Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1XJCxGC1gNIdzpKLvx5pbcRUmvs.roa
File: 1XJCxGC1gNIdzpKLvx5pbcRUmvs.roa (raw, json)
Hash identifier: v/nLD/FhENw4AkWNwekryY4PpVsqvM59/RkpLGcxHY4=
Subject key identifier: D5:72:42:C4:60:B5:80:D2:1D:CE:92:8B:BF:1E:69:6D:C4:54:9A:FB
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01823C3781FF7D84160EEB646E046E42E62D
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1XJCxGC1gNIdzpKLvx5pbcRUmvs.roa
Signing time: Tue 26 Jul 2022 20:34:06 +0000
ROA not before: Tue 26 Jul 2022 20:34:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49334
IP address blocks: 188.132.129.0/24 maxlen: 24
188.132.131.0/24 maxlen: 24
188.132.141.0/24 maxlen: 24
212.68.58.0/24 maxlen: 24
212.68.54.0/24 maxlen: 24
212.68.53.0/24 maxlen: 24
212.68.62.0/24 maxlen: 24
212.68.63.0/24 maxlen: 24
185.17.138.0/24 maxlen: 24
185.17.139.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
77.92.153.0/24 maxlen: 24
31.210.34.0/24 maxlen: 24
188.132.173.0/24 maxlen: 24
188.132.181.0/24 maxlen: 24
188.132.182.0/24 maxlen: 24
188.132.187.0/24 maxlen: 24
78.135.65.0/24 maxlen: 24
31.210.53.0/24 maxlen: 24
31.210.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3c:37:81:ff:7d:84:16:0e:eb:64:6e:04:6e:42:e6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jul 26 20:34:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d57242c460b580d21dce928bbf1e696dc4549afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:6e:10:06:78:c1:61:a1:c8:51:1f:64:92:
c4:2e:04:8e:dd:c4:7f:55:be:1b:fd:20:74:5a:27:
15:6c:bc:1f:cc:e5:65:90:97:30:30:a7:82:a7:97:
d3:fa:ef:b3:49:c7:bb:84:fc:3c:48:86:e3:da:ee:
ed:bf:4c:e5:fa:df:c3:73:84:ea:16:1f:ef:07:f3:
bc:4e:42:90:6f:49:c7:64:da:3c:f7:bb:f1:2a:42:
ca:cb:f6:ba:d2:71:24:cb:a8:66:3a:72:94:f1:45:
ae:ee:94:8d:ed:24:4c:d9:e8:d4:8e:5a:9b:02:de:
f2:1d:e7:1f:6f:81:11:91:15:2e:02:17:98:ab:7e:
d5:07:06:85:63:94:4f:cf:ab:ee:95:80:24:7c:35:
db:b5:c0:a2:f6:41:c2:92:09:63:61:2f:bb:4c:6a:
c6:ca:b2:e0:3b:a8:e4:59:86:2f:83:fb:f9:74:5c:
67:57:de:e2:58:b0:28:cf:a7:8e:09:32:36:de:b6:
55:3b:29:b0:0a:13:47:cc:a9:a8:a0:0b:95:44:c7:
70:90:72:3b:dd:58:fe:a5:d7:37:4d:9a:78:0e:6e:
4a:7d:a2:b7:28:a3:f1:5a:f4:d9:04:df:71:47:e7:
6f:85:66:58:22:6d:7d:cb:bb:3a:5f:0d:fc:59:c0:
0b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:72:42:C4:60:B5:80:D2:1D:CE:92:8B:BF:1E:69:6D:C4:54:9A:FB
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1XJCxGC1gNIdzpKLvx5pbcRUmvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.34.0/24
31.210.52.0/23
77.92.152.0/23
78.135.65.0/24
185.17.138.0/23
188.132.129.0/24
188.132.131.0/24
188.132.141.0/24
188.132.173.0/24
188.132.181.0-188.132.182.255
188.132.187.0/24
212.68.53.0-212.68.54.255
212.68.58.0/24
212.68.62.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:17:ee:fa:34:da:40:96:e0:fa:a8:78:88:3a:3c:d9:76:70:
34:1a:cf:9b:bf:2d:a4:f7:45:4f:c9:7b:e4:79:52:b0:0e:ab:
d8:34:ee:42:e1:f9:2f:75:49:0a:f0:b1:dd:13:bb:b2:67:6b:
87:fe:11:3e:a9:dd:cb:c8:9d:29:01:86:67:3d:89:ca:d9:00:
85:20:db:5a:76:08:99:7b:0a:af:36:e6:39:99:b4:c1:e9:a5:
8e:73:bc:03:a9:fd:17:5a:13:17:34:52:4a:f8:c0:e9:8a:35:
e7:f8:d1:9a:49:41:ca:8a:6b:05:a0:ed:ab:b5:05:e9:5f:5b:
90:9c:b7:dc:76:ab:01:e7:d8:2e:0c:b9:90:12:da:bc:f6:ad:
ab:3a:b7:d0:e3:d4:45:08:f8:a7:47:36:6c:10:b7:80:38:bd:
60:22:a2:56:aa:e6:9c:4d:fa:2f:41:f4:6e:2e:0c:a9:1f:86:
a4:88:3b:59:19:8a:cf:19:a2:65:9b:14:7c:b5:c3:ef:0b:e6:
f0:50:32:e1:49:32:43:d2:08:6d:c3:e1:e8:19:f6:ca:fa:0e:
23:6d:cf:28:d7:f3:52:5c:bd:76:ee:56:98:ad:e2:6f:fa:a1:
15:17:cc:be:ca:d4:42:2c:0f:2e:63:8f:4d:b5:56:aa:a7:46:
28:d2:46:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:43 2024 by rpki-client on console-fra.rpki-client.org