Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Sy1nsLm4CRaWGh03-tJAXM2zjXo.roa
File: Sy1nsLm4CRaWGh03-tJAXM2zjXo.roa (raw, json)
Hash identifier: R53PkcvhcojF/BrglKXLGPMCGug5Kjyi0HnlkUcdk4g=
Subject key identifier: 4B:2D:67:B0:B9:B8:09:16:96:1A:1D:37:FA:D2:40:5C:CD:B3:8D:7A
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 035FD0DF
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Sy1nsLm4CRaWGh03-tJAXM2zjXo.roa
Signing time: Tue 18 Jan 2022 13:48:44 +0000
ROA not before: Tue 18 Jan 2022 13:48:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211711
IP address blocks: 188.132.159.0/24 maxlen: 24
78.135.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56611039 (0x35fd0df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 18 13:48:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b2d67b0b9b80916961a1d37fad2405ccdb38d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:57:9b:b8:46:4b:23:db:31:61:68:d2:21:
b4:81:aa:ed:55:9e:69:0b:2b:cd:67:15:4a:7b:11:
35:ae:dd:cf:b0:e2:40:57:7e:65:56:cd:65:6e:b7:
b3:65:21:ed:14:92:39:21:b8:b4:02:37:21:f0:80:
91:b4:c3:b4:7d:96:f6:47:18:a4:72:54:a1:88:e3:
b0:6c:a3:f5:4a:d3:65:a7:67:64:1f:50:a0:9d:f4:
7b:d6:dd:a0:67:8f:79:f2:37:87:5e:fa:bb:16:1c:
e7:9e:4e:c4:1e:a8:74:11:ea:50:c7:bf:5e:b2:66:
14:8d:8d:f4:7f:ee:eb:c4:d3:4c:ce:a3:56:f2:3f:
9d:9b:e1:e4:e0:f6:f9:30:b5:25:8c:7c:99:17:87:
c5:30:52:42:59:08:67:4a:4d:a9:4f:79:4b:09:05:
de:83:47:c8:58:e6:73:c0:de:a1:46:88:d6:bf:06:
44:e0:3a:1f:3f:65:51:e5:9c:ea:e1:1b:a4:a9:3b:
93:c2:8c:86:41:7f:f7:56:e2:f4:6b:6b:3b:8b:38:
fd:53:4a:f1:3d:eb:b2:6f:a9:44:e1:6d:80:ee:b9:
9d:0a:17:81:61:a1:a6:eb:b2:06:db:e2:4a:16:96:
54:34:f4:6e:52:44:bf:ad:ce:b6:6c:77:de:3c:53:
0d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2D:67:B0:B9:B8:09:16:96:1A:1D:37:FA:D2:40:5C:CD:B3:8D:7A
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Sy1nsLm4CRaWGh03-tJAXM2zjXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.70.0/24
188.132.159.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d9:af:43:4d:5b:a3:a2:e3:f9:7b:e3:f9:3c:2f:05:2f:39:
06:14:a5:6d:98:b9:5e:d0:e5:93:de:2c:55:29:60:29:e0:53:
0b:ae:46:93:57:dd:81:ca:d7:cd:85:d6:6d:7f:e4:66:fc:67:
69:5b:f0:65:d8:7c:be:96:d7:08:ba:a5:af:8e:6b:93:db:e5:
cd:8b:92:f2:8e:f6:7d:8b:b5:57:16:d3:85:a7:2e:c1:e4:74:
01:ad:61:17:b2:c8:07:3e:62:01:fa:c1:f1:bc:00:bc:1f:b9:
a4:fe:9f:bc:1c:25:75:14:fd:d1:21:a6:c0:25:2c:65:26:e3:
41:62:ac:d2:39:76:80:69:07:2d:b7:a1:32:94:00:d9:f2:6a:
87:04:7e:9e:b1:2d:ac:50:b6:b9:ab:b3:11:ba:1d:73:ce:a3:
00:98:98:d3:41:09:a1:37:78:0c:50:91:a8:30:d0:57:b5:01:
41:7d:bd:c6:84:17:5c:06:09:fa:7b:3b:12:d6:0a:b2:8d:2c:
1d:5b:ad:38:34:b0:dd:54:63:fa:20:69:6b:ff:2d:47:a0:8a:
0e:56:52:f7:c9:4f:f1:0c:10:40:5c:f1:cf:00:0e:37:bd:78:
53:14:57:f7:26:9b:04:f1:67:40:ea:57:2e:c5:a2:72:47:5b:
27:47:2e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org