Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/VRXbHa53cJ1LBEu1OpDAGvNVBz0.roa
File: VRXbHa53cJ1LBEu1OpDAGvNVBz0.roa (raw, json)
Hash identifier: WprC7ZwZsk5tnJNVygexD8U5vKUOG0/FrDWvr+3cOyM=
Subject key identifier: 55:15:DB:1D:AE:77:70:9D:4B:04:4B:B5:3A:90:C0:1A:F3:55:07:3D
Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Certificate serial: 01849F7C58CAC5A59375836D457DF5F55684
Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/VRXbHa53cJ1LBEu1OpDAGvNVBz0.roa
Signing time: Tue 22 Nov 2022 13:17:17 +0000
ROA not before: Tue 22 Nov 2022 13:17:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203408
IP address blocks: 78.159.82.0/24 maxlen: 24
78.159.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9f:7c:58:ca:c5:a5:93:75:83:6d:45:7d:f5:f5:56:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021
Validity
Not Before: Nov 22 13:17:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5515db1dae77709d4b044bb53a90c01af355073d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a0:c0:6a:94:48:c7:94:32:2d:27:ce:70:02:
47:dd:3e:68:e3:c1:7b:2c:8f:6b:5e:d7:2b:4a:c7:
11:8b:d7:f4:66:14:8b:85:87:fb:4f:be:c1:65:33:
84:6d:77:21:ff:e5:c0:a8:e6:f2:b2:58:8e:65:3b:
2b:cb:98:fa:6d:71:8c:a1:37:57:ec:ee:ed:92:ea:
b8:35:12:94:af:55:93:39:c8:93:f8:92:0c:63:ca:
28:97:b2:2c:c3:bc:ae:37:44:fd:6c:13:83:c8:05:
b5:d2:f5:c8:06:50:2f:f6:09:17:85:c4:58:b7:4a:
10:8a:3e:ce:75:92:9d:32:23:c4:4f:ad:d8:b5:ae:
fc:ae:10:43:aa:37:d2:b3:91:2c:58:89:50:a5:a4:
e6:e3:e6:55:85:ca:00:e1:9f:40:15:c6:ba:7f:84:
de:69:93:4f:77:57:c3:5e:be:f7:91:5a:36:0c:d3:
82:66:1a:b3:5b:82:b5:15:38:81:0b:69:a3:d9:7d:
93:6e:4d:c9:0a:08:ec:86:51:59:b5:f7:d3:b3:b3:
0b:b8:cc:95:b4:e7:91:96:eb:5e:67:6d:b3:c2:52:
35:e9:5c:08:df:d7:96:67:f0:02:34:1a:4e:23:76:
95:55:f6:d1:cd:27:96:f9:24:19:f4:30:e8:96:d8:
8c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:15:DB:1D:AE:77:70:9D:4B:04:4B:B5:3A:90:C0:1A:F3:55:07:3D
X509v3 Authority Key Identifier:
keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/VRXbHa53cJ1LBEu1OpDAGvNVBz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.159.82.0/24
78.159.87.0/24
Signature Algorithm: sha256WithRSAEncryption
98:08:e2:3c:77:2e:16:bf:7e:65:c3:aa:82:b4:3f:29:e3:5e:
80:b9:28:23:09:c3:f1:e6:d8:2a:db:e0:70:64:81:fc:f1:60:
de:e9:53:a1:48:b2:cf:7f:80:68:dc:cc:e8:eb:30:ac:99:45:
05:de:01:fb:ee:57:57:0f:c6:f2:fd:7e:4b:19:50:cf:29:9f:
7d:ba:25:d0:b8:68:70:1b:55:76:03:63:6a:2a:f7:b0:15:3a:
9a:aa:43:2f:10:ac:f7:19:4f:b9:a3:a4:65:2d:d8:ca:59:c2:
54:7e:94:52:a2:42:47:d7:cd:d7:84:2d:86:6c:14:fb:6a:1e:
cc:24:70:1e:6a:60:e2:84:79:ff:09:19:e4:dc:2e:7f:34:3c:
fa:de:b7:54:9e:57:68:9d:81:82:15:2a:f8:af:75:27:aa:2f:
b6:c9:a7:ef:86:d6:b8:d4:45:71:a5:9c:c1:ce:f4:ba:7a:e6:
e8:81:94:dc:35:fa:c7:33:82:28:cb:f2:50:0d:55:9c:62:d6:
4b:3c:69:03:3e:7a:7c:2a:80:7e:96:ca:93:73:a8:19:31:de:
25:1f:da:9d:bb:ec:5b:48:50:37:d9:4f:bc:96:fb:a6:77:ad:
58:7f:4b:e7:4b:d9:6d:0e:46:2d:bd:b9:89:36:cd:c0:9b:53:
39:44:2c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:18 2024 by rpki-client on console-fra.rpki-client.org