Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/BB4PiRK0Ba-G8OmuXwH6Q_Klivo.roa
File: BB4PiRK0Ba-G8OmuXwH6Q_Klivo.roa (raw, json)
Hash identifier: YQq9eDYbEW6xim8Ki8BvFPaioD6qZrc2OpXSP/0xuSQ=
Subject key identifier: 04:1E:0F:89:12:B4:05:AF:86:F0:E9:AE:5F:01:FA:43:F2:A5:8A:FA
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 0407AC42
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/BB4PiRK0Ba-G8OmuXwH6Q_Klivo.roa
Signing time: Thu 12 May 2022 23:47:05 +0000
ROA not before: Thu 12 May 2022 23:47:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 195.34.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67611714 (0x407ac42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: May 12 23:47:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=041e0f8912b405af86f0e9ae5f01fa43f2a58afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:02:82:9d:f0:3d:4b:08:da:34:4e:96:d4:
71:43:51:2a:4f:d2:7b:4e:83:7b:6b:35:be:36:b6:
f9:1a:df:6a:61:65:d2:c7:1d:84:d2:9e:ee:f6:e3:
58:d3:08:38:48:79:b1:32:8b:2c:de:23:f8:65:b7:
ba:43:fa:e8:49:2b:41:19:a1:03:58:ba:c9:80:3c:
9d:c7:83:6b:84:8a:69:c4:23:6e:8e:ee:f2:3c:6b:
7e:e7:d8:7a:d7:a5:8d:92:a0:5b:13:57:5b:b3:ce:
84:20:84:a2:15:28:3b:15:1a:41:3c:df:74:65:98:
5c:73:57:42:4c:a2:f6:b8:d0:63:3f:3a:41:a1:e2:
5d:4d:d5:50:4c:10:0d:b5:fe:47:fa:69:5d:88:e9:
e3:0b:c5:0a:e7:9f:2d:ec:9f:d3:25:54:77:0d:83:
71:59:62:6b:05:2a:74:24:7f:02:e1:1d:aa:0c:9a:
9b:0b:9f:f5:64:f3:d3:7a:5d:fc:d6:5e:b3:11:6c:
1a:1b:44:d3:f7:66:a9:a0:5f:b3:6e:6d:c5:50:64:
8b:2c:67:5a:07:98:83:33:e9:23:57:21:b0:1c:29:
6b:8c:cb:ee:16:b9:f3:5c:c0:e7:01:ff:25:ba:74:
87:bf:4b:21:7f:f5:95:1f:dd:3b:68:21:ce:ca:3a:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1E:0F:89:12:B4:05:AF:86:F0:E9:AE:5F:01:FA:43:F2:A5:8A:FA
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/BB4PiRK0Ba-G8OmuXwH6Q_Klivo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.78.0/24
Signature Algorithm: sha256WithRSAEncryption
04:65:df:b1:02:b0:59:75:c1:ef:04:93:9a:32:a4:44:37:9d:
8b:91:89:fc:b8:c5:ee:13:22:08:b5:5c:9c:53:81:ee:e3:91:
37:a7:24:b3:19:ad:9a:0b:6b:7b:0c:5e:74:e9:83:c7:63:f3:
eb:03:5a:f6:64:e9:84:49:52:f8:05:38:c7:82:ba:63:24:06:
c8:b9:60:09:9b:db:3e:ff:29:d6:44:c8:24:04:22:f8:2a:0a:
9a:72:21:e0:a0:56:80:ed:24:b3:61:c7:18:f9:e8:7d:8e:72:
2f:96:4c:3a:62:e5:e1:ba:fc:2c:1e:55:01:a4:75:3c:ab:0e:
2b:a2:88:5b:6d:f9:4a:49:01:10:5c:ca:35:12:fa:79:e6:8b:
76:85:cd:b0:f5:1c:d9:90:19:a5:d7:00:21:25:85:10:a6:b4:
12:41:43:0d:f5:eb:54:46:e5:b9:16:81:e9:0d:34:e7:65:d4:
cf:c9:78:1d:91:54:c0:8e:c4:2d:46:1c:a3:7e:66:ae:7d:33:
de:b7:f3:52:a5:6e:7e:71:9c:02:9b:ed:48:3f:dc:2e:91:39:
a7:1a:3a:4c:e8:21:68:7d:95:a7:2c:54:d2:9a:16:df:56:3f:
47:0c:06:c4:d1:67:9a:45:74:00:ed:59:99:86:ef:27:8d:3e:
ba:36:64:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org