Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/t1L4U48sE4TYvhU9Ix7XcNFsDqA.roa
File: t1L4U48sE4TYvhU9Ix7XcNFsDqA.roa (raw, json)
Hash identifier: wuPMoznOaxyRa9zy70P5JQEl3LYO73g3U79FsqXbblM=
Subject key identifier: B7:52:F8:53:8F:2C:13:84:D8:BE:15:3D:23:1E:D7:70:D1:6C:0E:A0
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018562BBEF71C796433808A03CF2A1F11F22
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/t1L4U48sE4TYvhU9Ix7XcNFsDqA.roa
Signing time: Fri 30 Dec 2022 11:12:41 +0000
ROA not before: Fri 30 Dec 2022 11:12:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211603
IP address blocks: 78.135.92.0/24 maxlen: 24
78.135.104.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:bb:ef:71:c7:96:43:38:08:a0:3c:f2:a1:f1:1f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Dec 30 11:12:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b752f8538f2c1384d8be153d231ed770d16c0ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:97:85:9b:4a:6f:92:ef:0a:79:82:5c:fa:d4:
a2:1d:72:23:a3:47:80:1b:11:c9:13:9f:75:b8:45:
5f:4a:af:3b:a6:4d:09:9c:94:3e:37:ef:bb:72:b6:
50:68:07:70:17:b3:ce:4c:fd:1f:89:78:17:fa:f5:
59:1c:bd:5f:f1:f5:58:50:19:f5:d6:7f:fd:5c:b4:
5d:08:ad:30:10:bb:61:bf:ab:ce:0e:d7:d1:07:4d:
bd:6a:47:39:3d:dd:fa:32:2f:69:c3:11:e4:45:ab:
56:13:14:b4:0d:c5:9e:76:2d:6c:34:10:33:18:85:
63:7b:df:9c:c3:1d:a5:4f:5a:9f:ca:4d:18:c4:eb:
1f:59:bc:60:01:8f:97:8d:9f:14:9b:aa:f7:84:0e:
0b:58:96:a8:cd:6c:5a:b3:fb:37:f8:ae:4a:3c:16:
0a:47:2a:f2:5f:b8:14:c5:19:10:8c:19:1e:a2:3c:
f4:88:3a:5a:12:20:28:53:26:a5:1b:24:26:58:2a:
44:5a:39:74:b0:c6:f1:36:7a:44:08:70:f6:82:51:
ee:23:63:56:11:0c:06:13:b8:91:e2:96:18:a7:96:
53:4a:a7:f0:da:bb:89:3b:8d:8d:0a:7d:fa:07:41:
23:2f:52:74:79:7d:3a:f8:45:81:58:9a:25:9e:90:
2f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:52:F8:53:8F:2C:13:84:D8:BE:15:3D:23:1E:D7:70:D1:6C:0E:A0
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/t1L4U48sE4TYvhU9Ix7XcNFsDqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.92.0/24
78.135.104.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:5e:b7:75:95:51:8d:2d:1a:5c:e5:c8:28:40:24:24:a0:b2:
07:bf:21:2b:94:49:2c:51:d7:be:91:24:88:b4:73:05:81:dd:
35:ad:a5:e9:92:98:0b:4b:c0:06:e6:c8:fc:1d:67:ca:50:24:
a8:e3:61:f0:1c:d1:92:49:c9:0b:9f:08:24:b6:3e:df:29:3a:
fb:7b:3b:67:bb:9e:32:8e:10:00:20:f1:1c:53:3e:82:a1:fc:
82:8e:e9:20:96:c5:5d:9e:60:88:bb:b5:63:44:cb:1d:be:64:
e4:ef:95:46:4f:fa:e1:63:54:e8:83:2e:a4:83:25:df:29:98:
b8:1b:ab:47:ff:3e:87:bd:47:87:aa:ff:62:d6:e9:cc:1c:e4:
14:d5:7f:e9:cb:86:e6:7b:91:a3:49:21:8d:d0:d9:83:2b:24:
11:53:a5:ad:76:96:e1:fc:ea:99:dc:6b:e4:40:ff:8e:16:29:
c6:ee:e0:a0:32:5d:81:e9:70:74:0f:23:14:cb:b2:10:01:e5:
27:61:05:b2:f2:31:ae:a3:a6:61:fd:54:ee:7b:d6:2d:b3:c5:
ed:1b:46:a2:8f:82:4b:53:6a:3f:a4:02:d8:19:df:ca:31:72:
db:3f:7d:c1:45:de:1e:2a:96:18:7b:b0:18:fc:f2:15:e3:a2:
c8:e2:73:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:59 2024 by rpki-client on console-ams.rpki-client.org