Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/swfk8WBUY85uzpk-TUbmD141MAE.roa
File: swfk8WBUY85uzpk-TUbmD141MAE.roa (raw, json)
Hash identifier: B7AV/9OXFGPPezriSbpkTkovmn6UJIs4uJtwWUv5tVE=
Subject key identifier: B3:07:E4:F1:60:54:63:CE:6E:CE:99:3E:4D:46:E6:0F:5E:35:30:01
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 03BF55A4
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/swfk8WBUY85uzpk-TUbmD141MAE.roa
Signing time: Mon 21 Feb 2022 13:34:16 +0000
ROA not before: Mon 21 Feb 2022 13:34:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212219
IP address blocks: 78.135.105.0/24 maxlen: 32
212.68.34.0/24 maxlen: 32
78.135.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62870948 (0x3bf55a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 21 13:34:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b307e4f1605463ce6ece993e4d46e60f5e353001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:0c:99:8b:f2:7d:99:a4:57:c0:29:22:b4:
c2:13:a3:86:30:5d:29:f5:92:89:06:b3:4c:28:4a:
71:b0:7b:82:f1:9b:a5:bd:ac:8f:5e:42:fe:0c:73:
9f:0c:8c:9a:98:99:b9:e6:88:c3:5a:95:2d:c5:e3:
90:94:c8:37:85:e7:81:03:67:66:ff:cc:ca:71:a6:
5b:e4:3c:e7:23:27:38:76:e2:79:70:f8:09:a1:9d:
de:a3:7f:a7:f4:96:d7:ba:6b:5b:95:44:7e:b8:91:
b1:a9:43:35:9e:4f:23:90:10:3a:f0:73:1a:b7:40:
2c:0a:c7:00:23:a9:af:ec:5d:98:cc:8b:a1:44:bd:
1c:ca:e2:76:f5:6e:f8:b2:d4:f6:9d:02:59:71:c1:
c5:18:a7:6e:ea:35:6a:95:45:2e:2b:d4:0e:91:1d:
6b:a6:1d:4e:f2:a4:38:12:63:f1:9d:ae:70:d3:9e:
23:cc:0e:a3:d9:a4:6e:ac:48:43:0b:45:f0:24:f8:
ee:93:41:e3:1b:4d:4d:4b:75:ea:40:6e:83:f8:e1:
d0:b3:3b:f8:7a:3f:64:2e:79:73:70:28:c2:06:2f:
c8:5d:82:ba:ec:34:12:ed:8a:70:96:90:7e:66:dd:
b3:ee:cb:63:45:dd:80:77:fe:93:30:b1:17:c8:14:
16:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:07:E4:F1:60:54:63:CE:6E:CE:99:3E:4D:46:E6:0F:5E:35:30:01
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/swfk8WBUY85uzpk-TUbmD141MAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.85.0/24
78.135.105.0/24
212.68.34.0/24
Signature Algorithm: sha256WithRSAEncryption
05:9e:0b:2a:37:f9:b6:64:2f:f9:b5:d0:23:88:38:a5:1a:0b:
f0:8f:df:4f:86:d3:63:23:8a:5a:2f:7d:ec:7e:de:9f:dd:42:
28:e9:06:3b:44:a5:21:7d:a5:f9:e7:8d:42:a6:27:af:b0:64:
52:c4:c9:7a:93:b5:c8:f1:af:d6:d7:81:71:47:38:f9:6b:2a:
c0:c4:62:9f:1c:9d:1f:ee:27:60:98:de:bb:ae:76:35:68:e4:
0a:c2:a0:85:bb:1e:8b:f3:bc:cf:d5:59:3d:04:f5:4b:b1:f4:
ec:6f:d4:b0:52:20:b5:a0:cb:c7:0a:f5:28:26:5c:a8:9e:55:
4b:c2:de:ad:a7:82:34:d4:62:95:6d:88:12:7a:03:e1:51:26:
42:d3:09:ad:04:3e:7c:87:1d:b7:7a:f5:80:cd:92:5b:6e:f7:
fb:7a:36:29:41:ec:f5:31:4c:17:9c:13:3d:e7:7c:d0:0b:87:
91:09:3f:4f:2f:b6:b6:47:89:0b:c6:18:f7:84:3a:58:64:31:
c1:49:66:a6:29:60:87:94:d0:d6:26:9a:96:29:d3:f4:77:9d:
23:b1:43:f2:55:ca:6d:83:5e:58:15:13:c0:f3:18:e7:29:89:
f8:5c:33:3e:5e:2c:be:e2:14:9d:79:4d:d4:a8:1b:c2:75:da:
42:fa:83:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org