Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PZP3jyb8Lk4Qqfuil9PbqViMf3c.roa
File: PZP3jyb8Lk4Qqfuil9PbqViMf3c.roa (raw, json)
Hash identifier: Oty6lNi7safw9lTpaggN6uUv6ySMND9H17wooO+0feA=
Subject key identifier: 3D:93:F7:8F:26:FC:2E:4E:10:A9:FB:A2:97:D3:DB:A9:58:8C:7F:77
Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial: 09D9AD97
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PZP3jyb8Lk4Qqfuil9PbqViMf3c.roa
Signing time: Sat 01 Jan 2022 08:54:33 +0000
ROA not before: Sat 01 Jan 2022 08:54:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39479
IP address blocks: 78.26.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165260695 (0x9d9ad97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
Validity
Not Before: Jan 1 08:54:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d93f78f26fc2e4e10a9fba297d3dba9588c7f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d8:e0:34:55:be:8e:5f:ca:da:8a:ab:77:5b:
03:9a:46:15:33:c2:30:af:53:e2:9d:a6:42:39:c0:
6c:8c:c3:34:84:af:f6:a3:3f:ac:95:7f:50:b8:c3:
69:c8:30:b8:bb:0b:3b:fa:85:10:4d:74:75:eb:0e:
59:e5:8f:df:34:2a:29:a3:cd:b9:d9:24:54:93:86:
c8:b0:d2:29:84:8e:7d:14:f4:40:d6:65:7f:62:2b:
00:de:80:bd:20:99:ef:33:d9:3c:cd:ce:d5:3a:1e:
0d:84:db:47:35:11:48:02:d9:6a:47:a1:6a:e2:b3:
00:20:f3:40:26:87:15:c5:88:20:fa:02:91:19:c0:
a1:0d:b4:63:d6:82:91:e4:eb:6d:0d:63:d8:32:49:
de:36:fa:ef:98:a1:db:bf:8e:dc:f9:f3:68:1d:3d:
4e:e7:91:ec:38:99:90:88:67:4e:8a:aa:1d:5f:3e:
d0:49:9c:52:8b:5b:27:1b:db:2d:bc:1d:12:e2:02:
84:e5:eb:65:74:28:b1:04:e9:8b:b0:e3:13:d5:b9:
db:c6:43:ee:44:8a:a8:38:2a:c8:3d:21:5e:9f:c9:
ed:88:74:cd:eb:8a:3a:28:c7:d8:e5:98:cc:7d:31:
20:4c:f6:0f:2e:2f:2d:fc:e1:e3:71:31:db:a5:73:
67:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:93:F7:8F:26:FC:2E:4E:10:A9:FB:A2:97:D3:DB:A9:58:8C:7F:77
X509v3 Authority Key Identifier:
keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PZP3jyb8Lk4Qqfuil9PbqViMf3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.26.127.0/24
Signature Algorithm: sha256WithRSAEncryption
95:5f:77:b9:81:4c:81:c3:b8:6e:82:25:06:cf:4e:7b:9b:6d:
3a:3f:27:f4:68:b6:0f:56:ea:21:64:5f:9a:97:11:55:0e:10:
f4:63:7a:3d:f1:4c:1b:7f:c7:e3:c7:98:1d:eb:cd:ce:a3:a7:
ec:64:04:6f:4c:1c:14:c4:f0:63:d8:ec:df:dc:9b:3f:2a:83:
0b:f8:f6:05:34:89:48:bc:a3:93:ad:36:f7:97:14:2f:f3:85:
4c:83:3c:3d:f0:d6:76:91:80:c4:ea:09:9b:79:3d:6b:a2:0b:
d2:76:ef:d8:0e:5c:b4:f7:ba:b7:45:9f:9a:48:46:2f:55:eb:
3d:de:d3:e4:8a:de:85:25:9c:87:06:8a:dc:68:d8:e9:62:86:
05:d5:4a:27:92:4e:db:65:c8:dc:3a:d2:f0:1e:b9:3e:10:8d:
e6:a2:00:40:bb:fe:bb:08:b1:6a:81:ee:d6:78:20:13:fc:f5:
74:2e:01:4b:eb:ab:8e:75:5c:91:f6:73:e9:c9:7d:32:53:69:
c9:d6:d6:71:89:14:08:ba:ce:0b:8f:87:a0:c8:a4:18:5a:40:
a7:89:52:f9:1c:88:a0:68:bf:87:aa:5c:ba:09:3b:1e:83:63:
92:ee:8c:a9:14:d8:b3:1a:c3:e8:35:98:55:08:13:a6:ec:a9:
09:e8:39:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:35 2024 by rpki-client on console-fra.rpki-client.org