Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/QyNEJ4Ogmvu8iL4-OX4XA7LFR40.roa
File: QyNEJ4Ogmvu8iL4-OX4XA7LFR40.roa (raw, json)
Hash identifier: OGM6Iipu3by2kjux1OAtJKIGa2SYwjlZqpnguP00NSI=
Subject key identifier: 43:23:44:27:83:A0:9A:FB:BC:88:BE:3E:39:7E:17:03:B2:C5:47:8D
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0508CA55
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/QyNEJ4Ogmvu8iL4-OX4XA7LFR40.roa
Signing time: Wed 29 Jun 2022 13:56:02 +0000
ROA not before: Wed 29 Jun 2022 13:56:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42910
IP address blocks: 188.132.146.0/24 maxlen: 24
77.92.152.0/24 maxlen: 24
188.132.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84462165 (0x508ca55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 29 13:56:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4323442783a09afbbc88be3e397e1703b2c5478d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:64:1a:7a:10:60:dc:1f:ad:9a:a4:ca:54:be:
7d:70:6e:9a:6c:a5:78:5b:da:c9:f8:d8:a4:31:89:
d4:1b:ec:89:a0:6e:09:fc:de:7b:bb:e8:20:d4:1e:
42:b2:2f:62:0d:0d:7b:09:3e:97:54:6b:62:ce:84:
f6:c2:df:26:2a:21:cd:ec:ea:f8:c6:da:50:0d:55:
65:c0:5e:fc:5b:50:7e:1f:86:62:7d:52:2e:91:7c:
b1:9d:91:b2:7f:9b:4e:1c:b8:f6:50:5e:05:39:a0:
a9:14:35:0f:3b:2b:d3:af:dd:ac:01:76:3c:d5:16:
dd:93:cd:c7:3b:f9:37:7c:72:2b:ba:6f:69:4d:77:
b7:73:66:ba:80:85:66:39:00:fd:93:45:c2:d0:cb:
c9:d5:77:1e:e1:34:44:d2:24:10:32:16:0d:e2:a2:
1d:37:85:82:1a:5d:32:84:44:5c:df:71:0d:f5:4a:
4f:cc:74:2e:8d:89:9a:87:01:e5:d5:2c:47:00:e1:
ca:57:8d:52:25:98:56:8e:95:1a:ce:df:ab:35:4e:
33:07:f3:1e:6c:93:4c:25:33:7c:44:06:0b:24:27:
c0:58:c1:89:a9:0d:8f:db:6b:12:2d:81:50:e3:f7:
fa:4e:b8:2f:bf:b4:b6:6c:2b:1d:e5:63:58:ff:f0:
cb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:23:44:27:83:A0:9A:FB:BC:88:BE:3E:39:7E:17:03:B2:C5:47:8D
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/QyNEJ4Ogmvu8iL4-OX4XA7LFR40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.152.0/24
188.132.146.0/24
188.132.149.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:0a:43:77:06:ff:64:1c:1a:a6:d9:fb:a1:2b:f8:71:9d:6d:
6f:d2:43:f7:f4:78:51:0c:0c:e1:6d:57:e3:38:9a:c8:0e:95:
39:3c:55:2b:74:03:76:5c:16:d2:c8:80:9d:f3:61:e0:4d:f3:
da:9b:d0:00:3a:fd:5e:16:e4:60:90:ea:0c:c8:48:9a:51:f1:
59:c2:f3:50:6d:d8:7b:fc:52:35:6b:f8:04:a7:cd:bb:07:52:
7f:b0:9a:46:77:e3:fd:68:ae:12:d5:0c:1a:7c:d4:ae:e1:72:
67:e2:66:cb:8f:8b:21:23:20:65:69:a6:2b:ed:a4:df:09:6c:
5d:be:df:92:fd:2f:5d:97:11:e4:aa:b4:4e:c1:4a:97:e0:9f:
72:dc:71:d3:a2:1e:d6:7f:34:bb:be:c9:e7:bb:25:58:de:62:
17:85:c1:8c:3b:5d:e9:b0:61:69:b7:92:82:5b:79:2d:a1:c7:
98:06:a3:c0:72:64:69:8a:e6:3c:de:bd:18:e4:cf:bc:a7:e5:
94:bf:4e:74:ba:c6:f1:11:96:9c:0a:43:b3:cb:50:98:85:a1:
9d:9a:26:f0:15:78:97:2e:0f:cb:66:c2:e1:7f:04:39:63:6e:
90:22:96:ae:22:29:02:31:04:7b:4c:14:30:ac:77:37:f7:91:
c4:46:ff:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org