Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/7tTBNZrmG6VH-WvBrSxvc86wzNA.roa
File: 7tTBNZrmG6VH-WvBrSxvc86wzNA.roa (raw, json)
Hash identifier: KUBOT3TW0FBm55mchuPgXC+r8S2ogHIZEu1Pic76Kgc=
Subject key identifier: EE:D4:C1:35:9A:E6:1B:A5:47:F9:6B:C1:AD:2C:6F:73:CE:B0:CC:D0
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 17DF1FBD
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/7tTBNZrmG6VH-WvBrSxvc86wzNA.roa
Signing time: Sat 01 Jan 2022 00:54:38 +0000
ROA not before: Sat 01 Jan 2022 00:54:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57223
IP address blocks: 78.28.233.0/24 maxlen: 24
78.28.230.0/24 maxlen: 24
78.28.255.0/24 maxlen: 24
78.28.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400498621 (0x17df1fbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 1 00:54:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eed4c1359ae61ba547f96bc1ad2c6f73ceb0ccd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ff:fd:64:32:74:da:1c:ad:57:5f:b8:7b:fd:
4b:97:ad:2d:df:c2:95:e3:a7:ce:ca:79:56:7e:05:
f2:72:c1:8a:dd:b5:28:fe:4b:15:4d:7d:2e:2f:dc:
4e:e5:a6:fb:94:c5:7a:6d:f7:6b:5e:ea:18:2b:fb:
c7:cf:a9:79:14:1c:b2:9a:f1:23:54:ef:9e:27:fe:
aa:14:22:17:00:67:28:dc:86:b2:e2:a6:be:15:c7:
71:4a:7a:cc:48:e5:68:30:88:12:24:7a:72:0c:f3:
69:15:f7:a7:82:51:37:84:69:9a:b0:fa:da:fa:c6:
68:8a:23:2b:b1:f0:bc:b7:31:6e:b2:89:ba:ec:2a:
5b:69:42:45:67:48:0f:fa:75:58:94:88:71:c4:0a:
55:c8:a2:23:58:ce:31:e9:71:80:2d:46:72:20:ec:
ed:b8:dc:ab:b1:b4:11:b9:cd:60:3a:74:58:ba:f1:
1b:e6:f8:f5:6f:08:55:bd:26:68:ab:72:af:9e:90:
96:25:3a:40:cb:07:0d:b9:b2:77:38:d9:97:39:b6:
aa:1b:4a:28:40:62:50:25:30:29:49:14:4c:53:27:
0b:26:0d:64:90:45:86:8f:64:6a:1e:61:a8:41:cf:
b0:e6:e6:fe:20:07:1e:06:37:16:79:ef:21:7a:e8:
88:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D4:C1:35:9A:E6:1B:A5:47:F9:6B:C1:AD:2C:6F:73:CE:B0:CC:D0
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/7tTBNZrmG6VH-WvBrSxvc86wzNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.28.194.0/24
78.28.230.0/24
78.28.233.0/24
78.28.255.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:d8:39:6d:08:f7:c9:ea:5e:6a:43:9c:06:32:3a:aa:4d:6c:
2e:3b:fd:62:5f:b0:1c:2f:c2:cc:9c:22:ef:43:db:32:1f:cb:
ae:29:5b:91:6d:ca:05:e9:bd:5e:b3:90:7d:01:20:12:06:c6:
6b:91:dc:4e:97:42:8f:3d:dd:06:c6:70:28:90:1b:22:53:e4:
f6:e8:77:90:35:7e:b1:e9:63:83:94:37:4d:b9:24:1a:de:33:
ef:f2:4f:25:8a:7d:48:5d:bb:72:51:3f:d1:fb:9f:87:74:50:
3e:0e:42:8f:63:bf:17:f2:c9:11:9a:09:ad:b5:eb:b7:37:15:
98:fd:54:19:87:21:70:43:7b:42:3b:e3:6c:77:16:6f:80:4a:
86:4c:01:5f:84:ed:eb:0f:e0:c6:3b:53:62:4b:40:b5:cb:87:
38:53:c4:8d:c5:13:c8:94:dc:d1:d7:c8:53:a5:43:4c:39:0b:
6c:c9:0f:2c:d9:89:c8:25:88:87:db:d5:d4:c8:40:d5:66:d9:
30:95:5f:b8:10:78:02:2b:ce:b5:22:fe:bc:d0:2a:09:b6:41:
7b:a0:6f:d7:98:b5:44:75:bb:b1:d8:0e:5e:71:0f:f4:e3:0b:
28:7c:f5:1c:fe:82:59:42:e7:1a:03:ae:cc:b2:12:77:ea:90:
24:f9:d2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:06 2023 by rpki-client on console-fra.rpki-client.org