Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/yZXHTsHf4j9cDs-cY06i3Mu5gYE.roa
File: yZXHTsHf4j9cDs-cY06i3Mu5gYE.roa (raw, json)
Hash identifier: /7FCXrhyjDmDEMROrLVqO1i8Wj3PASQOfnRNQ5QV4hk=
Subject key identifier: C9:95:C7:4E:C1:DF:E2:3F:5C:0E:CF:9C:63:4E:A2:DC:CB:B9:81:81
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 17CDDD60
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/yZXHTsHf4j9cDs-cY06i3Mu5gYE.roa
Signing time: Sat 01 Jan 2022 00:54:28 +0000
ROA not before: Sat 01 Jan 2022 00:54:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24620
IP address blocks: 78.154.128.0/20 maxlen: 20
213.175.84.0/23 maxlen: 23
213.175.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399367520 (0x17cddd60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 1 00:54:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c995c74ec1dfe23f5c0ecf9c634ea2dccbb98181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:fb:c6:d8:45:5e:ed:6a:ea:3c:74:88:74:
72:05:2e:4c:70:c7:2b:8d:f8:d5:4e:17:25:0f:80:
35:2e:c8:da:82:b4:0b:1e:f4:3a:d0:6e:1d:be:ee:
be:49:12:0f:9b:03:df:5c:bb:a9:5b:d4:5e:fa:2b:
9a:0e:33:b0:22:4f:e9:5a:be:23:4e:35:9b:25:32:
94:e1:c8:af:78:41:f1:3d:d1:c8:e2:2f:98:62:40:
8d:0f:4b:07:57:0d:8b:9a:f1:c8:81:dc:1f:43:6a:
bc:37:9e:bd:dd:ab:74:24:cd:5a:89:1d:61:46:b9:
84:78:f2:c8:4d:f3:eb:8f:c7:ea:dc:d0:e6:10:dd:
ef:6f:99:b6:12:38:89:24:ea:9e:a4:3c:76:c2:6c:
7f:df:a9:65:6e:19:c9:e9:66:7c:75:7a:c8:13:64:
de:12:1b:10:48:88:96:50:2a:43:6a:32:b2:3f:e6:
d6:cd:35:ae:85:6d:a5:fa:79:43:c3:af:e2:65:ca:
d0:43:fa:44:19:96:e7:7c:37:a7:90:6f:76:19:6b:
df:a2:e3:b9:5f:32:98:f6:7a:79:b5:74:ff:13:32:
15:e5:55:9d:34:94:bf:00:07:31:05:7d:99:e6:91:
75:7e:f1:ce:ce:03:d8:9f:21:b0:aa:16:e9:42:9d:
74:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:95:C7:4E:C1:DF:E2:3F:5C:0E:CF:9C:63:4E:A2:DC:CB:B9:81:81
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/yZXHTsHf4j9cDs-cY06i3Mu5gYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.128.0/20
213.175.84.0/23
213.175.88.0/21
Signature Algorithm: sha256WithRSAEncryption
70:01:ac:78:92:04:1d:61:ea:2c:5f:56:a4:78:05:2a:68:8d:
a5:95:5b:9a:1a:76:83:90:a5:9d:ac:26:6c:f9:e7:11:4b:96:
7a:17:fc:4c:be:c6:59:e0:e8:81:0c:2c:0d:a5:d7:75:3e:9f:
76:24:37:74:42:ef:ac:d1:8d:8b:0f:cc:99:fc:03:56:42:4c:
0b:c0:1b:25:1d:ef:f4:c7:5d:bd:8f:cb:b2:29:d9:8d:83:bd:
2b:f1:17:f1:75:c9:0f:2b:24:69:56:82:e6:00:92:59:d5:ff:
7c:8e:e7:df:95:9d:b4:4c:e3:e4:44:a8:d6:2e:0b:b1:9a:62:
3e:dd:93:91:49:16:98:19:0b:40:09:a3:af:57:1f:71:61:94:
20:2c:e9:d7:0f:6f:67:3e:bb:37:ab:b6:7a:64:a9:26:39:a0:
50:5b:48:1e:cd:58:15:11:f2:f0:ac:48:f8:8e:a6:90:b0:1f:
bd:a3:a2:af:ab:11:be:59:14:04:8f:3c:46:f0:5a:2e:dc:fd:
ab:b0:a6:cd:3e:12:0d:83:14:45:79:65:7c:dd:08:7c:a5:90:
c7:1f:b2:a6:75:48:1c:40:18:29:38:d7:4a:51:88:76:5b:3a:
c9:15:ba:aa:a5:de:bb:d6:e1:17:7a:e6:49:d9:cb:f7:6f:77:
db:57:3f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:06 2023 by rpki-client on console-fra.rpki-client.org