17:3e:e5:f2:bc:56:0f:c9:8d:a0:fb:90:9f:3b:
23:4a:f6:db:53:0f:f1:1f:8c:dd:44:ca:f7:4d:2b:a0:ed:89:
86:30:23:71:c9:8c:80:60:d6:6e:ca:79:19:4f:3b:a5:71:57:
a7:f3:74:a9:6b:06:14:a6:2d:aa:be:c1:d6:4c:f9:f8:ed:68:
0d:35:ce:31:6d:00:bc:2c:65:b4:4e:7b:d3:e1:bf:2a:9e:67:
0b:d3:a4:c5
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYMYUF1kK95nSO2KNSaIZ+zZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjIwOTA3MTQxNzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWU4YzJlZWI5OWNkZWUxZmJlOTQ1YzNhN2MzMTJjMjY5ZWEyNGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLNpp2xhGT5lcwcrJEyhkG2ByqTV
UqejEFLk2dCGROWSePiP8va0MJxLVatklSq+oGZpvnishd+uA8N3KRo8q40W6cyz
kuTcf83e2/0+T+wNoF14zyYWpMN5WCjmCfuEY9UU5/MTb1vzie4F/c52tBIzzZm3
+zdbaQM/6SOEjK1b0WWOtkPLuTdyfpTt5NnBISTgYI0SlqemSifqmrI7EdmWCrsg
EAn+DP0tEuLLoMoOw7KKjjcAeXiv8jAuQzeaJcqsRzMP3ug+zaKlq6nlYk7yY48V
nDOkimEtzqao2pyjkRTKPKZeKgXSpTIokPfjFFBfDgif/VDjdq9tNQdnswIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFAnowu65nN7h++lFw6fDEsJp6iTAMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvQ2VqQzdybWMzdUg3NlVYRHA4TVN3bW5xSk1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQATodDMAwD
BABOh1EDBAJOh1ADBAC8hMkwDQYJKoZIhvcNAQELBQADggEBAIUS1d8dJaAuGaPz
H0wS3og/ayOS/A1+v+fHfnP7rpxE5t/LFbWgse5dpTEhVDMw8skWp6OkruqlMb3p
4eCHTk4bZNDOG+6W74iUGlVxQ5JS8e8J0T5dbC3WbiSeCf3IieRCuhicuAxVvM96
eQzHh9gmvGLeSIGf/WPIywQgplECcv4DyxnJE1alJFlzhUI5mqbrpGYd/cgGHB8T
Pdhq7c6MjiPc2WgXPuXyvFYPyY2g+5CfOyNK9ttTD/EfjN1EyvdNK6DtiYYwI3HJ
jIBg1m7KeRlPO6VxV6fzdKlrBhSmLaq+wdZM+fjtaA01zjFtALwsZbROe9Phvyqe
ZwvTpMU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org