Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/78Rl1C_uD9K-Bm7QQaoi8ybUTMs.roa
File: 78Rl1C_uD9K-Bm7QQaoi8ybUTMs.roa (raw, json)
Hash identifier: FacFE7AynO+MTOH+hzj47NzPGarh8wLZViU8+lFQ/Lg=
Subject key identifier: EF:C4:65:D4:2F:EE:0F:D2:BE:06:6E:D0:41:AA:22:F3:26:D4:4C:CB
Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial: 0F285569
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/78Rl1C_uD9K-Bm7QQaoi8ybUTMs.roa
Signing time: Sat 01 Jan 2022 06:54:23 +0000
ROA not before: Sat 01 Jan 2022 06:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3330
IP address blocks: 194.112.192.0/18 maxlen: 18
62.249.64.0/18 maxlen: 18
194.112.128.0/18 maxlen: 18
193.186.161.0/24 maxlen: 24
185.92.100.0/22 maxlen: 22
2a02:5e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254301545 (0xf285569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Validity
Not Before: Jan 1 06:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efc465d42fee0fd2be066ed041aa22f326d44ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:2b:49:5a:ff:18:bd:8b:74:62:3a:69:cb:00:
86:52:de:c7:99:b5:1e:88:a1:63:db:dd:9b:6c:69:
36:5b:8b:e7:f3:cf:0e:3b:de:e8:64:30:e3:c9:6f:
92:cd:f3:f7:0d:a6:67:c5:dd:8a:4f:28:2d:74:db:
e2:e4:d6:74:01:51:62:58:4f:3e:c2:4d:dc:2d:55:
91:fa:52:6c:33:7f:88:f3:5f:95:42:56:b4:8a:21:
f1:92:d6:b3:0c:fd:14:cd:53:01:eb:e8:1f:bb:9c:
53:01:3e:56:1f:04:08:c8:18:d9:dc:0c:1e:10:00:
61:33:01:cb:82:e1:f8:75:5f:e0:f8:4c:fc:d2:40:
8f:33:e4:5e:e8:73:1a:32:c7:82:15:65:67:09:ea:
6a:73:df:40:85:bf:47:bc:41:f5:8b:23:5f:06:d8:
27:89:6a:60:be:7d:18:14:f4:1b:44:11:85:86:a4:
81:0a:fa:5b:84:2a:0f:34:d2:d3:68:74:dc:bf:06:
b5:1d:ad:37:18:9c:a8:1f:03:4a:8e:8d:50:a5:13:
c0:09:91:5e:5f:c9:46:0d:80:57:5c:57:21:52:0a:
82:7f:5e:2c:c2:90:88:ad:ac:63:27:cc:e5:a0:ff:
29:63:a9:48:1e:98:ff:76:47:f5:6d:8e:1f:24:8f:
5a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C4:65:D4:2F:EE:0F:D2:BE:06:6E:D0:41:AA:22:F3:26:D4:4C:CB
X509v3 Authority Key Identifier:
keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/78Rl1C_uD9K-Bm7QQaoi8ybUTMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.249.64.0/18
185.92.100.0/22
193.186.161.0/24
194.112.128.0/17
IPv6:
2a02:5e0::/32
Signature Algorithm: sha256WithRSAEncryption
7f:56:1b:ef:83:f6:1d:3c:22:ff:f3:d1:d4:73:54:1a:cd:fb:
00:d7:5d:01:91:cf:2c:93:ce:42:94:a6:a6:0e:ef:e2:e9:d4:
b8:a3:89:1b:32:ed:e5:e6:d7:0d:c9:81:bc:91:a1:65:ff:b6:
cc:5b:ba:c7:4a:79:68:05:34:0c:77:63:ec:69:89:f3:b1:0a:
88:4a:a9:92:8a:9b:c2:28:06:3c:9b:ec:1f:fc:42:eb:a3:16:
47:43:df:df:86:42:35:f6:0a:93:b1:4d:7d:7e:88:c1:77:a2:
33:f6:db:de:f8:d6:a1:cc:b2:41:40:00:cd:b2:93:d5:af:da:
b2:eb:2e:a0:e0:f7:72:4c:22:c2:02:c0:52:2d:2a:99:d6:58:
35:e3:9f:84:90:3e:60:2e:84:8e:57:05:14:8e:74:69:d6:df:
30:4b:66:f3:f2:7a:4c:25:90:b8:a8:e5:bd:85:89:46:18:86:
47:ca:2d:4f:00:80:4b:36:7a:80:e2:9f:ed:25:4a:fc:a1:61:
0a:dc:a2:d4:5b:f7:6b:aa:7e:dd:9a:64:52:7f:74:e8:97:76:
72:77:e3:ce:d9:19:4a:aa:4f:17:3a:a8:f8:db:79:50:ff:c1:
f9:39:46:46:44:36:55:8d:27:29:69:f6:aa:31:95:8d:4a:6d:
a9:a5:1a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:04 2024 by rpki-client on console-fra.rpki-client.org