Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/FXoEQxh65GsOlkOV_mbxBVVBX_0.roa
File: FXoEQxh65GsOlkOV_mbxBVVBX_0.roa (raw, json)
Hash identifier: PeDsAypEu//D+uSdr1EuN9MxmKcxrgFLm9VD8hhgObU=
Subject key identifier: 15:7A:04:43:18:7A:E4:6B:0E:96:43:95:FE:66:F1:05:55:41:5F:FD
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 03FB9136
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/FXoEQxh65GsOlkOV_mbxBVVBX_0.roa
Signing time: Thu 17 Mar 2022 14:12:56 +0000
ROA not before: Thu 17 Mar 2022 14:12:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42910
IP address blocks: 188.132.141.0/24 maxlen: 32
77.92.152.0/24 maxlen: 32
188.132.149.0/24 maxlen: 32
188.132.146.0/24 maxlen: 32
78.135.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66818358 (0x3fb9136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Mar 17 14:12:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=157a0443187ae46b0e964395fe66f10555415ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:57:5f:0a:dc:a4:10:ac:e7:01:a3:1f:56:
6e:cf:35:63:af:cc:ba:83:fc:5b:33:c3:4d:3a:72:
ac:f6:03:e4:9d:a6:11:c0:73:c0:7d:d5:a2:ba:9a:
61:aa:9c:c5:25:16:03:4f:a5:58:ca:32:cc:56:49:
1e:21:20:33:fa:e1:d2:1a:cb:34:ac:bc:bb:f2:9d:
d3:2f:c7:7f:2a:09:35:6f:1f:e4:19:02:38:4c:18:
cc:57:6b:2e:1e:8f:75:df:2e:5f:b1:98:eb:18:c1:
0f:d0:93:90:64:f3:da:8c:35:c9:06:a6:57:3e:b6:
59:6c:82:2f:40:25:34:56:54:26:8a:9d:50:1f:32:
37:6f:67:31:55:b6:4f:de:52:57:97:0c:6d:fe:41:
6e:f7:82:ea:24:01:3a:12:5e:c8:bb:af:e7:07:98:
c6:90:59:22:ce:f3:5e:39:0b:63:63:57:1f:09:1b:
0f:23:3e:86:43:02:d0:aa:0b:d4:66:a3:b9:d6:20:
4c:94:04:ee:47:45:28:15:b3:a9:44:5a:6b:ab:51:
59:9f:14:0f:98:4a:e5:9e:1c:59:b8:1d:de:58:0a:
7f:c1:26:7d:90:0f:6a:9b:9e:17:8d:df:51:1a:e9:
64:d7:56:42:c8:8a:cd:3d:0b:2b:c4:79:fd:2b:27:
c0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7A:04:43:18:7A:E4:6B:0E:96:43:95:FE:66:F1:05:55:41:5F:FD
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/FXoEQxh65GsOlkOV_mbxBVVBX_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.152.0/24
78.135.81.0/24
188.132.141.0/24
188.132.146.0/24
188.132.149.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:35:92:f9:82:a9:02:a8:9d:bf:62:56:89:c5:78:ec:58:30:
65:9d:4f:32:1a:4e:16:b8:7f:07:c9:ec:ad:2a:98:56:66:51:
7a:7c:ae:e3:ca:2d:d2:0a:3a:98:e3:86:e4:b6:f3:89:f1:ab:
89:db:07:ae:70:d6:74:84:7b:75:90:c3:f7:12:fb:29:6e:b6:
cb:76:c9:67:14:0e:90:46:78:a2:0f:43:80:df:ab:1b:b2:64:
d9:b7:6c:19:f2:30:03:0b:5d:3e:bb:c3:97:7d:a2:9a:09:ea:
fd:5f:2a:5a:58:a4:86:bf:a8:66:28:e8:ff:20:c3:ba:4f:74:
07:9e:a8:11:b6:ac:ec:ef:76:4d:85:4a:5e:a5:36:29:a8:2c:
4a:b2:66:03:f6:5f:6c:4d:23:6e:c3:d0:be:7e:9d:db:aa:cf:
1d:52:cf:fa:2e:2e:46:08:1a:cd:0c:77:d7:1c:77:12:20:96:
52:8e:8e:3c:6b:cc:39:11:fa:47:e0:58:50:d2:31:b7:e1:b8:
13:98:45:d9:f3:b8:f0:b1:94:d5:d1:d1:b1:8f:47:1d:fd:aa:
d4:f9:54:f9:24:78:5b:1c:bc:f5:dd:8c:00:64:84:3b:57:9a:
74:f4:4d:72:74:39:33:ec:c3:aa:3b:74:90:c0:cf:b8:74:72:
4e:74:34:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org