Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/IFl6LrEWFQC2C97T1ExeEuV5tIs.roa
File: IFl6LrEWFQC2C97T1ExeEuV5tIs.roa (raw, json)
Hash identifier: Q15bSQqeNHo4tjN+ATGhwASaBR+jdrDco8QvZltpG0o=
Subject key identifier: 20:59:7A:2E:B1:16:15:00:B6:0B:DE:D3:D4:4C:5E:12:E5:79:B4:8B
Certificate issuer: /CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Certificate serial: 0334FEFC
Authority key identifier: E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/IFl6LrEWFQC2C97T1ExeEuV5tIs.roa
Signing time: Mon 30 May 2022 07:01:13 +0000
ROA not before: Mon 30 May 2022 07:01:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26506
IP address blocks: 78.89.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53804796 (0x334fefc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Validity
Not Before: May 30 07:01:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20597a2eb1161500b60bded3d44c5e12e579b48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:05:36:c2:28:b7:14:8f:18:64:e1:3f:45:
14:66:04:75:ff:73:4c:2e:4d:49:62:d4:89:bb:f6:
62:77:05:a5:38:ab:8c:6f:72:a4:08:94:8d:c1:4d:
7e:49:a1:4e:c6:2a:ba:d5:46:d1:c6:26:f8:62:cb:
dd:ff:c4:12:56:a4:1b:fa:8b:44:08:a2:c9:bc:cc:
bc:8e:b8:d1:37:c2:00:99:95:2f:66:08:01:d3:fb:
cd:c1:ce:9b:f4:fc:9d:b5:f4:1a:b2:dd:1b:d1:76:
a1:59:c2:1e:1b:89:e4:37:b5:98:89:1a:47:1c:db:
09:6e:a1:74:1b:67:04:3c:f7:bf:9d:bb:c2:ac:6b:
4d:ab:57:03:8f:e6:37:1e:9a:5f:46:34:6f:1f:f1:
8a:10:35:2c:cf:e7:e8:c7:4d:9d:1d:f7:74:90:91:
da:be:11:03:78:c2:18:b3:63:d9:f9:da:ee:2a:41:
7a:ea:68:8a:ba:9a:64:c3:76:18:96:2e:66:fc:8b:
87:d1:0c:59:d6:5b:10:19:6b:d3:e8:9c:31:bf:e3:
9b:d9:b6:95:08:9b:33:79:4a:d3:42:0d:fd:1b:bf:
5e:d8:59:d8:aa:5d:ff:45:77:35:fc:e9:06:a7:76:
4c:de:70:81:2c:82:8a:fb:4e:d0:04:9e:04:5c:98:
4f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:59:7A:2E:B1:16:15:00:B6:0B:DE:D3:D4:4C:5E:12:E5:79:B4:8B
X509v3 Authority Key Identifier:
keyid:E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/IFl6LrEWFQC2C97T1ExeEuV5tIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.89.148.0/24
Signature Algorithm: sha256WithRSAEncryption
be:f2:8f:1f:98:5c:b4:8e:29:3d:cb:7d:3d:81:0e:be:aa:b2:
f4:4f:02:ab:e0:4b:6e:e4:87:21:2e:5c:f8:3e:14:7c:ee:79:
45:68:0d:13:85:99:b9:b1:d2:96:95:12:80:1e:ab:40:94:f6:
8b:bc:2b:cf:d2:3d:a8:40:2f:d3:0d:e1:7a:20:4e:0e:f5:1e:
77:c2:3c:1e:bf:a2:26:b4:62:e2:6d:89:bb:91:a7:f9:77:a6:
04:39:ab:77:69:12:0d:da:88:ec:3e:4f:dc:b3:3a:ec:f2:5c:
6b:a8:96:46:8b:5f:44:84:20:03:6d:6e:76:c8:ac:53:e4:9c:
0c:7a:c2:8e:12:03:e5:e5:76:15:31:7f:17:42:70:15:78:93:
47:ea:7f:64:01:76:00:e1:ed:ff:58:78:b9:89:2c:5b:80:7b:
5e:42:0f:5e:5a:67:6a:03:44:59:d1:89:3c:8c:4e:af:3c:1c:
11:f4:d6:95:ce:94:1f:59:33:08:51:1f:2d:67:43:b5:fb:b7:
12:77:fb:22:c5:3e:4d:fe:27:84:eb:a0:9e:ca:39:fd:f8:e8:
12:39:e1:52:d6:80:3e:d8:ce:4b:a6:7c:26:fd:b4:d5:73:0f:
09:eb:2f:38:67:52:f2:01:9f:93:91:53:92:f8:bd:de:fd:47:
dd:ab:b0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:04 2024 by rpki-client on console-fra.rpki-client.org