Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/z-VczplE001BBPV7NwmZ3pIt4Pc.roa
File: z-VczplE001BBPV7NwmZ3pIt4Pc.roa (raw, json)
Hash identifier: +vaWSzeKf1zh3T2WkdlXH1JumrAEdPd/LZFuRKhhL8E=
Subject key identifier: CF:E5:5C:CE:99:44:D3:4D:41:04:F5:7B:37:09:99:DE:92:2D:E0:F7
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 04B10792
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/z-VczplE001BBPV7NwmZ3pIt4Pc.roa
Signing time: Tue 31 May 2022 10:27:57 +0000
ROA not before: Tue 31 May 2022 10:27:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48678
IP address blocks: 78.135.105.0/24 maxlen: 24
78.135.100.0/24 maxlen: 24
188.132.130.0/24 maxlen: 24
188.132.151.0/24 maxlen: 24
188.132.156.0/24 maxlen: 32
78.135.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78710674 (0x4b10792)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: May 31 10:27:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfe55cce9944d34d4104f57b370999de922de0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:41:e4:43:88:ee:a3:f1:98:c5:4a:09:dc:24:
b2:53:a5:29:66:95:7e:33:4d:45:b2:54:04:3d:ec:
bf:5a:4f:29:8c:90:70:7f:41:ea:8a:d6:8c:ce:33:
85:75:02:43:b3:5a:9f:9d:3d:c8:53:90:e6:9b:3e:
c5:ae:08:0b:be:42:45:33:a1:48:e6:72:40:ca:a0:
15:ca:ee:ad:b2:c5:68:63:de:ed:6e:52:8e:58:4f:
fe:0e:23:26:d3:d8:b7:6c:d2:1a:09:af:df:91:d5:
d5:c2:20:7a:bd:54:3b:36:63:47:c8:22:31:21:90:
4b:eb:9e:52:4d:e0:ad:0d:32:aa:2b:23:b7:e0:f8:
a9:7c:fc:dd:9d:29:e9:53:b6:97:5d:92:68:19:73:
7c:e2:84:b4:51:aa:91:58:87:67:78:dc:d6:1d:72:
78:af:07:50:f4:f2:e3:bc:b5:6c:d8:82:08:c6:44:
65:88:cc:0f:80:91:86:f3:4e:e1:fe:3e:8f:39:dc:
dc:9b:4b:18:c4:e5:43:98:65:49:84:b0:bf:7e:76:
61:de:e3:7d:95:b8:cf:35:96:a3:c0:d1:e1:90:69:
f6:75:e7:39:db:92:7b:2d:75:c6:e2:27:fe:48:8a:
94:95:bf:1e:9b:ab:ed:23:16:be:b1:d9:ed:94:39:
16:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E5:5C:CE:99:44:D3:4D:41:04:F5:7B:37:09:99:DE:92:2D:E0:F7
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/z-VczplE001BBPV7NwmZ3pIt4Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.64.0/24
78.135.100.0/24
78.135.105.0/24
188.132.130.0/24
188.132.151.0/24
188.132.156.0/24
Signature Algorithm: sha256WithRSAEncryption
17:38:72:5f:13:56:e4:57:cd:e7:6b:7e:7f:2c:2c:6e:d0:4f:
0a:8f:9f:7b:21:b4:b9:b8:cb:15:52:6e:29:dc:74:4c:8f:a4:
31:ad:35:69:12:b6:77:a6:31:f0:f0:d8:50:ec:5b:8b:24:34:
4c:a7:31:18:25:f5:24:a5:24:46:ed:5e:5f:14:03:9a:c1:21:
ad:ad:29:24:82:6f:2d:24:a5:8a:ca:55:b9:ba:21:01:f8:3f:
07:af:44:8b:e6:8e:1d:f7:83:23:14:c0:b0:50:4e:97:cf:8e:
95:e0:29:59:bd:0f:6d:ce:e9:b6:6d:e6:98:b1:db:dc:f2:ae:
a3:0d:d1:33:25:7f:aa:9c:fd:ee:dc:7a:8d:86:b7:d8:64:c2:
05:05:5e:7c:54:88:e7:50:ea:e3:b8:97:55:44:a6:98:68:b9:
25:a8:96:dd:fb:8c:da:75:bb:28:ec:e5:3f:c7:52:8e:e7:62:
ca:74:46:5e:9f:3f:95:f6:ea:3f:2a:a3:c0:d6:ab:70:86:5f:
8b:31:f4:b6:1d:8d:67:2a:2e:ff:31:9f:b1:1d:8c:5c:af:cc:
6c:dd:13:4d:0c:c0:23:86:3a:0a:07:7d:97:9b:04:43:17:95:
fa:0e:fe:c4:2a:cb:c1:4b:43:7d:1b:8c:63:81:f4:c2:3a:fb:
74:ac:da:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org