Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/roWJIlWx_Anno8HpAEKeAGLO700.roa
File: roWJIlWx_Anno8HpAEKeAGLO700.roa (raw, json)
Hash identifier: 3S3EZDZbQErAffQHrc8xzuNDNNvSHoN09EzWPL3CE2E=
Subject key identifier: AE:85:89:22:55:B1:FC:09:E7:A3:C1:E9:00:42:9E:00:62:CE:EF:4D
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0184EF62CD99A17EA307752EEB426F6524E3
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/roWJIlWx_Anno8HpAEKeAGLO700.roa
Signing time: Thu 08 Dec 2022 01:39:00 +0000
ROA not before: Thu 08 Dec 2022 01:39:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42216
IP address blocks: 78.135.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ef:62:cd:99:a1:7e:a3:07:75:2e:eb:42:6f:65:24:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Dec 8 01:39:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ae85892255b1fc09e7a3c1e900429e0062ceef4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:85:43:12:4e:c1:20:8b:ab:a9:fa:1a:76:
4d:d4:b9:19:b1:8e:d2:ae:de:74:14:12:ca:1c:50:
ec:43:36:d7:ab:08:67:f4:ad:11:32:19:5e:e8:39:
2b:44:62:77:b4:a0:e0:1d:00:ac:83:9e:36:7e:72:
d4:d5:96:b9:16:67:af:bd:dd:f4:fe:94:57:0e:0b:
7f:bd:1b:4f:4f:47:2d:8d:4e:22:b6:06:41:62:30:
92:46:53:47:43:7e:31:d9:aa:df:8b:a8:55:f0:c8:
e6:49:07:15:d5:bc:b1:3e:19:fc:54:dc:2d:14:d8:
ce:39:97:8f:72:34:1d:78:b4:4c:c8:fc:5d:53:fa:
36:81:6b:79:14:ac:d2:cd:ae:e4:cf:b1:b3:bc:bd:
8e:6e:c4:e8:d4:62:7c:d6:cb:9e:e0:ab:93:5e:00:
05:53:af:aa:17:b8:35:bf:2f:bf:f0:13:67:16:cb:
15:78:9a:9c:34:dd:56:cb:a4:24:69:71:11:f9:7e:
f0:7c:da:89:15:a2:3c:40:1d:74:ca:d0:96:27:82:
17:f5:8a:75:97:5e:44:56:ea:a8:e6:69:43:61:da:
99:91:28:a1:db:8b:a0:34:e0:c2:1a:be:84:5b:bc:
8a:0b:89:16:da:86:8e:e7:7f:9a:2c:52:a2:8b:c2:
2e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:85:89:22:55:B1:FC:09:E7:A3:C1:E9:00:42:9E:00:62:CE:EF:4D
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/roWJIlWx_Anno8HpAEKeAGLO700.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.64.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:1a:59:f0:61:e2:70:f3:4c:f9:4d:4d:7d:24:cd:a5:a5:9c:
8e:0f:77:61:93:df:e9:01:1d:b9:26:07:1e:fe:eb:0d:a4:5c:
72:d1:ef:6b:f4:69:d5:5c:a1:2d:44:e6:2d:51:b9:e9:9e:a0:
1c:92:75:2a:28:72:d0:6a:d3:1e:77:82:dc:db:2d:c1:eb:92:
8b:99:f7:0b:6b:dc:53:c2:e9:e7:8b:36:d8:48:70:ff:ad:86:
ce:77:94:0b:f5:fb:3c:14:89:76:f4:a1:1e:8b:71:39:62:04:
5b:8a:6d:fd:6e:ea:1f:8c:a6:19:13:72:e9:28:cc:7a:83:6e:
af:6c:9c:b3:13:26:0e:a8:09:e4:d9:4a:1a:69:4f:98:86:c4:
e3:c6:bd:fc:04:2d:e0:48:aa:52:3b:e6:01:ec:4f:f9:09:d0:
a6:69:13:e5:9b:70:f8:25:38:df:e0:d6:28:c6:63:8b:a4:ee:
5e:4e:de:f6:fa:89:76:03:ca:8f:5d:35:92:95:45:dc:2c:c7:
ab:9e:1e:2c:39:6a:6d:c0:96:0b:7f:35:4d:0d:37:c2:4e:66:
72:b6:e6:ee:e3:a9:0b:00:c7:99:05:b2:14:7c:27:ff:04:57:
d3:34:98:3c:f7:6e:b3:c6:89:5f:9a:d4:96:2e:f5:62:dd:12:
99:b4:b9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:59 2024 by rpki-client on console-ams.rpki-client.org