Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JkncMjoUY4chQUJj7dbT-pAI6vU.roa
File: JkncMjoUY4chQUJj7dbT-pAI6vU.roa (raw, json)
Hash identifier: Urt8q4YDWQZsunlqZ6jk9x8sO+U4pCxFBTLpj28j+TM=
Subject key identifier: 26:49:DC:32:3A:14:63:87:21:41:42:63:ED:D6:D3:FA:90:08:EA:F5
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0325AB44
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JkncMjoUY4chQUJj7dbT-pAI6vU.roa
Signing time: Sat 01 Jan 2022 01:54:25 +0000
ROA not before: Sat 01 Jan 2022 01:54:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 78.135.83.199/32 maxlen: 32
78.135.83.196/32 maxlen: 32
78.135.83.225/32 maxlen: 32
78.135.83.224/32 maxlen: 32
78.135.83.207/32 maxlen: 32
78.135.83.206/32 maxlen: 32
78.135.83.204/32 maxlen: 32
78.135.83.203/32 maxlen: 32
78.135.83.201/32 maxlen: 32
78.135.83.223/32 maxlen: 32
78.135.83.222/32 maxlen: 32
78.135.83.221/32 maxlen: 32
78.135.83.220/32 maxlen: 32
78.135.83.219/32 maxlen: 32
78.135.67.0/24 maxlen: 32
78.135.83.218/32 maxlen: 32
78.135.83.0/24 maxlen: 32
78.135.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52800324 (0x325ab44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 1 01:54:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2649dc323a14638721414263edd6d3fa9008eaf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bd:60:01:dd:57:95:77:6b:73:98:b1:7a:09:
2d:df:ad:af:58:1b:2c:d8:7b:5e:45:25:ce:e8:34:
ca:e1:09:a0:d9:2c:36:dc:4a:29:50:40:1b:6c:a8:
d3:16:12:68:04:63:89:cf:c3:d5:7a:b9:b7:77:f9:
ea:71:43:86:a1:9f:8d:b7:b5:9d:cd:78:ed:17:da:
5f:51:f6:1b:6b:19:ff:76:b1:d0:e7:b1:ef:02:6a:
d1:57:a1:61:f4:49:36:41:c6:15:96:eb:56:e2:07:
cc:23:06:14:89:58:9c:3b:d4:2d:12:79:ed:21:d1:
12:8f:14:dc:29:41:76:42:6f:09:62:cf:e4:7e:cf:
15:5c:00:fb:a1:56:65:30:e0:45:06:99:85:43:b3:
d1:1f:96:7a:8b:05:16:c2:53:43:06:ae:ff:5f:d4:
ca:89:12:25:74:57:cf:ca:7a:c2:bb:f1:ff:5f:e0:
50:e4:e7:c4:a1:ae:a1:90:2e:44:01:a9:3b:63:f4:
39:62:25:e9:05:40:86:29:0d:11:06:31:fe:cf:cf:
99:a6:c7:64:eb:80:f5:a1:62:55:59:7b:28:9b:0d:
67:b8:44:bd:81:de:ee:d9:74:a7:ca:da:25:b3:f2:
78:2d:14:2a:33:0e:a1:42:26:25:ce:4f:d0:c4:77:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:49:DC:32:3A:14:63:87:21:41:42:63:ED:D6:D3:FA:90:08:EA:F5
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JkncMjoUY4chQUJj7dbT-pAI6vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.67.0/24
78.135.82.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:e8:ba:c8:78:93:7a:16:bd:61:4a:72:38:ad:2c:6c:dd:73:
46:54:b6:54:09:00:86:57:25:ec:ba:45:27:92:46:90:08:67:
c1:2b:26:94:1d:ee:a3:8e:63:bb:3c:0e:97:cf:20:f4:ea:a8:
0f:0f:e4:bf:9e:06:28:87:64:52:b1:b1:28:41:b0:63:7a:e5:
91:b1:7b:9f:fe:2b:9a:9b:7d:b8:15:6a:42:19:2d:c7:21:9a:
0f:fb:b6:e8:25:d3:40:11:3c:07:d9:3d:07:2a:42:4e:99:2f:
d7:f8:9f:2b:ad:84:b8:26:41:93:ab:78:6b:09:2a:eb:bc:42:
ff:5f:6b:c9:2b:6f:81:62:15:11:a1:98:3f:cb:c0:46:06:93:
c9:9a:00:95:53:27:76:29:7e:66:56:82:4f:6f:3a:aa:64:29:
49:0e:88:23:09:15:54:b1:93:48:07:53:2a:00:bf:ae:cf:d1:
45:47:df:34:ba:23:53:bf:aa:49:30:de:7f:60:c5:ae:89:c9:
72:b1:37:ff:f1:f5:59:d4:4b:f9:c3:57:f6:23:a1:92:df:c0:
33:02:80:c6:7b:ee:de:11:be:b3:b8:16:44:f7:2c:a3:8a:e8:
04:b7:0e:a4:21:c1:98:87:97:50:ff:65:b9:4e:f4:2d:71:bb:
8d:c3:22:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org