Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/FwxMdg6Uo9ixcpireLvAQuJAzuc.roa
File: FwxMdg6Uo9ixcpireLvAQuJAzuc.roa (raw, json)
Hash identifier: ery9f1XOx0DEUbshynaJM/Eta6l1qLlj2FmFtLfY6yw=
Subject key identifier: 17:0C:4C:76:0E:94:A3:D8:B1:72:98:AB:78:BB:C0:42:E2:40:CE:E7
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018392E6E4ECEB88B1A2762571C38BED9218
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/FwxMdg6Uo9ixcpireLvAQuJAzuc.roa
Signing time: Sat 01 Oct 2022 09:35:48 +0000
ROA not before: Sat 01 Oct 2022 09:35:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206375
IP address blocks: 78.135.94.0/24 maxlen: 24
78.135.95.0/24 maxlen: 24
188.132.132.0/24 maxlen: 24
188.132.133.0/24 maxlen: 24
188.132.247.0/24 maxlen: 24
188.132.162.0/24 maxlen: 24
78.135.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:92:e6:e4:ec:eb:88:b1:a2:76:25:71:c3:8b:ed:92:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 1 09:35:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=170c4c760e94a3d8b17298ab78bbc042e240cee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:eb:bb:6d:28:e2:00:62:c8:41:84:5d:60:dc:
bf:e6:f9:83:94:a1:59:63:0f:b5:a6:5a:ef:e1:1a:
87:22:ad:c9:ac:b4:c6:e8:d0:2a:f0:75:43:71:00:
24:71:d6:5c:37:a0:07:11:63:1b:9d:95:90:9f:90:
09:3e:b7:02:37:8e:db:c2:57:a1:36:fe:be:e0:0d:
88:be:34:03:00:c3:b6:2c:6d:50:a9:e5:f7:b5:a5:
65:58:4d:45:45:e2:51:07:50:48:aa:5d:eb:0d:ce:
d2:88:f7:a7:54:98:bf:e5:76:87:ff:fb:fb:5b:63:
f7:80:ae:e1:5c:a4:2f:a2:fb:00:2e:db:f5:2f:0c:
86:9f:52:56:86:28:ba:89:85:18:b3:35:ed:d4:c3:
83:67:9b:4b:ca:e3:d3:08:a3:04:bf:4c:cd:17:27:
f8:68:1a:a6:98:8d:2f:b3:58:4d:4a:0f:cd:ac:24:
8b:cf:b5:94:4b:18:ea:2f:9f:2c:8d:5d:c9:31:9b:
ca:2b:9b:a8:18:95:7c:c5:97:06:62:04:92:01:a9:
c4:ca:f8:32:7a:3f:b8:0c:d0:b9:d4:b3:f9:78:c9:
ce:6e:71:8e:f7:35:4c:aa:1d:6a:90:a3:d8:48:ce:
1e:d4:91:a1:2a:82:11:d5:00:41:24:e5:51:ed:25:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0C:4C:76:0E:94:A3:D8:B1:72:98:AB:78:BB:C0:42:E2:40:CE:E7
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/FwxMdg6Uo9ixcpireLvAQuJAzuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.91.0/24
78.135.94.0/23
188.132.132.0/23
188.132.162.0/24
188.132.247.0/24
Signature Algorithm: sha256WithRSAEncryption
58:77:91:f2:af:b1:a4:c3:c8:34:33:5d:a5:a7:48:2c:16:67:
70:1c:5a:fa:2b:f4:fd:f9:81:4b:e0:f1:6f:ad:95:3f:56:44:
7d:a6:2e:10:87:ab:60:8d:d5:cf:a8:99:13:9f:94:ff:b3:0c:
1a:c9:1e:21:a2:4a:70:ee:d0:dd:3d:2b:ec:cf:10:ac:cd:53:
24:fe:47:6d:31:bb:76:68:83:4b:b8:8a:1e:c5:d3:25:c1:e5:
c6:e5:13:84:28:b6:7c:d0:59:ee:ac:0f:d9:11:90:9b:13:42:
c0:35:c2:29:09:26:c0:c8:0a:56:9a:79:2a:71:34:f8:55:6e:
5a:2f:b5:89:1b:6e:93:33:04:b4:99:b4:05:af:e2:d3:99:1d:
52:d5:e8:e8:59:c4:09:d6:ef:f6:1e:15:2f:02:a4:10:82:be:
90:87:ab:1d:1b:86:d0:e3:97:3f:19:70:5c:46:34:08:f2:cc:
49:3f:95:40:87:7d:9d:94:bd:4a:a5:ed:2e:8b:99:45:dc:5d:
7b:09:0b:83:1f:c1:87:c1:d7:6a:ab:da:44:be:3a:49:0a:3f:
1f:e3:9f:59:aa:e7:cb:f8:2a:07:d2:14:11:cb:66:87:01:83:
dc:6c:f1:72:c1:9a:e7:47:c0:13:76:df:c3:51:b0:f7:a4:c1:
3d:a6:be:06
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYOS5uTs64ixonYlccOL7ZIYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjIxMDAxMDkzNTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzBjNGM3NjBlOTRhM2Q4YjE3Mjk4YWI3OGJiYzA0MmUyNDBjZWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+u7bSjiAGLIQYRdYNy/5vmDlKFZ
Yw+1plrv4RqHIq3JrLTG6NAq8HVDcQAkcdZcN6AHEWMbnZWQn5AJPrcCN47bwleh
Nv6+4A2IvjQDAMO2LG1QqeX3taVlWE1FReJRB1BIql3rDc7SiPenVJi/5XaH//v7
W2P3gK7hXKQvovsALtv1LwyGn1JWhii6iYUYszXt1MODZ5tLyuPTCKMEv0zNFyf4
aBqmmI0vs1hNSg/NrCSLz7WUSxjqL58sjV3JMZvKK5uoGJV8xZcGYgSSAanEyvgy
ej+4DNC51LP5eMnObnGO9zVMqh1qkKPYSM4e1JGhKoIR1QBBJOVR7SVxPwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFBcMTHYOlKPYsXKYq3i7wELiQM7nMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvRnd4TWRnNlVvOWl4Y3BpcmVMdkFRdUpBenVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATodbAwQB
TodeAwQBvISEAwQAvISiAwQAvIT3MA0GCSqGSIb3DQEBCwUAA4IBAQBYd5Hyr7Gk
w8g0M12lp0gsFmdwHFr6K/T9+YFL4PFvrZU/VkR9pi4Qh6tgjdXPqJkTn5T/swwa
yR4hokpw7tDdPSvszxCszVMk/kdtMbt2aINLuIoexdMlweXG5ROEKLZ80FnurA/Z
EZCbE0LANcIpCSbAyApWmnkqcTT4VW5aL7WJG26TMwS0mbQFr+LTmR1S1ejoWcQJ
1u/2HhUvAqQQgr6Qh6sdG4bQ45c/GXBcRjQI8sxJP5VAh32dlL1Kpe0ui5lF3F17
CQuDH8GHwddqq9pEvjpJCj8f459ZqufL+CoH0hQRy2aHAYPcbPFywZrnR8ATdt/D
UbD3pME9pr4G
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org