Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Kyuc9j_QpYMmE6HHGl4u5uLfxWQ.roa
File: Kyuc9j_QpYMmE6HHGl4u5uLfxWQ.roa (raw, json)
Hash identifier: xCjVS2i0uH1rZO4SdJOjMwpKkSl1F7qx6sfrNM2VsTg=
Subject key identifier: 2B:2B:9C:F6:3F:D0:A5:83:26:13:A1:C7:1A:5E:2E:E6:E2:DF:C5:64
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 031EDC0C
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Kyuc9j_QpYMmE6HHGl4u5uLfxWQ.roa
Signing time: Sat 01 Jan 2022 01:54:21 +0000
ROA not before: Sat 01 Jan 2022 01:54:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29399
IP address blocks: 78.135.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52354060 (0x31edc0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 1 01:54:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b2b9cf63fd0a5832613a1c71a5e2ee6e2dfc564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:00:23:03:18:2d:ab:ad:41:04:49:5c:a0:
95:78:a3:6b:a4:22:87:db:af:c6:25:85:cb:9a:17:
38:8c:2c:b5:3c:2a:aa:51:2a:6d:1a:62:30:2e:b5:
d3:d8:b6:a5:2e:6e:bc:01:8d:c8:65:c6:6a:c0:0e:
b7:c1:e7:76:a6:62:ce:c0:5b:da:82:0f:71:58:7a:
9f:4a:cc:85:0f:6c:69:a1:14:a4:ec:a6:e8:2f:60:
4c:a8:98:74:10:f6:38:44:64:90:63:0f:d2:c6:44:
eb:80:b2:93:cf:ab:c3:50:a8:07:fb:4a:6d:51:8c:
6a:f9:be:f8:24:08:7a:1e:e0:5a:7d:5f:0a:32:b8:
c4:65:79:6d:78:0e:ab:6b:77:9b:40:56:b9:35:4a:
81:77:b0:8d:8d:bd:c4:e3:9e:38:cc:a1:c3:c5:e2:
f3:59:aa:c5:b9:00:b1:e4:d0:ea:80:f3:7f:6c:37:
05:8d:b4:7f:11:d5:6c:2a:15:d3:12:6a:55:7e:fb:
ed:b4:79:d1:9a:e1:08:b0:18:15:f1:1d:37:98:7a:
7e:aa:65:cf:10:b1:34:17:be:01:19:5a:ba:d0:77:
f0:c7:ee:15:0e:85:d4:67:d9:78:41:d6:cb:84:66:
27:3d:4e:8d:90:73:82:09:87:97:d5:15:3e:ca:98:
60:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2B:9C:F6:3F:D0:A5:83:26:13:A1:C7:1A:5E:2E:E6:E2:DF:C5:64
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Kyuc9j_QpYMmE6HHGl4u5uLfxWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.73.0/24
Signature Algorithm: sha256WithRSAEncryption
47:10:04:43:c8:e1:c5:14:5a:70:c5:47:0e:86:97:48:02:17:
93:5d:c4:cd:6a:6b:1c:10:dc:bc:54:3c:c9:6c:73:fd:95:07:
f4:88:0d:d3:db:b4:79:ee:78:d3:e2:ac:32:ee:45:de:0f:58:
ed:b7:99:b7:8a:55:22:8d:15:cf:59:7e:18:b5:a7:ab:c2:62:
bb:f9:d4:60:80:d1:7f:fe:ea:8a:fe:a3:4f:f9:f0:cd:7f:b8:
a1:bd:25:a3:03:7b:f3:3f:f6:f2:c1:59:96:d6:15:3a:57:93:
3f:f9:ad:9a:52:04:3c:cf:fa:9c:2c:f6:69:ee:20:98:29:98:
38:33:d9:ed:05:a3:17:62:80:2c:44:48:b7:6c:9b:dd:57:a2:
0a:23:23:d1:07:bd:b7:68:f4:73:39:6a:2e:3f:32:e3:01:fd:
86:11:2b:9d:86:40:ba:61:29:c0:9f:b6:ef:a1:c3:4c:26:1e:
3c:ac:2f:5f:fe:14:fa:3e:d2:d7:d3:8a:3b:95:56:2e:9a:90:
3e:42:8b:a2:4d:71:49:01:f5:d8:50:34:e5:f3:b3:75:65:18:
cc:34:3f:9d:9b:76:c4:42:5f:22:3b:9c:e0:65:dd:1e:a3:0c:
d6:12:57:df:49:92:03:4c:54:84:4d:77:29:61:7d:bf:92:d1:
b9:36:e8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org