Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/abrXgg1KNWIvYzWjmvqPb9XnfXw.roa
File: abrXgg1KNWIvYzWjmvqPb9XnfXw.roa (raw, json)
Hash identifier: jDvGetrnkuB0Cc3r9gIZf49qjCcVOsnchGoSdAXrqA0=
Subject key identifier: 69:BA:D7:82:0D:4A:35:62:2F:63:35:A3:9A:FA:8F:6F:D5:E7:7D:7C
Certificate issuer: /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial: 03EC7F98
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/abrXgg1KNWIvYzWjmvqPb9XnfXw.roa
Signing time: Sat 28 May 2022 09:21:13 +0000
ROA not before: Sat 28 May 2022 09:21:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49632
IP address blocks: 188.125.175.0/24 maxlen: 24
188.125.173.0/24 maxlen: 24
188.125.172.0/24 maxlen: 24
188.125.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65830808 (0x3ec7f98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Validity
Not Before: May 28 09:21:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69bad7820d4a35622f6335a39afa8f6fd5e77d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:12:8c:b6:0f:7c:20:e2:a3:72:9f:f3:05:
7b:01:35:79:ea:8f:6d:fa:75:f0:7d:0a:9a:66:da:
87:cd:a8:e5:17:a0:e3:29:5c:1b:54:30:e6:6e:0d:
b0:07:0f:d1:cf:0b:c2:93:b7:24:65:75:cb:f3:e9:
1a:4a:57:85:39:d2:f6:7d:44:f6:6b:0b:68:02:94:
2f:8f:83:89:b4:63:82:01:91:6d:54:8d:81:2c:4c:
60:ee:7f:10:62:e8:d3:16:94:d1:4b:2f:fe:b1:f4:
01:a1:9b:d4:12:d5:90:65:4d:05:82:60:c6:91:50:
8c:4e:56:76:ba:48:e7:ce:e0:56:0e:51:32:ee:b7:
15:c5:c3:9e:9b:a0:3d:24:13:14:40:1e:8d:6a:96:
8f:2e:2e:98:0e:78:0c:ed:c4:f0:c1:64:13:ef:70:
ac:7c:50:a3:b3:c2:01:b1:39:a6:fe:92:3f:99:97:
c3:6f:2a:c7:f5:96:d4:8d:50:02:d8:16:f2:0d:d9:
a4:f3:a6:19:4d:ac:d6:ae:1e:23:ed:22:52:02:ca:
54:c4:84:c6:69:db:4d:c0:20:cc:32:aa:f6:a0:b7:
c4:5f:3a:5a:9e:b3:88:5e:dc:01:e5:79:c1:71:1a:
1a:7f:96:04:9b:37:88:51:c3:72:0f:7c:39:fd:b1:
07:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BA:D7:82:0D:4A:35:62:2F:63:35:A3:9A:FA:8F:6F:D5:E7:7D:7C
X509v3 Authority Key Identifier:
keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/abrXgg1KNWIvYzWjmvqPb9XnfXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.171.0-188.125.173.255
188.125.175.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:2a:81:9c:7a:85:98:69:24:1a:1e:e4:55:b6:c0:8f:ad:18:
eb:05:93:79:33:1f:26:3d:bd:ab:6f:25:ae:1a:55:d6:f5:59:
43:c7:9b:15:9a:fa:f4:9b:1a:15:3c:f1:b9:b6:36:2f:b2:39:
ec:5e:d7:44:d4:9e:0d:7c:2a:84:b4:6d:7c:3b:31:0d:bb:74:
5a:aa:ac:bf:a5:42:fd:46:4b:e9:a7:66:7f:2e:e3:8d:61:f4:
c3:a8:9c:51:7a:b5:14:7d:3e:70:ab:d6:86:d4:32:a7:ed:fe:
3b:71:bd:30:5e:52:82:65:e4:0e:b0:06:78:b0:e2:9a:7f:59:
c4:6a:6b:d0:fd:44:64:e5:6b:f6:bc:be:7e:cc:02:27:6c:fb:
6d:27:40:89:15:41:97:ed:3e:1b:c3:7e:83:4e:cf:1a:b9:c8:
c8:11:36:0b:d5:00:83:f7:87:cb:8a:de:37:06:5c:7e:e9:37:
be:26:66:f9:96:a1:8d:45:a4:40:34:27:ee:af:b6:87:f4:c9:
e8:98:7d:b7:22:98:10:c0:0f:e7:6f:30:96:35:58:9d:93:08:
81:f4:9f:84:af:86:59:20:43:81:71:a8:92:2f:b1:d5:13:67:
51:c9:2f:2d:77:7e:71:60:eb:2f:93:65:be:bb:38:f8:60:8d:
ae:64:88:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:58 2024 by rpki-client on console-ams.rpki-client.org