Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/6tpNgXf24Z60gG3bqNdDwiVYkpw.roa
File: 6tpNgXf24Z60gG3bqNdDwiVYkpw.roa (raw, json)
Hash identifier: MyAAl+WnLBS9jTI0MEo9enKLT5IoQHzqyhGIJ+zUb+k=
Subject key identifier: EA:DA:4D:81:77:F6:E1:9E:B4:80:6D:DB:A8:D7:43:C2:25:58:92:9C
Certificate issuer: /CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Certificate serial: 0182A5551FFCF98F2002BE949EA79F4C88A8
Authority key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/6tpNgXf24Z60gG3bqNdDwiVYkpw.roa
Signing time: Tue 16 Aug 2022 06:26:35 +0000
ROA not before: Tue 16 Aug 2022 06:26:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 78.24.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a5:55:1f:fc:f9:8f:20:02:be:94:9e:a7:9f:4c:88:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Validity
Not Before: Aug 16 06:26:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eada4d8177f6e19eb4806ddba8d743c22558929c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:28:53:f2:a2:c7:24:f3:8f:e1:05:c3:a2:f0:
bb:62:34:2e:97:6e:02:e7:76:6f:7f:6b:22:65:b2:
94:19:7f:eb:48:c9:36:ab:83:c4:b8:3c:b0:06:ea:
18:1b:f4:ca:72:0e:6a:e3:d6:c2:c7:a2:9b:ae:48:
3e:3d:38:34:55:1b:04:49:a1:45:22:08:41:22:3e:
b2:6f:ac:2e:de:c5:2d:fb:1b:3e:c6:48:de:ad:16:
d0:30:e6:d5:10:fd:de:15:e6:39:3c:68:ea:77:5b:
13:20:f7:d4:da:99:fd:ec:4e:f6:f4:33:b4:59:e1:
c9:4d:4e:c7:92:46:8c:f3:1b:6f:ba:11:b3:71:08:
81:6d:e1:15:4b:a0:dc:77:c4:59:91:fe:d1:59:74:
4f:e9:e7:15:ae:17:90:6e:5c:9b:6c:8d:17:40:07:
4f:ca:95:3b:fb:e7:24:16:a1:6b:25:6b:0c:e8:8c:
75:10:47:93:fb:bf:69:0b:46:0c:55:c6:2e:d3:4d:
bf:f6:cf:93:15:dc:33:5a:67:f8:d7:51:51:32:79:
ad:81:8a:77:6a:89:5e:d0:cf:ba:86:84:ad:c4:47:
62:5a:0c:b5:a3:7f:f0:42:55:3a:aa:25:b6:03:07:
12:dc:49:3f:dc:32:ff:f5:26:a9:1f:4c:12:96:7e:
2d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DA:4D:81:77:F6:E1:9E:B4:80:6D:DB:A8:D7:43:C2:25:58:92:9C
X509v3 Authority Key Identifier:
keyid:80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/6tpNgXf24Z60gG3bqNdDwiVYkpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.205.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c4:21:ab:ef:4a:ed:34:42:b4:2f:a1:e0:bb:fb:41:f3:e0:
4f:3c:65:8b:cc:2d:14:ea:a0:ea:1f:44:85:05:12:21:da:91:
97:a5:ca:a9:00:c1:b5:42:cc:fa:f6:07:96:55:b1:59:9a:bc:
7e:38:d2:8f:c4:cd:19:c0:5e:ac:39:fb:bd:0a:51:4f:06:59:
9e:f6:b0:1b:36:e6:ef:5d:4c:a7:ea:05:00:08:51:89:8b:c3:
f3:0b:73:19:7c:09:68:44:d3:a3:2b:0f:ed:92:06:f4:0e:d7:
91:4c:8a:ad:38:6a:85:8b:38:d6:2c:ac:a4:84:48:cb:c9:8b:
bc:83:44:b1:f3:d3:db:4a:ff:5c:a5:92:b4:1d:5d:da:74:6a:
c3:39:17:9f:5c:69:ba:92:01:95:24:de:95:d4:b2:e9:e3:09:
d6:85:ec:7e:58:1e:d8:e0:89:5f:1f:5f:3b:5b:4a:10:25:80:
ef:24:af:ff:09:53:ec:2b:93:a5:00:15:f9:5a:02:25:c4:fa:
67:11:fa:c1:05:e7:09:ac:85:cd:30:02:a9:5d:4e:6f:b9:2b:
6b:10:3f:32:73:8f:cd:b3:95:a6:c1:ca:06:67:bb:40:1d:eb:
47:02:3c:00:84:15:53:99:b9:4c:8f:2c:28:20:83:9a:05:9a:
f5:a5:a1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:32 2023 by rpki-client on console-fra.rpki-client.org