Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/5_Px6-eRCbKUZ9zhX_owpXVHzuw.roa
File: 5_Px6-eRCbKUZ9zhX_owpXVHzuw.roa (raw, json)
Hash identifier: GT9eIsW1u+gQBomRON915OhomHKxb/XGMGrpH9P2Zcc=
Subject key identifier: E7:F3:F1:EB:E7:91:09:B2:94:67:DC:E1:5F:FA:30:A5:75:47:CE:EC
Certificate issuer: /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Certificate serial: 07C9D3FF
Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/5_Px6-eRCbKUZ9zhX_owpXVHzuw.roa
Signing time: Sat 01 Jan 2022 08:58:56 +0000
ROA not before: Sat 01 Jan 2022 08:58:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209553
IP address blocks: 147.78.32.0/23 maxlen: 24
2a09:1c40::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130667519 (0x7c9d3ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39
Validity
Not Before: Jan 1 08:58:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7f3f1ebe79109b29467dce15ffa30a57547ceec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:ed:8e:ee:5c:6f:2f:08:c1:70:9d:49:2b:
62:18:b7:b0:40:5d:1a:52:77:e8:d4:74:f1:ba:2a:
6c:85:25:ff:32:8d:db:3f:e6:8a:f8:83:5b:e6:1f:
a3:10:cc:11:64:e6:1d:ec:bd:a6:d9:52:d3:4d:dc:
1d:0b:8b:5a:e2:27:e8:e5:bc:80:0a:55:f3:b3:11:
9d:40:bb:74:43:d5:66:e0:0c:92:15:54:c4:d2:56:
e8:d3:1f:4a:21:eb:72:b7:ef:3a:ec:65:3a:e4:72:
ab:93:35:6f:e6:bf:4e:df:69:f1:68:1b:d4:ac:34:
1b:0b:4b:eb:7d:2a:21:c7:a9:a3:da:10:5a:b8:a1:
8d:5f:55:6c:86:86:b2:90:dd:2b:58:ad:75:c8:39:
77:a1:d9:d2:61:f8:27:39:c2:6d:f3:50:8d:d4:f0:
c6:89:42:7f:e8:79:55:d6:f7:b3:a8:8a:ad:43:73:
13:23:e6:13:3c:1e:47:19:ae:09:b5:1a:a5:fc:78:
2e:d0:59:09:61:33:2c:47:5e:c9:2d:c1:9b:46:0a:
86:36:fd:7e:2e:d0:df:74:6f:9b:f5:f9:90:a8:48:
17:23:a5:de:51:2e:af:e6:2a:6d:80:9f:a3:73:12:
4d:be:c4:61:22:13:0d:10:b9:eb:66:8c:07:47:67:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F3:F1:EB:E7:91:09:B2:94:67:DC:E1:5F:FA:30:A5:75:47:CE:EC
X509v3 Authority Key Identifier:
keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/5_Px6-eRCbKUZ9zhX_owpXVHzuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.32.0/23
IPv6:
2a09:1c40::/32
Signature Algorithm: sha256WithRSAEncryption
7d:9e:a2:58:6a:49:d5:35:a1:9e:97:ad:18:a5:d8:b2:ae:73:
a7:e8:f8:72:96:20:da:90:c5:fa:28:e5:cf:fa:83:2e:f8:cc:
bf:bb:cd:30:13:30:89:e6:ad:24:5b:8b:92:bf:d5:29:b3:7e:
b3:96:19:fb:d8:0e:34:51:e7:68:19:0f:2c:95:31:a4:08:c1:
89:20:75:61:56:a6:bf:89:1f:fb:a1:d3:e7:31:89:58:60:ac:
25:7d:b0:e6:aa:7d:2d:ca:db:7b:ea:12:60:29:de:31:45:5d:
e9:4e:9e:30:36:45:13:ae:5d:d8:d1:c2:3b:ca:2c:ce:49:08:
8b:e2:b8:10:02:3d:2d:68:6e:87:70:1d:93:a7:8c:4a:b8:b1:
a6:d4:37:46:78:7c:bc:45:43:79:c3:cb:77:18:06:76:6a:63:
01:0d:09:95:f9:76:ce:a6:a0:07:ff:83:76:71:fc:f2:2f:fb:
af:83:1f:80:ae:3a:03:cc:4d:54:e6:be:31:ee:44:11:82:29:
3b:a2:7e:cb:18:1c:ac:07:11:8b:07:b3:a3:1a:50:de:e9:89:
73:fe:2f:19:97:a9:81:9c:d6:7f:ac:ef:3a:19:ad:fe:6e:dd:
f7:8d:21:90:a0:3f:06:0b:fc:0b:21:c9:3c:81:51:d4:96:19:
a4:8a:b1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:20 2024 by rpki-client on console-fra.rpki-client.org