Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/e9Aysknx0ApL3xSyoRRvnm9l-Dg.roa
File: e9Aysknx0ApL3xSyoRRvnm9l-Dg.roa (raw, json)
Hash identifier: lqc4xjHwhhg1y4MA0EHGXQ5TIGxjsAI/qjs+x0MOrKM=
Subject key identifier: 7B:D0:32:B2:49:F1:D0:0A:4B:DF:14:B2:A1:14:6F:9E:6F:65:F8:38
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01855E5A6AE0C66B3EF478580083A15A6721
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/e9Aysknx0ApL3xSyoRRvnm9l-Dg.roa
Signing time: Thu 29 Dec 2022 14:47:41 +0000
ROA not before: Thu 29 Dec 2022 14:47:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61135
IP address blocks: 212.68.35.0/24 maxlen: 24
188.132.249.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
212.68.59.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
78.135.73.0/24 maxlen: 24
188.132.193.0/24 maxlen: 24
78.135.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5e:5a:6a:e0:c6:6b:3e:f4:78:58:00:83:a1:5a:67:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Dec 29 14:47:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bd032b249f1d00a4bdf14b2a1146f9e6f65f838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:57:97:37:17:01:d3:ed:9e:86:a3:4e:a5:59:
19:40:d7:06:b0:f6:68:ef:d1:67:cb:89:89:75:dd:
75:18:c3:fb:0c:7a:ff:07:4e:f6:df:36:b4:10:27:
5d:51:cd:7c:49:53:77:2d:57:68:5e:a4:7e:d8:7a:
ea:9a:1f:ef:29:20:68:00:79:fb:9a:75:10:6e:5b:
d0:c3:19:f1:af:d4:f2:e6:5c:6c:2e:4d:ca:93:90:
ba:01:e1:22:ba:5c:50:66:57:5a:3b:f8:71:80:04:
44:e0:60:0b:22:52:0f:ad:0e:40:13:6f:7b:23:9a:
13:96:b9:f7:68:c3:dd:37:6e:2c:9d:ba:1f:54:d3:
58:17:0e:5b:0e:fd:7b:a0:4d:f8:50:bc:9b:b9:b6:
e6:85:85:e5:21:5f:82:f8:67:40:62:f2:f9:93:74:
7e:a1:11:97:cb:30:ad:df:82:ab:f4:35:14:47:e2:
eb:b5:ca:7c:85:a9:10:23:db:d2:69:e5:9e:7e:1f:
f7:73:88:7a:6f:c9:21:b6:8f:14:84:82:76:0b:ee:
99:33:d3:cd:5a:d4:d1:dc:18:e3:4f:7d:35:6c:3f:
83:5d:2a:8e:98:52:19:37:90:c3:fa:18:42:15:5e:
5d:2f:4d:f8:7e:7c:a8:8b:9c:db:f5:21:9d:23:b5:
ef:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D0:32:B2:49:F1:D0:0A:4B:DF:14:B2:A1:14:6F:9E:6F:65:F8:38
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/e9Aysknx0ApL3xSyoRRvnm9l-Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.73.0/24
78.135.86.0/24
188.132.189.0/24
188.132.191.0/24
188.132.193.0/24
188.132.249.0/24
212.68.35.0/24
212.68.59.0-212.68.60.255
Signature Algorithm: sha256WithRSAEncryption
13:4d:94:fe:52:c6:c0:71:9b:fe:7c:38:b6:9f:28:28:79:61:
f5:2d:d8:23:75:e8:ea:a4:04:8a:8b:f8:df:18:0f:97:2c:57:
35:2c:79:25:77:ad:fb:cf:7a:fa:42:c4:cf:f4:88:ed:05:03:
9b:99:27:fc:b0:53:17:7e:fb:2a:7a:26:8b:c4:05:2a:ca:e9:
9c:bb:17:70:47:a4:ac:5e:90:02:64:da:d2:90:e9:aa:5d:41:
5e:35:59:7e:9f:43:a1:cf:63:da:a8:7b:44:3d:2c:d8:08:8c:
5c:37:ee:32:e8:de:7c:8d:43:bd:50:45:b5:75:7d:67:3c:8f:
e7:1f:58:56:0b:10:f9:6c:80:d8:41:78:2a:2a:83:4e:f7:67:
7e:09:f7:d0:5f:24:02:67:a8:91:d4:e9:a4:a9:22:0b:96:fb:
0e:91:cd:41:9c:06:b1:e4:0d:87:f8:a9:44:62:ee:fb:61:f9:
42:b3:45:b1:8d:47:e1:7b:dd:94:3d:5a:43:f1:94:15:62:da:
f2:cf:64:17:45:52:e6:1a:73:95:77:b8:e8:de:e4:24:40:a0:
07:0f:73:44:be:cd:79:0b:03:4d:7a:0c:31:7d:49:1b:c6:bf:
9e:de:73:b4:be:2f:56:26:28:42:73:6d:32:d5:06:f2:16:56:
47:9f:70:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org