Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/WISwb0sxbXCGqkyZmKQpegc2cFw.roa
File: WISwb0sxbXCGqkyZmKQpegc2cFw.roa (raw, json)
Hash identifier: IJXDNBl6wfkSYKXbaqKm2nubdxRJp+3Nk99AsluqObI=
Subject key identifier: 58:84:B0:6F:4B:31:6D:70:86:AA:4C:99:98:A4:29:7A:07:36:70:5C
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 03297F60
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/WISwb0sxbXCGqkyZmKQpegc2cFw.roa
Signing time: Sat 01 Jan 2022 01:54:27 +0000
ROA not before: Sat 01 Jan 2022 01:54:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207983
IP address blocks: 78.135.109.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53051232 (0x3297f60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 1 01:54:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5884b06f4b316d7086aa4c9998a4297a0736705c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:e2:e6:62:79:4a:0a:1b:0c:85:ca:91:24:
ae:ac:7c:f2:b8:08:bf:f1:9c:f6:88:cb:e1:95:29:
21:52:cb:dd:a3:11:5b:10:68:a4:a1:3e:bb:13:64:
6b:48:eb:f0:18:10:b3:c3:a5:69:11:42:31:c8:41:
30:9b:e9:bb:35:f2:0e:e3:64:94:be:23:f6:98:57:
97:38:35:66:8c:21:47:c4:d7:b2:3a:61:ff:9f:f6:
55:1e:4e:14:e8:b0:c9:3a:19:73:f1:2b:ae:53:34:
44:ab:de:5d:ed:b5:31:e3:e5:3d:6a:73:52:00:ad:
91:9a:f5:33:b1:90:e5:bb:33:ad:9e:3a:9d:8e:2e:
8f:49:a8:99:b0:c3:a1:fa:4c:ee:5c:0c:c3:c3:d6:
ef:5c:78:1d:2f:bf:82:61:6f:e2:0e:44:47:84:03:
dc:f2:c6:26:c1:f8:c3:c4:b1:f8:64:e0:1a:84:63:
86:7a:a2:e4:8b:71:cb:46:0e:2c:bc:b0:ab:77:40:
a7:33:ad:2f:9c:c2:2e:a2:f2:3d:a9:1e:d7:25:66:
bd:05:b6:45:e5:75:08:5b:42:70:83:2d:50:47:4a:
29:07:1b:b2:42:82:81:2c:87:40:2f:0e:6b:36:9b:
34:9d:3e:ec:75:ed:d0:ff:5b:03:a1:a6:73:72:12:
a3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:84:B0:6F:4B:31:6D:70:86:AA:4C:99:98:A4:29:7A:07:36:70:5C
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/WISwb0sxbXCGqkyZmKQpegc2cFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.109.0/24
Signature Algorithm: sha256WithRSAEncryption
45:60:54:b1:aa:10:ce:c9:c1:db:e3:f4:46:ec:fd:56:e3:c0:
42:e4:36:47:15:6f:e0:f5:78:57:c9:1f:c0:02:89:ae:71:ab:
89:5e:43:96:ae:a2:6e:30:54:82:22:35:f9:84:a2:80:d5:00:
1c:23:37:b5:8c:ad:ac:6d:8e:ea:4c:5a:c8:06:2f:a4:33:d6:
19:e1:e3:be:c5:cf:dd:c8:00:00:03:b7:fb:05:3d:fc:05:00:
6d:1f:91:1c:74:41:de:9f:e3:ac:ef:0d:73:11:17:94:2c:20:
24:c2:7a:72:24:dd:24:c7:dd:15:62:c7:67:d9:3b:c5:21:88:
70:1e:1b:ce:79:fd:41:1e:9b:2e:90:8c:ae:43:fb:42:ce:86:
f0:1f:2c:11:e6:25:b5:1b:57:fb:64:e8:07:0e:ff:15:73:0a:
49:0a:f0:76:c2:b6:d1:1f:7f:70:83:e9:3a:60:06:a6:b0:de:
26:22:a1:24:c6:b8:0f:ea:0f:af:6d:c9:65:1c:e7:5f:af:1c:
24:57:1e:0d:60:7c:49:69:57:40:f9:96:47:1b:1f:48:bc:63:
42:9c:e8:99:cc:b5:4d:75:7a:56:53:a3:ee:75:bc:a2:4c:35:
36:ba:36:f5:92:7e:9b:72:f7:3c:df:9d:9d:6a:4d:df:1b:43:
27:21:be:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org