Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/z7L9e1yRBK_3veEe1evPPL4JNsM.roa
File: z7L9e1yRBK_3veEe1evPPL4JNsM.roa (raw, json)
Hash identifier: uhjh1zVeERZGpjown9FNn86Emw1bEgUo+NNSfx6uNB4=
Subject key identifier: CF:B2:FD:7B:5C:91:04:AF:F7:BD:E1:1E:D5:EB:CF:3C:BE:09:36:C3
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0509EF1C
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/z7L9e1yRBK_3veEe1evPPL4JNsM.roa
Signing time: Wed 29 Jun 2022 13:56:02 +0000
ROA not before: Wed 29 Jun 2022 13:56:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47721
IP address blocks: 78.135.77.0/24 maxlen: 24
78.135.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84537116 (0x509ef1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 29 13:56:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfb2fd7b5c9104aff7bde11ed5ebcf3cbe0936c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:07:85:9f:0a:3d:5f:c5:17:7b:a5:91:e3:29:
a2:24:aa:65:d5:36:0b:6d:e9:4e:41:f5:98:38:d3:
03:9b:f7:1d:14:6d:b9:db:93:fc:99:85:a1:5d:35:
ac:6a:f2:98:10:78:f1:46:21:45:d5:c7:1a:46:e6:
ee:d0:c9:dd:54:74:94:05:ad:68:4c:cc:d4:63:2c:
6f:a2:e0:4f:5d:bf:7a:1a:80:f1:10:cb:7c:b4:6e:
7c:8c:79:72:9a:3e:84:6d:77:6e:5c:07:a5:1e:75:
88:c5:19:a4:52:a5:93:ec:83:20:1c:71:0b:6f:e0:
6d:96:26:8d:c8:fb:d6:09:e3:4d:26:00:88:76:fc:
65:fd:49:f1:fb:8b:43:8f:84:7e:11:31:1d:0c:73:
cc:2b:bc:96:8b:64:89:cc:40:8d:6a:7d:b3:f0:cc:
98:51:b7:fe:80:5f:86:b8:a8:83:58:e7:63:b2:d0:
d8:d8:51:80:20:c4:3e:73:72:f2:4b:2e:8f:ae:2b:
40:a6:60:a5:d9:83:cc:83:e4:ed:38:9c:8b:21:dc:
04:2f:e8:a1:2a:8b:57:39:71:70:8e:27:40:ca:3d:
22:22:63:e7:fe:dd:b5:46:1b:c2:23:7d:59:e6:d8:
9a:d6:dd:f6:81:ae:84:a8:0c:8d:c4:5b:2e:8d:bd:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B2:FD:7B:5C:91:04:AF:F7:BD:E1:1E:D5:EB:CF:3C:BE:09:36:C3
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/z7L9e1yRBK_3veEe1evPPL4JNsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.77.0/24
78.135.90.0/24
Signature Algorithm: sha256WithRSAEncryption
14:c5:cf:04:70:2f:eb:a7:8f:7a:91:c2:10:03:18:ff:11:7f:
fe:2e:e8:bd:30:b2:bd:b5:1a:4b:c2:7d:ad:e5:83:ea:60:70:
89:d3:ec:d2:b0:04:34:a0:53:01:9e:9c:49:7b:67:0c:69:79:
6d:93:cf:8b:f0:8c:99:e4:df:42:30:83:ab:b7:c5:76:d2:cb:
a0:5c:79:ba:9b:ff:f9:7e:80:fc:16:d6:f1:d5:a7:17:cf:7b:
69:5e:71:55:04:cb:80:e6:c4:4f:9c:09:57:cc:b6:00:f0:48:
eb:dc:86:97:ba:79:0c:50:47:23:c1:aa:89:45:17:ce:a3:9b:
98:e1:72:56:f6:a8:4c:ea:df:23:b4:47:c0:f1:44:58:1b:89:
fe:79:5c:c8:69:24:2e:ab:5b:a2:d0:c9:07:07:cb:76:ec:15:
94:1a:03:e0:5b:3b:e2:da:e8:17:db:6c:d9:7c:5c:65:44:dd:
17:5c:d2:88:cb:ac:83:33:ad:d7:91:68:34:76:7d:98:da:0d:
45:33:70:bd:81:0b:28:dc:e5:d2:93:e5:3e:11:08:f0:ed:77:
82:70:50:12:4c:ec:16:36:28:ce:3a:3d:2f:68:df:c0:f3:ac:
19:66:c2:a0:14:65:9e:c2:ff:d3:50:8a:2e:66:02:41:16:df:
a8:ab:9b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org