Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/YVr7gm0vZizehv91i2bjOLNQIKM.roa
File: YVr7gm0vZizehv91i2bjOLNQIKM.roa (raw, json)
Hash identifier: c5/yheZXQL5sg1zlRDYrRlg9x+JMV3NvscxftM03Efo=
Subject key identifier: 61:5A:FB:82:6D:2F:66:2C:DE:86:FF:75:8B:66:E3:38:B3:50:20:A3
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01830D93853B32D6A6AC9A59D29A75CC4387
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/YVr7gm0vZizehv91i2bjOLNQIKM.roa
Signing time: Mon 05 Sep 2022 12:15:15 +0000
ROA not before: Mon 05 Sep 2022 12:15:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48678
IP address blocks: 78.135.100.0/24 maxlen: 24
188.132.130.0/24 maxlen: 24
188.132.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0d:93:85:3b:32:d6:a6:ac:9a:59:d2:9a:75:cc:43:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Sep 5 12:15:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=615afb826d2f662cde86ff758b66e338b35020a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a6:aa:8e:e4:b3:08:e5:e2:79:2d:c6:ed:4d:
b0:e9:72:2c:ad:47:fb:0b:4b:be:b6:ef:de:56:0b:
1b:70:9d:98:9a:8d:1c:b3:64:fd:d6:aa:17:0e:2d:
c1:57:2e:2e:e9:41:8a:c8:ca:fb:71:a7:bc:7e:25:
f9:88:50:68:2e:d7:d2:54:3f:c9:72:7d:7b:2d:e3:
ba:70:af:18:d3:48:f8:83:e3:a9:3d:11:3b:55:d8:
f3:8c:54:c7:06:e1:43:b3:79:8b:19:72:21:04:17:
26:06:22:f9:9e:72:3d:fe:b5:ce:40:ab:b1:13:4b:
ca:c6:f9:03:2f:42:d2:18:1f:5c:fb:c3:3e:26:a3:
d4:08:d1:b3:17:3c:d8:5d:78:11:e5:ab:53:9f:e9:
cf:81:73:05:fc:d1:f1:95:42:0f:0c:7c:40:14:7d:
f0:6f:08:ec:9b:88:8a:a0:03:51:43:78:ff:b3:8d:
c1:e2:63:73:d6:33:41:db:54:e6:c0:b1:d7:91:b0:
36:57:14:65:78:23:db:62:20:5b:03:a8:61:d0:ee:
f2:87:61:90:15:23:7e:e5:80:e1:94:fe:9f:5d:69:
18:e5:fb:3f:af:3e:17:10:4e:e7:b7:16:86:8f:5e:
2e:e9:03:cb:3a:11:8d:31:de:36:60:91:c0:e0:32:
41:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5A:FB:82:6D:2F:66:2C:DE:86:FF:75:8B:66:E3:38:B3:50:20:A3
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/YVr7gm0vZizehv91i2bjOLNQIKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.100.0/24
188.132.130.0/24
188.132.202.0/24
Signature Algorithm: sha256WithRSAEncryption
29:10:b2:ba:8b:94:fa:6c:f0:85:7e:5e:63:68:f2:8d:2e:9e:
5e:2f:ee:0c:5d:3f:65:3a:a7:eb:be:63:95:34:f8:01:8d:87:
8a:21:37:53:e8:e6:04:32:fa:97:12:72:05:8b:76:f9:ca:a9:
db:97:45:69:16:b1:3f:58:db:93:f7:cf:77:2d:00:60:6a:6f:
2d:07:4d:4e:b4:6b:34:25:00:44:1d:7c:76:25:b7:8a:e4:32:
c6:77:49:ed:af:89:af:ec:0f:fb:e7:eb:6c:75:5a:de:33:17:
58:a6:0b:8c:2d:31:4a:85:2b:ce:88:b2:ef:8a:64:77:58:05:
5a:18:81:3e:34:f2:a1:15:9e:01:79:e1:e6:82:f5:16:4b:92:
18:8b:78:fa:b6:07:a6:68:2a:fc:4d:07:30:26:89:ce:dc:3c:
47:e9:d1:c4:9d:1e:a0:42:44:c5:71:39:2d:06:e9:4c:d7:ba:
bf:33:b9:52:e2:fb:e5:28:24:47:48:ef:a8:1f:f2:44:d8:57:
4f:32:1b:b9:98:32:88:5c:7a:b6:14:49:13:9c:76:d0:28:20:
6d:50:65:7e:a4:ac:a9:e2:ce:92:45:5d:13:c8:3f:75:a2:71:
4b:da:1d:d5:03:47:3e:7f:2e:3b:4d:2f:65:22:cb:19:7d:22:
05:9a:23:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org