Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VIlgmhh9S2Y7pj5-w8eyb-uAq6I.roa
File: VIlgmhh9S2Y7pj5-w8eyb-uAq6I.roa (raw, json)
Hash identifier: oJ+0jfASt7Jq8AinkNl0ERvZa/DXODf8d28tsQm/LAc=
Subject key identifier: 54:89:60:9A:18:7D:4B:66:3B:A6:3E:7E:C3:C7:B2:6F:EB:80:AB:A2
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01840A4B4A19DA71B6979EBD15E7F95B92CD
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VIlgmhh9S2Y7pj5-w8eyb-uAq6I.roa
Signing time: Mon 24 Oct 2022 14:00:16 +0000
ROA not before: Mon 24 Oct 2022 14:00:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208425
IP address blocks: 188.132.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0a:4b:4a:19:da:71:b6:97:9e:bd:15:e7:f9:5b:92:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 24 14:00:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5489609a187d4b663ba63e7ec3c7b26feb80aba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:86:0e:5d:50:39:56:46:cf:e8:2b:9e:03:dd:
de:e1:04:d0:c7:b1:4f:2a:f8:50:5f:25:89:3d:b2:
20:ab:bb:02:3a:7b:90:15:3f:55:df:3b:60:5e:c8:
4e:b2:50:35:ce:3e:2c:bd:ba:ac:63:ed:fa:69:38:
76:e1:e8:e8:ce:ea:fb:3d:0d:06:f6:2f:c4:15:00:
db:5a:55:54:c6:97:26:5e:a1:91:7b:93:2d:45:dc:
6c:ae:c3:c6:5d:0e:cd:aa:f7:77:3c:3c:cb:5c:92:
0e:38:e4:0f:3a:cd:43:f1:85:f7:a8:58:f1:8d:ac:
96:b0:9f:db:8f:94:86:a3:03:1d:72:41:23:e3:ef:
9f:f5:4f:fd:dd:ee:f6:57:ef:0c:63:0f:19:73:5b:
d8:86:af:3b:1e:a2:c8:aa:8c:4c:a1:66:6f:36:fb:
25:1e:fa:62:f1:20:e8:67:81:db:0e:d2:b7:9b:a3:
7f:84:f2:ca:5e:5f:63:b1:5a:e5:df:1a:2c:02:1d:
21:0b:64:ca:90:16:5b:39:68:fb:97:dc:64:a1:29:
b3:1f:c9:be:9c:83:fd:a0:cf:2b:4d:ae:1d:67:97:
ac:e4:00:be:80:12:09:63:1a:68:65:78:fc:b4:ca:
fd:82:5e:74:a5:3d:ba:de:86:7e:3c:6d:ff:0a:45:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:89:60:9A:18:7D:4B:66:3B:A6:3E:7E:C3:C7:B2:6F:EB:80:AB:A2
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VIlgmhh9S2Y7pj5-w8eyb-uAq6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.128.0/24
Signature Algorithm: sha256WithRSAEncryption
48:fc:67:a8:1e:bf:fd:70:21:48:b9:e4:9c:c4:4e:35:e9:fe:
0a:10:61:3f:5e:30:24:47:ff:e6:4b:2c:d5:c4:44:0a:01:8b:
d3:68:3b:86:8c:be:73:0c:2b:4a:86:9d:3c:4a:38:65:02:93:
15:81:6b:f1:1d:36:6d:0c:54:f0:fc:5f:a1:d0:4c:30:9e:5b:
49:f8:c2:59:9d:fc:e0:74:f9:d1:11:92:ca:42:82:d7:33:3c:
aa:95:99:39:d3:d7:57:81:f2:46:64:c3:aa:55:0b:3e:2f:a1:
7c:fe:94:6c:52:e7:9c:a3:65:0e:ed:21:9f:9e:23:0e:01:ab:
e9:fe:79:68:47:8d:48:27:52:25:c6:b7:37:32:cd:21:f1:17:
9e:d3:88:91:3d:36:f2:5a:b8:05:6f:6c:ce:15:b5:6c:22:e2:
c5:31:f8:22:08:22:07:67:9b:44:0b:cb:10:59:bc:c6:e0:9c:
6a:46:a6:e5:57:6c:05:b3:21:4d:79:7f:88:a9:a9:8b:9c:9b:
68:2d:20:5c:d0:24:3e:76:90:3f:02:87:4f:c4:0d:ba:b4:b1:
09:cf:0e:46:49:f4:5d:e0:2d:4e:69:2c:43:dc:f3:d4:81:19:
7b:2b:38:2e:1a:3b:20:01:c3:87:89:e4:74:67:7c:b6:6c:74:
00:1c:b7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org