Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/mbydE1ZRDLAZnOaN-bS-74p6ZDs.roa
File: mbydE1ZRDLAZnOaN-bS-74p6ZDs.roa (raw, json)
Hash identifier: VQROInKY5Xi+8uOeZcuB1bs5h5X2OFiJlPp1IWnz1DE=
Subject key identifier: 99:BC:9D:13:56:51:0C:B0:19:9C:E6:8D:F9:B4:BE:EF:8A:7A:64:3B
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0184142BCFB2C12999A1A3604563E09E0868
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/mbydE1ZRDLAZnOaN-bS-74p6ZDs.roa
Signing time: Wed 26 Oct 2022 12:02:06 +0000
ROA not before: Wed 26 Oct 2022 12:02:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34552
IP address blocks: 78.109.112.0/20 maxlen: 20
78.109.123.0/24 maxlen: 24
78.109.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:2b:cf:b2:c1:29:99:a1:a3:60:45:63:e0:9e:08:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 26 12:02:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=99bc9d1356510cb0199ce68df9b4beef8a7a643b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:d7:35:96:bf:c6:32:73:0b:47:d9:46:29:
22:67:a2:8e:01:c5:28:0d:a2:76:21:2b:79:4d:f7:
81:fa:eb:6e:8c:aa:1c:8b:61:d2:74:08:9f:a1:90:
e9:66:37:b4:e1:92:9a:e7:db:02:88:4a:74:29:85:
b8:9f:84:8c:e7:d2:1e:40:46:5e:c7:01:43:3a:00:
f3:91:1d:65:27:b9:2a:7d:cf:c8:1a:bf:55:dd:d5:
46:c5:8c:54:a7:e3:eb:2f:07:7f:f8:50:4c:ba:0f:
47:4f:25:58:36:f5:ef:23:7a:50:7b:aa:8d:9d:05:
13:e5:c3:c8:08:1f:08:43:11:38:9a:ff:e1:3e:1c:
74:68:79:0c:d2:f9:94:35:70:16:4f:2c:05:58:0c:
79:a0:4f:81:8b:f1:5a:80:94:7c:f2:95:65:a8:51:
a6:4c:3f:e1:d1:00:d7:4f:85:6f:c1:e3:15:db:95:
3b:23:3c:ba:cf:c2:7b:5b:8d:f0:7d:59:cd:0b:39:
2e:64:2c:e9:db:1e:30:d8:79:d5:07:3f:db:34:0a:
4e:36:ff:6d:0d:f6:bb:2c:79:b5:92:21:ac:9c:49:
14:2d:c3:12:13:9e:ca:28:c7:d2:9a:dd:88:12:0e:
64:fe:68:61:98:a7:8c:af:fc:83:ae:aa:96:82:b9:
95:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BC:9D:13:56:51:0C:B0:19:9C:E6:8D:F9:B4:BE:EF:8A:7A:64:3B
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/mbydE1ZRDLAZnOaN-bS-74p6ZDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.112.0/20
Signature Algorithm: sha256WithRSAEncryption
7a:67:04:13:f5:4b:bb:a5:ba:a0:62:40:4d:c6:bd:73:6f:83:
3b:ba:9f:51:30:28:30:e1:92:06:97:41:ef:f5:b0:76:8d:d5:
0e:8d:04:4f:f3:d6:6f:38:dd:ed:97:f7:d5:1c:07:ef:c2:8a:
4d:d3:a9:87:64:71:70:28:5e:fe:e5:77:ad:d0:c3:6a:3e:6c:
bd:26:5e:b9:ea:f0:ab:fc:1c:2d:dc:54:97:e2:99:1b:fb:22:
bb:c9:66:82:42:24:e1:be:0f:89:32:b7:2a:43:89:ac:cf:40:
6d:60:db:3c:1c:3c:6c:1b:61:a1:99:c9:b9:96:5a:3b:fb:97:
af:86:28:f3:f5:15:ed:2e:28:a7:65:01:63:ee:80:e3:35:17:
9f:72:7d:56:78:d1:cb:b0:2b:6b:a0:5c:cc:c4:4a:46:5a:14:
de:93:86:58:75:75:ae:77:fd:0d:6b:51:0a:95:85:24:92:88:
c6:65:99:3e:49:1f:e9:db:0a:2b:8d:01:c2:10:d8:f2:8a:70:
91:de:08:23:0a:22:7d:b6:87:93:98:40:fd:c3:27:76:d0:7f:
41:d5:c8:26:78:f2:08:0b:f1:7c:92:20:a0:58:dc:58:db:bc:
89:11:5c:7a:47:7b:9b:9f:03:54:a2:8a:73:38:85:03:18:e4:
d2:22:c4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:36 2024 by rpki-client on console-ams.rpki-client.org