Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Qr4w2I6JhI-eC4n99csUe3zKxGw.roa
File: Qr4w2I6JhI-eC4n99csUe3zKxGw.roa (raw, json)
Hash identifier: 7R0/R7JPf19CiSgzcsUsZXHxhlCExFrE44xfQMJ8/Mk=
Subject key identifier: 42:BE:30:D8:8E:89:84:8F:9E:0B:89:FD:F5:CB:14:7B:7C:CA:C4:6C
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 04F950F8
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Qr4w2I6JhI-eC4n99csUe3zKxGw.roa
Signing time: Wed 29 Jun 2022 12:33:02 +0000
ROA not before: Wed 29 Jun 2022 12:33:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48678
IP address blocks: 78.135.105.0/24 maxlen: 24
78.135.100.0/24 maxlen: 24
188.132.130.0/24 maxlen: 24
78.135.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83448056 (0x4f950f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 29 12:33:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42be30d88e89848f9e0b89fdf5cb147b7ccac46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:75:4c:cb:13:b5:8e:50:af:85:95:6e:97:f2:
fa:e2:ab:84:1a:15:b8:b5:f7:d4:36:eb:15:bd:b1:
2c:f1:e8:08:58:f8:f9:a4:cb:0b:8f:dd:cf:b2:5e:
61:c7:d9:40:12:76:fb:d8:29:7f:8b:82:39:5b:08:
61:11:c8:31:b1:7a:03:31:24:ac:b4:78:76:0e:f7:
32:61:db:d0:9c:48:ac:a5:39:18:a3:29:36:0e:ac:
ad:21:28:6f:22:52:a4:68:54:6f:2f:46:1a:e2:7e:
77:87:d1:38:95:94:20:61:81:fd:2f:08:53:02:5e:
2e:14:cf:a2:de:5e:88:db:08:c0:20:11:2f:b1:db:
ab:b9:1a:e6:7b:5f:42:25:dc:5b:f0:c4:5b:c3:d1:
99:e0:e3:1f:88:3f:07:27:7a:c4:78:b2:17:d6:4b:
d5:c7:b0:1c:8f:9d:9d:58:b7:03:3f:b4:a8:a9:5c:
52:b2:5d:de:f7:f3:f0:cf:41:14:51:48:72:3d:b1:
33:19:ea:a4:3b:1a:ac:83:67:57:12:6c:db:5a:09:
7a:0e:82:06:68:5b:b3:96:4a:aa:15:58:43:22:67:
07:5c:82:a4:9f:6c:d2:d2:a6:c2:b9:ac:2b:dd:56:
c9:08:45:5d:e7:1d:ea:ab:35:06:85:d5:5b:96:33:
01:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BE:30:D8:8E:89:84:8F:9E:0B:89:FD:F5:CB:14:7B:7C:CA:C4:6C
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Qr4w2I6JhI-eC4n99csUe3zKxGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.64.0/24
78.135.100.0/24
78.135.105.0/24
188.132.130.0/24
Signature Algorithm: sha256WithRSAEncryption
61:55:21:36:45:80:92:1d:f3:79:97:d9:ec:a8:80:3e:35:69:
5d:bd:12:88:d7:5b:77:e8:fe:73:72:46:fd:4d:24:2b:4e:d0:
64:d6:ec:7a:1c:f2:b5:76:1d:65:10:35:0e:2a:55:43:5b:14:
f2:e6:3f:8c:59:f0:e6:ac:b1:f4:bd:a3:0f:c0:c1:b4:81:c6:
90:ca:ca:38:cf:1c:7f:ea:74:5c:42:a1:96:71:57:bd:bd:84:
c7:9e:ad:5e:f2:e7:fc:b9:eb:54:eb:e6:c7:76:95:3f:3d:4c:
b0:09:e0:b7:34:60:a8:f8:7d:e5:2c:4c:3e:73:73:64:d3:d2:
c2:82:60:28:04:25:b2:fe:c7:58:45:ec:b4:19:fe:78:73:65:
d5:84:87:f1:e0:e3:1e:16:20:87:e6:06:ad:6a:30:72:d1:77:
42:ef:9d:c9:35:93:38:3c:d4:51:64:af:73:a1:d0:23:92:8f:
72:5d:f5:13:59:63:a9:84:c8:b3:a7:ea:1f:d8:60:4d:ce:59:
03:5b:c0:ac:2b:67:2b:a6:6f:71:5c:d8:c7:97:bb:27:6b:aa:
7c:b2:64:42:cb:a5:2f:ab:7e:dc:a8:4e:0a:0f:1a:98:97:cf:
35:62:c3:65:47:75:f3:29:bb:42:f7:97:ad:55:28:4b:0a:27:
f3:d3:46:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org