Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/7NxsH8ftYxAwxjgqBmvCaIhQAFY.roa
File: 7NxsH8ftYxAwxjgqBmvCaIhQAFY.roa (raw, json)
Hash identifier: 7wYNFk9xoTvASkZAg0aCrvL0ruGrabKE6q+1+GWnXOI=
Subject key identifier: EC:DC:6C:1F:C7:ED:63:10:30:C6:38:2A:06:6B:C2:68:88:50:00:56
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 086200E4
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/7NxsH8ftYxAwxjgqBmvCaIhQAFY.roa
Signing time: Mon 11 Apr 2022 08:51:06 +0000
ROA not before: Mon 11 Apr 2022 08:51:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 147.78.198.0/24 maxlen: 24
147.78.199.0/24 maxlen: 24
147.78.197.0/24 maxlen: 24
147.78.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140640484 (0x86200e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Apr 11 08:51:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ecdc6c1fc7ed631030c6382a066bc26888500056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8a:ce:b4:55:c2:85:8f:2f:a4:c2:8b:22:1c:
e2:41:d4:c7:c8:a8:09:ff:e3:d9:2e:b3:b2:4d:c3:
9d:25:39:b4:b2:00:b6:ba:03:c5:59:43:1a:a7:e8:
0e:22:8c:d9:75:dc:fd:b3:60:ba:34:88:f6:f6:a6:
fd:be:fe:bb:04:db:58:38:93:48:98:11:3e:82:ae:
93:44:56:46:63:47:12:91:59:f7:f2:39:7c:7a:b2:
82:03:36:34:60:86:11:8d:65:2e:60:46:89:8c:70:
51:16:81:d4:db:a6:23:ac:72:a8:52:80:cd:07:7b:
33:9b:0f:95:0b:1e:44:ca:65:29:17:d8:1f:12:59:
1f:76:ba:de:3f:fa:55:87:c3:50:00:91:7f:65:3e:
3d:55:01:12:86:bf:b0:68:a0:bb:cf:16:fc:b6:e0:
7e:64:d2:d3:ac:a7:3a:f5:b9:25:48:36:a8:38:c2:
50:3e:74:70:a0:2a:84:75:cb:a9:28:2c:06:c9:8f:
52:c9:4d:77:73:6e:8e:cd:50:5a:2b:a3:e9:f5:e4:
bb:e0:ba:2d:56:98:1a:a9:83:b3:4b:2a:b7:e8:a8:
ec:74:0d:7c:12:9f:4c:2b:5e:9d:36:b1:6c:72:37:
0b:5c:8e:61:a5:f8:d3:f8:0e:9c:40:39:af:27:1c:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DC:6C:1F:C7:ED:63:10:30:C6:38:2A:06:6B:C2:68:88:50:00:56
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/7NxsH8ftYxAwxjgqBmvCaIhQAFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.196.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:25:59:b5:91:46:81:3c:a1:5c:1d:42:5d:44:54:ca:50:f1:
4d:d0:61:25:c1:a9:81:e6:d0:ff:ed:61:b3:91:12:26:ac:1c:
40:e2:dd:15:ec:ab:1c:4c:26:d7:ac:a0:61:cc:09:06:ff:0a:
00:84:15:72:69:4c:8d:44:b4:0f:ef:a0:a1:25:09:f9:db:49:
a1:8c:dd:01:f2:68:f3:89:5f:e3:9a:48:a7:a9:8b:27:51:e3:
2e:fb:df:f1:4d:90:96:41:e9:53:a2:d2:ce:c2:11:e0:2f:dc:
14:f6:bc:34:bc:33:b1:11:82:13:70:2d:0e:65:dc:21:9b:c5:
4d:9b:69:d7:85:84:e9:4a:c0:06:ac:36:1a:e5:e2:1c:49:d5:
ca:50:cf:b5:4e:f2:99:a8:aa:54:ff:13:ec:ec:bb:9a:9b:85:
42:d7:c6:a2:6f:ff:80:3d:28:32:a7:4f:a1:1f:e2:61:1a:70:
8a:22:55:3b:45:b9:05:9a:30:cb:6f:db:52:f9:f5:bf:9c:ac:
1e:d6:b9:ce:90:32:ec:6e:d4:e3:c5:64:17:90:d4:a8:2e:44:
b3:5c:08:4b:96:bf:d0:6e:59:a5:90:c3:6e:87:25:e5:19:a1:
03:7c:2a:fb:00:e3:d5:47:60:ee:e8:a4:f7:b4:da:54:82:7d:
4d:08:bd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org