Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/H6O-JKUCnQwWYNlP4j1hcn7n2ik.roa
File: H6O-JKUCnQwWYNlP4j1hcn7n2ik.roa (raw, json)
Hash identifier: WWXEpIsTY2KIuxtmgeOO4a6fcZu4EVQ2XsLZC0o+WZQ=
Subject key identifier: 1F:A3:BE:24:A5:02:9D:0C:16:60:D9:4F:E2:3D:61:72:7E:E7:DA:29
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0321B14F
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/H6O-JKUCnQwWYNlP4j1hcn7n2ik.roa
Signing time: Sat 01 Jan 2022 01:54:22 +0000
ROA not before: Sat 01 Jan 2022 01:54:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48678
IP address blocks: 78.135.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52539727 (0x321b14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 1 01:54:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fa3be24a5029d0c1660d94fe23d61727ee7da29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:e0:49:13:0f:5c:ae:97:b5:71:a2:30:d8:
2a:44:c4:11:25:f0:bd:29:bb:32:1f:42:63:4f:5f:
48:4a:4b:26:f7:1b:b0:04:52:64:09:bb:80:98:02:
2e:70:b3:35:24:5c:14:63:2d:f9:c0:df:91:9c:d9:
0d:c3:fa:4f:15:5b:33:3e:e3:8d:85:ca:3b:5e:b9:
d1:3c:ec:7d:32:95:64:74:5d:06:64:d4:d2:27:68:
da:28:b3:cc:cb:b7:55:8b:bc:35:3d:8e:d4:99:63:
b7:c0:d0:3c:93:30:15:b2:09:de:70:91:be:1a:44:
80:b2:b7:eb:34:1f:1e:0b:3d:41:51:0f:d3:fb:a4:
ab:ea:ac:b5:52:7b:d1:f6:bb:a1:7e:ef:74:ed:3e:
d7:c5:64:47:7c:1c:e4:c8:15:4a:bf:75:b8:ee:d9:
f7:a6:4d:cb:23:50:fe:a5:01:55:c7:79:b0:a9:12:
97:eb:96:ee:16:bd:19:f4:d1:73:55:4f:88:8a:b6:
9f:b8:92:cc:52:6c:87:d9:2d:ce:55:29:b1:a6:cf:
52:0e:63:d1:05:07:4f:e1:b2:ad:c3:0f:47:8a:64:
ff:73:0b:aa:39:76:cd:b3:f6:54:29:bd:10:32:9b:
44:8f:8b:f7:1c:fc:91:5a:f5:a5:ed:a7:32:76:77:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A3:BE:24:A5:02:9D:0C:16:60:D9:4F:E2:3D:61:72:7E:E7:DA:29
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/H6O-JKUCnQwWYNlP4j1hcn7n2ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.100.0/24
Signature Algorithm: sha256WithRSAEncryption
07:97:3d:3d:ad:cd:02:e7:54:6a:53:7c:40:9e:77:86:ad:fd:
98:33:15:94:d1:e1:2b:5d:c2:cf:db:0c:47:a7:cd:8e:95:83:
bd:eb:b5:d7:bb:e4:b5:e9:6e:29:f7:f5:83:cf:eb:22:06:31:
45:29:21:b8:70:b6:65:94:6b:bb:a1:ed:72:3e:9c:80:b4:c7:
fb:ad:25:ab:d6:3b:63:15:5a:70:ed:26:cb:aa:d4:80:46:a6:
c0:fe:99:eb:d9:ae:c6:31:27:12:86:2e:d5:bc:d0:59:45:0b:
f9:25:e6:46:81:aa:3e:e8:c2:8f:23:01:b3:a9:e5:75:ac:cf:
3b:61:7c:77:9d:5d:d4:69:72:c1:bf:95:df:16:57:79:15:19:
d0:3d:0b:e9:7a:53:86:29:86:f0:70:22:f6:ba:24:71:4d:af:
ed:6e:3d:ab:dc:eb:2f:ac:8f:3b:81:56:c6:21:f3:bc:f4:c2:
96:7f:97:4b:83:ed:d6:56:22:cd:50:6f:cd:66:20:17:4d:7c:
c4:4e:ad:2d:94:08:99:ba:21:a3:f9:79:e9:e0:93:10:10:77:
ff:b0:1e:21:53:0d:f4:b8:68:f7:82:b3:5c:39:fd:a9:45:48:
2f:0f:aa:27:1a:fb:1f:0c:8f:59:d6:23:49:81:2b:48:06:eb:
11:a4:1d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org