Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/9clCBIP2CJFXxmTkAzKhhIhoKy4.roa
File: 9clCBIP2CJFXxmTkAzKhhIhoKy4.roa (raw, json)
Hash identifier: QtSF+SQ4xZ1nRkcJuXbcOZFvHI5TbqbrrwuUXcf5hd8=
Subject key identifier: F5:C9:42:04:83:F6:08:91:57:C6:64:E4:03:32:A1:84:88:68:2B:2E
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 01849F7C597C29AED71E79BA1CBD4A50253F
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/9clCBIP2CJFXxmTkAzKhhIhoKy4.roa
Signing time: Tue 22 Nov 2022 13:17:17 +0000
ROA not before: Tue 22 Nov 2022 13:17:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204392
IP address blocks: 78.159.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9f:7c:59:7c:29:ae:d7:1e:79:ba:1c:bd:4a:50:25:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Nov 22 13:17:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5c9420483f6089157c664e40332a18488682b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:7f:b2:9c:01:da:ae:63:b4:13:e6:56:b8:
1c:ff:58:33:11:18:f8:a9:56:51:16:db:6c:ee:c5:
c4:37:8a:14:aa:39:13:16:ad:b9:d8:e7:0f:23:4a:
88:f5:20:f9:47:05:b9:b0:96:5e:b6:10:2a:d9:ba:
8d:f5:56:87:ad:10:f0:f0:07:6f:23:6d:3f:8b:b1:
bc:11:34:4b:2c:a3:b9:14:15:fb:1c:c8:4e:2f:36:
30:5f:a4:b7:22:a1:a2:bf:8b:5a:05:67:62:2d:d0:
e8:09:7f:a1:eb:09:d6:b8:bf:26:85:85:12:f9:69:
d0:e0:2c:33:5c:ef:3e:60:0b:ba:86:03:3f:d1:80:
2a:55:b7:ee:69:3a:e5:82:ed:54:78:09:6a:af:2b:
40:ca:d4:6f:c2:c8:08:81:d6:05:3b:a3:ff:28:e1:
ef:ac:ba:60:27:ed:d7:ff:ad:76:73:ad:02:22:0c:
de:17:06:31:45:33:25:99:21:e1:9b:88:98:d1:5a:
64:d0:7f:40:ec:1b:d9:8e:18:ae:9a:c1:aa:9b:57:
ce:79:93:c6:91:fd:87:c4:bc:f7:d2:1a:bd:54:8a:
c6:c1:fe:66:e8:54:f9:ed:78:05:22:ff:a5:84:b2:
2e:73:1f:1b:a5:e9:ef:01:f2:12:df:34:79:d7:92:
fb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C9:42:04:83:F6:08:91:57:C6:64:E4:03:32:A1:84:88:68:2B:2E
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/9clCBIP2CJFXxmTkAzKhhIhoKy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.88.0/24
Signature Algorithm: sha256WithRSAEncryption
77:77:94:dc:62:4c:ac:2d:65:9c:dd:e8:2f:d1:70:bd:75:b2:
84:82:25:01:22:9e:76:01:f2:27:5b:bf:1d:4f:1a:3c:bb:d2:
d3:4d:26:b5:3d:aa:82:38:6d:05:51:c7:56:7d:99:2b:49:63:
52:17:88:db:d1:ec:07:b0:6d:3e:cd:29:9f:ec:49:a6:05:15:
a3:01:cf:f2:b2:cb:d8:bc:8a:04:41:bc:ed:1c:60:08:41:6f:
5a:a9:ce:01:07:46:ec:a7:cf:41:35:4f:3d:8b:8d:39:62:09:
ea:5d:6e:08:68:15:da:47:64:d5:68:a3:6c:c0:fa:9f:50:7b:
69:be:e4:a9:37:58:59:82:a8:00:d3:1c:23:2c:64:84:2f:1c:
e1:c2:bb:ac:c9:0f:a0:9e:9a:a4:8f:96:0d:27:45:bc:a8:bb:
b3:7e:29:46:7d:83:eb:be:85:56:86:96:d7:d4:50:33:0a:71:
ff:24:aa:0f:36:4c:78:0f:1f:9e:3e:51:a8:f8:d0:5d:8b:29:
24:5d:19:46:54:fa:d3:c5:b2:25:c8:18:31:28:7d:64:91:a8:
80:51:95:ee:c5:51:68:35:69:0e:cd:12:56:e6:94:28:ec:59:
2f:53:bf:67:5a:f4:e9:4b:08:4e:23:11:5d:df:36:ae:4e:0f:
01:cc:4b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:17 2024 by rpki-client on console-fra.rpki-client.org