Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/DvVpC2mYwYbWi6a_RhrFFJwQqxo.roa
File: DvVpC2mYwYbWi6a_RhrFFJwQqxo.roa (raw, json)
Hash identifier: jz3885S003JFWYxIGekAG1YaUvghJFUkH3o7QH+4tbE=
Subject key identifier: 0E:F5:69:0B:69:98:C1:86:D6:8B:A6:BF:46:1A:C5:14:9C:10:AB:1A
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0332B800
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/DvVpC2mYwYbWi6a_RhrFFJwQqxo.roa
Signing time: Sat 01 Jan 2022 01:54:32 +0000
ROA not before: Sat 01 Jan 2022 01:54:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213083
IP address blocks: 78.135.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53655552 (0x332b800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 1 01:54:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ef5690b6998c186d68ba6bf461ac5149c10ab1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:bf:25:f7:75:d5:51:f1:c4:08:78:1d:e9:
8e:7c:60:15:a0:1e:fb:32:98:23:fc:b6:dc:5e:a2:
41:1a:ab:c4:c6:e7:ea:5e:19:45:5c:6c:2c:5f:75:
6e:00:10:45:05:41:ea:7e:96:fb:f6:5e:2f:f1:05:
e1:c4:a6:e9:72:77:3a:b3:b9:68:79:9e:f5:3f:6a:
bd:95:18:2f:3d:e5:34:0e:10:4d:04:23:d3:58:b6:
6f:d0:79:e4:e1:ea:d7:db:46:ab:f8:74:ab:fd:e3:
05:c6:85:51:c6:ca:ab:d9:28:6a:89:a0:2c:65:e6:
cd:a9:d4:d4:37:89:23:bf:59:3e:65:b8:b5:ae:1a:
62:16:ef:8b:0d:19:5c:aa:51:b1:ff:6e:be:81:cb:
8f:f0:1e:af:89:67:95:d5:32:d3:83:ce:86:1d:d7:
7d:37:d6:79:75:dd:d6:f4:7e:40:bb:95:d6:ce:50:
9c:6f:e6:6a:d1:92:ec:ef:21:3a:02:04:40:70:5b:
f7:ce:f3:09:b0:48:09:49:69:61:bf:fd:0b:0a:b1:
06:6c:62:00:25:ac:8a:39:a6:08:bc:2a:04:54:87:
c6:da:6f:76:86:21:6f:07:04:a9:a8:22:25:c7:d5:
08:41:fa:ad:e5:4c:ba:f4:f3:77:30:ee:6e:de:3a:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F5:69:0B:69:98:C1:86:D6:8B:A6:BF:46:1A:C5:14:9C:10:AB:1A
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/DvVpC2mYwYbWi6a_RhrFFJwQqxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.101.0/24
Signature Algorithm: sha256WithRSAEncryption
69:89:36:f7:0b:d6:ab:5b:12:7d:11:70:cc:97:e1:48:17:31:
70:a9:fd:96:7e:6b:95:5a:1c:22:3a:ea:54:37:4b:c6:0a:c4:
92:26:04:4f:c3:ed:2e:9c:2d:79:29:98:45:39:40:af:4a:62:
1c:e5:6b:10:fc:a7:c5:eb:b4:a4:59:fc:4c:67:b3:8a:a2:b9:
6f:9e:34:02:23:8f:fb:ca:a5:ff:0c:fa:4e:ae:13:17:71:5c:
16:c8:44:3e:a7:d8:4c:a7:56:5b:9e:95:58:5d:25:9c:3c:55:
bd:9f:a1:c9:71:d4:5b:97:d5:c9:b4:d2:aa:86:90:a1:ca:eb:
b9:3e:18:00:c1:d0:4c:67:39:6f:56:d3:fa:b4:6d:e2:f8:0a:
22:50:d0:c8:69:67:b1:9e:ed:b3:04:0c:b4:29:21:00:50:10:
d5:67:f2:a9:6f:52:14:e6:cc:81:d9:a4:4d:e6:78:30:53:18:
96:ff:68:87:11:fe:e9:19:b2:79:d2:98:de:3c:c1:25:be:2f:
b0:8d:61:ee:84:7f:2c:4d:c4:be:3b:8b:dd:f7:a4:68:21:e5:
91:f4:9b:1b:2d:8c:31:52:21:6d:71:6f:ea:62:38:e5:27:85:
ff:5c:16:bb:7c:86:09:4a:2e:79:1b:9d:c5:1d:68:3c:c3:c1:
b4:4d:50:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org