Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/tc5Ju_zxTuIhgr-2mvIb0_AkRc8.roa
File: tc5Ju_zxTuIhgr-2mvIb0_AkRc8.roa (raw, json)
Hash identifier: U1pNTjKoi07rB58eiP50VV1aVbkU1UilKO4pgeQjvZY=
Subject key identifier: B5:CE:49:BB:FC:F1:4E:E2:21:82:BF:B6:9A:F2:1B:D3:F0:24:45:CF
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0184FC61D3A7DC326ECB381C03BA5A4747B6
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/tc5Ju_zxTuIhgr-2mvIb0_AkRc8.roa
Signing time: Sat 10 Dec 2022 14:13:00 +0000
ROA not before: Sat 10 Dec 2022 14:13:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 78.135.67.0/24 maxlen: 24
31.210.55.0/24 maxlen: 24
188.132.201.0/24 maxlen: 24
78.135.83.0/24 maxlen: 24
78.135.82.0/24 maxlen: 24
78.135.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fc:61:d3:a7:dc:32:6e:cb:38:1c:03:ba:5a:47:47:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Dec 10 14:13:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5ce49bbfcf14ee22182bfb69af21bd3f02445cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:94:d4:03:c3:24:15:e1:ce:1c:14:9c:d8:
11:e1:07:d8:78:f8:a1:2b:6d:8a:06:ae:f8:a7:57:
ef:98:67:73:0e:93:79:e2:a6:5b:99:3e:5a:b9:94:
a1:d8:4c:28:5b:23:52:c1:49:f2:62:dc:91:52:7f:
d6:95:d5:d4:14:b0:ac:99:0f:13:8e:24:90:b6:c5:
ee:72:c6:49:7b:36:88:a8:1a:4d:e9:79:79:81:7b:
c0:f2:2f:47:c0:f5:3c:71:d0:fd:26:28:9f:a6:1e:
f6:c0:90:65:44:ec:71:b2:b5:bd:71:a0:b7:41:a6:
0b:63:8d:12:c7:1e:d9:44:d8:6b:c6:d4:aa:ae:ac:
45:d5:f8:b4:d4:78:e9:3d:a6:bb:66:2f:df:e6:96:
04:52:51:eb:ba:12:34:e8:09:a2:8e:70:df:2c:d9:
1f:01:5b:bb:17:07:ab:28:54:d5:aa:87:62:b5:83:
82:47:ea:a6:48:31:e0:39:08:2d:a3:ba:d6:6a:ec:
d2:72:38:f9:93:cc:88:13:8a:cb:8a:3d:e6:fc:7f:
e0:b9:5e:1f:41:3c:49:c3:84:75:38:30:b8:71:ce:
05:79:e4:81:87:d5:97:59:de:57:61:cf:13:81:5f:
31:34:e4:7b:61:94:98:21:5d:cb:94:ba:ea:ac:5c:
10:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CE:49:BB:FC:F1:4E:E2:21:82:BF:B6:9A:F2:1B:D3:F0:24:45:CF
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/tc5Ju_zxTuIhgr-2mvIb0_AkRc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.55.0/24
78.135.67.0/24
78.135.81.0-78.135.83.255
188.132.201.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:37:51:da:eb:f9:f3:77:50:15:62:ca:94:80:d2:a8:a0:a4:
45:06:79:b8:42:0c:b1:96:53:1d:52:93:73:7f:c9:bd:60:81:
6c:e8:fc:23:19:75:6b:bd:9a:73:81:d2:bc:68:dc:b7:da:d8:
82:f0:74:01:7b:4c:11:b5:d4:3f:51:89:f0:8c:44:51:ab:c3:
b6:c9:f3:fe:33:b9:60:56:9f:a8:1b:b1:21:0c:fd:ce:f9:b1:
08:35:65:b8:5b:fd:af:1b:83:6a:e6:10:b2:26:95:a2:15:29:
e0:50:cc:29:fa:48:76:77:24:53:b6:4e:f5:9b:b5:4b:db:93:
30:64:a4:fb:e9:c1:2a:64:fd:83:49:ba:a3:c3:0b:08:6c:5f:
35:8c:05:23:87:8b:89:d2:84:78:60:52:f6:a1:08:0f:2f:fc:
98:46:5c:83:f0:49:30:54:50:8a:d1:9d:2b:70:a2:8a:6a:17:
e0:45:1e:6d:1b:ee:8d:6c:86:2d:e8:89:bd:9c:64:5d:2e:7d:
c1:35:05:e2:65:35:6d:a3:ec:c4:c9:c4:91:32:d0:77:68:66:
35:86:84:c2:e1:82:17:03:82:8b:96:ab:68:68:10:d5:72:fa:
1a:2b:c9:af:a8:46:e9:c5:04:17:ff:29:ae:97:3c:db:54:74:
77:3d:21:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org