Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/0226cNmldP7LcJg0DuwfFVvmmVw.roa
File: 0226cNmldP7LcJg0DuwfFVvmmVw.roa (raw, json)
Hash identifier: CINbhhGovFI4Y+8Gmd6AbWVD4jrLNRpYwivJZ4mofTE=
Subject key identifier: D3:6D:BA:70:D9:A5:74:FE:CB:70:98:34:0E:EC:1F:15:5B:E6:99:5C
Certificate issuer: /CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
Certificate serial: 0591F070
Authority key identifier: 87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/0226cNmldP7LcJg0DuwfFVvmmVw.roa
Signing time: Sat 01 Jan 2022 11:55:17 +0000
ROA not before: Sat 01 Jan 2022 11:55:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 78.108.124.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93450352 (0x591f070)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
Validity
Not Before: Jan 1 11:55:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d36dba70d9a574fecb7098340eec1f155be6995c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:ab:15:bf:d2:ca:62:d0:fb:48:05:7f:d6:
54:69:2b:21:9f:e2:a7:fb:52:1f:6b:e7:20:fb:14:
fe:ca:0a:bb:ab:4f:cf:8d:cc:b0:62:f8:54:4a:2f:
85:3f:53:c5:55:ec:51:0e:5b:af:34:b1:ed:10:81:
cc:4e:00:71:89:8a:76:82:f0:53:8d:30:e0:86:a9:
dd:ad:a5:21:2c:c8:8f:dd:77:00:7a:db:ad:59:ae:
a2:13:65:34:b4:ef:7b:7c:97:38:70:c9:2d:3c:6b:
af:fe:ba:ca:62:0a:74:c6:54:c2:20:d5:2e:e9:be:
b3:cd:b1:f1:9f:a9:28:69:5c:ee:98:64:4b:19:f2:
68:40:d0:b4:fa:8f:d4:9d:67:30:a1:13:8c:78:f6:
d2:63:f8:7e:26:e6:a2:30:cb:fa:cb:5c:ac:ee:a5:
01:2a:bf:69:c7:47:7a:86:fd:1e:5a:f2:16:a5:c7:
31:34:53:c3:8e:17:93:03:41:a8:71:de:10:64:12:
33:7a:69:ba:34:9b:d2:f0:f2:58:c5:e6:e3:1a:44:
8a:cc:fa:59:43:5d:3d:2e:ed:13:4f:9f:5a:cd:d5:
fd:cc:4a:a7:e8:f0:43:f0:b1:e5:bf:58:c9:19:93:
c1:51:26:17:6c:3b:82:2f:33:b7:69:c7:22:ef:bb:
68:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6D:BA:70:D9:A5:74:FE:CB:70:98:34:0E:EC:1F:15:5B:E6:99:5C
X509v3 Authority Key Identifier:
keyid:87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/0226cNmldP7LcJg0DuwfFVvmmVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.124.0/23
Signature Algorithm: sha256WithRSAEncryption
31:2b:8e:49:82:79:79:4d:43:99:eb:0b:11:51:bc:41:1f:c2:
00:91:dd:a4:11:87:53:b9:12:d0:b2:f0:82:17:ea:05:04:56:
3b:b0:04:d0:4a:fe:6e:1a:76:4a:d8:36:32:1e:67:b2:7f:08:
a0:65:0b:b9:f0:af:b2:26:b5:b3:3d:60:18:1a:e3:fc:9f:00:
59:ca:08:b9:c3:6e:68:bd:ba:c3:2b:f4:9f:db:44:96:62:6d:
ff:a5:8b:a9:dc:48:8e:a5:41:97:44:40:e3:52:b1:5d:14:33:
af:b2:a2:a1:8e:c0:95:6e:23:9b:38:06:f9:9f:14:e0:33:c8:
90:31:47:a2:1d:10:51:08:a8:ee:33:71:67:12:91:4a:92:c7:
e5:7d:4f:1d:4f:ba:64:96:0b:ab:a4:e6:aa:10:4e:f7:ee:54:
84:d4:73:b0:5f:b5:fd:4b:e4:a8:03:e0:87:f2:20:8f:4d:f6:
a0:3f:8b:91:8f:13:75:4a:d4:32:f4:f8:ca:a1:54:84:2f:18:
db:98:1e:7a:f4:4b:96:9b:b4:25:40:68:4b:f8:41:ec:46:18:
83:78:fd:13:ef:70:c5:4d:9f:28:03:8e:4b:b7:c5:8d:16:35:
59:14:65:1a:1d:db:c2:57:25:cf:a6:fb:26:9e:b9:75:55:b8:
1a:5a:85:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:51 2024 by rpki-client on console-fra.rpki-client.org