Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/0DmPAwqdgM8I1en7rMO2O4WUnIs.roa
File: 0DmPAwqdgM8I1en7rMO2O4WUnIs.roa (raw, json)
Hash identifier: rH+mIRlCYqdVH3YKAMvDomGDhlZInP+DuR4RA+IbshQ=
Subject key identifier: D0:39:8F:03:0A:9D:80:CF:08:D5:E9:FB:AC:C3:B6:3B:85:94:9C:8B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 031F1D4C
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/0DmPAwqdgM8I1en7rMO2O4WUnIs.roa
Signing time: Sat 01 Jan 2022 01:54:21 +0000
ROA not before: Sat 01 Jan 2022 01:54:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42910
IP address blocks: 188.132.141.0/24 maxlen: 32
77.92.152.0/24 maxlen: 32
188.132.149.0/24 maxlen: 32
188.132.146.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52370764 (0x31f1d4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 1 01:54:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0398f030a9d80cf08d5e9fbacc3b63b85949c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:c5:21:33:91:eb:f1:55:79:ce:84:9a:3b:
69:64:a4:67:48:ad:06:63:57:32:d2:10:42:70:51:
e0:de:b4:a0:ea:88:6c:8b:80:5a:d7:a0:09:31:a6:
f2:85:8b:8b:44:c4:db:33:33:ec:80:ff:bd:a6:2e:
d0:3a:d0:32:a6:92:26:07:fe:ba:e4:d7:a1:14:e5:
c8:a7:49:a0:8f:02:bf:61:0d:72:80:5e:ec:5e:2c:
8d:79:cd:e6:86:b5:34:59:4d:a2:7b:b8:36:e8:26:
1f:b2:7d:0c:f1:ec:92:51:aa:7a:86:78:ea:b2:79:
78:0f:56:ec:2c:87:51:4c:41:46:dd:23:64:b5:e3:
1a:ba:72:fd:8a:2f:4d:4c:71:ce:65:a5:f1:3c:d7:
16:a5:80:71:fb:d3:92:b7:54:64:42:8b:9d:0b:35:
95:d2:6a:df:67:f6:6f:46:66:98:a7:c7:68:e3:90:
23:67:73:bd:d5:e5:b7:7f:3d:85:64:81:05:86:66:
55:f4:75:22:55:39:ba:88:58:c7:01:ce:7f:78:41:
97:6f:65:f8:5f:5b:73:49:f4:80:f1:c1:11:ba:89:
86:00:46:2c:83:f9:50:52:a6:45:5a:06:50:13:47:
34:cd:35:d5:29:e4:cf:28:fe:ac:fd:a8:83:cc:4a:
67:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:39:8F:03:0A:9D:80:CF:08:D5:E9:FB:AC:C3:B6:3B:85:94:9C:8B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/0DmPAwqdgM8I1en7rMO2O4WUnIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.152.0/24
188.132.141.0/24
188.132.146.0/24
188.132.149.0/24
Signature Algorithm: sha256WithRSAEncryption
62:95:cf:62:7d:5d:34:79:1d:91:8b:9b:cb:ef:81:89:3b:16:
a9:9f:c6:5c:09:61:cc:90:ac:33:83:4f:46:4b:70:de:b7:a2:
e1:f3:d5:d6:6f:9f:42:a7:4a:6b:c3:d0:50:8b:e4:7c:d1:09:
fb:6e:23:8b:d4:25:1c:61:9a:cc:20:97:9e:53:bf:ea:db:cf:
64:00:bb:4b:65:91:5a:79:76:0a:c5:c3:e5:d3:09:07:c9:1f:
bb:3e:58:1b:74:74:77:47:dd:b3:1c:ca:1c:00:2d:ec:ec:c1:
ae:7b:b9:3b:1d:62:c2:48:36:f9:8d:eb:1c:cc:5f:f8:7e:06:
aa:4c:a2:d2:35:7e:c1:5d:41:40:79:b1:61:e6:18:d4:a1:b2:
6b:2b:4b:9b:06:86:51:a5:ad:ac:31:8a:1a:a7:98:94:b1:d8:
2e:8d:40:8e:b7:3b:2f:00:bf:49:9a:5c:67:77:c7:6d:36:96:
63:42:10:12:35:23:1f:37:f3:ee:5e:5e:60:e5:ee:58:99:fc:
d6:d1:cc:eb:e5:6e:08:d6:3f:5c:16:61:e1:1f:4a:31:6f:71:
61:54:5a:63:bf:18:f1:fe:40:12:ac:cf:6d:48:54:ed:8f:f4:
43:f4:cb:63:73:b7:d9:52:96:ac:71:a0:3b:db:40:2b:7d:e2:
61:e2:0f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org