Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/4wb0luicXZloVZDXQN-HxPHgUrs.roa
File: 4wb0luicXZloVZDXQN-HxPHgUrs.roa (raw, json)
Hash identifier: W17UIMH0qKaRhJp/US10Oa/Dusqz919eFpGQBSUhzKk=
Subject key identifier: E3:06:F4:96:E8:9C:5D:99:68:55:90:D7:40:DF:87:C4:F1:E0:52:BB
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 03F87822
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/4wb0luicXZloVZDXQN-HxPHgUrs.roa
Signing time: Sat 01 Jan 2022 01:52:24 +0000
ROA not before: Sat 01 Jan 2022 01:52:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15362
IP address blocks: 78.130.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66615330 (0x3f87822)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 01:52:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e306f496e89c5d99685590d740df87c4f1e052bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:ef:e8:c5:9a:fd:d6:f1:33:51:57:ce:2b:
1c:bf:2f:1d:1c:ff:02:0d:8d:2d:28:cd:e3:9f:65:
6d:90:a7:ec:c1:d6:75:57:82:43:78:fa:96:77:af:
7a:1a:58:f5:1b:c1:2b:9e:07:f6:39:cd:f0:f0:43:
96:10:80:f2:98:63:72:24:22:2c:04:4c:2e:76:0a:
6c:d3:4c:77:0a:ec:17:7f:78:a8:39:bb:c2:53:68:
68:83:be:51:1c:99:96:89:17:63:b3:93:cc:4d:e0:
50:1b:00:09:fb:7a:fc:7a:b1:4f:0d:8f:76:85:31:
c6:90:2f:24:43:1f:75:57:5f:55:b1:4c:b1:54:44:
6f:01:10:fb:6d:d5:cb:e3:32:02:d5:b7:2a:f4:65:
f9:f7:a2:69:c6:9e:43:8f:fc:39:fb:39:7f:48:a7:
80:44:38:a7:bd:d4:8b:c2:e8:5f:74:1e:7f:9b:14:
50:ca:c5:b1:3b:bc:e5:0c:4c:4f:45:cd:a0:25:c0:
b8:7c:00:37:af:f2:81:bc:e5:57:32:57:c2:93:7a:
33:f3:40:11:bd:00:02:c8:6b:b1:12:aa:c0:fe:ed:
da:ec:d4:8c:38:c5:1c:1f:e6:9c:9d:e2:d3:5c:1e:
bb:09:12:42:e2:3b:a0:b3:8a:2f:44:eb:5a:53:ab:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:06:F4:96:E8:9C:5D:99:68:55:90:D7:40:DF:87:C4:F1:E0:52:BB
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/4wb0luicXZloVZDXQN-HxPHgUrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.130.156.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:c3:d6:60:1d:df:32:46:83:24:29:52:b6:17:cb:b2:59:2f:
c3:00:39:cc:3b:07:f8:1c:94:e0:99:78:fc:57:ff:ca:81:e4:
be:a5:be:1d:d7:bd:0b:e0:e8:9a:a9:a2:07:47:d5:83:d6:5f:
e0:20:ee:76:7c:5e:24:bd:2c:d0:0e:66:82:f8:62:fd:af:de:
1d:7a:75:92:10:8d:2e:c2:66:51:e6:2b:72:4f:f7:be:ca:df:
41:b6:3a:70:59:34:9a:ed:38:99:84:45:78:40:16:ed:35:9c:
bb:94:9b:5e:36:75:8b:cd:de:58:99:36:9f:db:90:2e:7a:ca:
cf:de:0c:ad:a9:ca:85:49:95:89:50:a3:5e:23:51:bb:84:e2:
a7:d0:ed:94:d8:8c:7f:a4:3c:00:1f:d1:57:49:3d:27:ba:7c:
31:f2:9e:a6:ae:25:43:46:49:e8:e5:83:db:e2:7b:7c:ad:d8:
71:f7:2e:95:29:7b:ce:e9:15:1b:cf:29:94:2b:07:58:8b:ae:
43:21:62:57:94:d7:19:1c:ff:38:e0:57:2b:10:91:2d:3c:9b:
0a:55:a1:3d:69:30:19:6f:70:ba:71:be:82:83:06:02:09:e8:
9f:17:d9:91:8a:85:c8:82:bf:56:c8:59:e3:dc:d0:2a:62:32:
c0:89:19:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:48 2024 by rpki-client on console-fra.rpki-client.org