Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VMWetWwz71kXt61cygLbewhsB1Y.roa
File: VMWetWwz71kXt61cygLbewhsB1Y.roa (raw, json)
Hash identifier: iv5p+8KUkgWA6r3OGx5Dbuq4R3Fv3rEAaq/XVhopURE=
Subject key identifier: 54:C5:9E:B5:6C:33:EF:59:17:B7:AD:5C:CA:02:DB:7B:08:6C:07:56
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 038F2B0E
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VMWetWwz71kXt61cygLbewhsB1Y.roa
Signing time: Tue 01 Feb 2022 22:07:10 +0000
ROA not before: Tue 01 Feb 2022 22:07:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208425
IP address blocks: 188.132.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59714318 (0x38f2b0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 1 22:07:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54c59eb56c33ef5917b7ad5cca02db7b086c0756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:92:57:24:27:2b:47:75:e6:e0:1e:0c:5e:
b3:ee:67:c9:08:d5:bc:cf:53:48:25:9c:60:9f:18:
0b:ea:7d:04:e1:d5:cb:c9:f7:8b:0e:aa:3f:c5:3c:
1c:72:44:b0:fb:b5:4e:30:e1:e0:9a:62:2a:19:ae:
15:64:bb:05:f4:97:63:81:9a:10:e4:de:77:d9:15:
70:a4:c3:28:c0:80:5a:9c:9c:e7:ce:01:31:5d:1f:
a8:a5:69:0d:9b:c5:a1:5e:be:84:4d:ef:f0:63:a1:
37:fa:4d:b6:5b:5b:36:f3:d1:d9:2d:00:ec:cb:e6:
94:83:5f:c2:65:42:f9:aa:e9:3d:d2:b3:2f:b2:96:
2f:ec:59:60:8f:c7:66:20:f7:6d:90:04:e4:ba:6c:
cf:9c:ca:63:33:2d:6b:a1:ff:f1:10:79:5f:a2:bc:
09:68:44:4e:78:07:2e:5f:32:6c:e9:0c:cb:cf:bc:
eb:1c:92:8a:e2:ae:5c:18:e1:97:80:2b:53:85:1c:
1f:af:c3:0e:cc:a6:a0:a6:de:de:63:4e:2f:9c:0f:
ba:89:83:9a:2a:77:88:c7:94:82:80:c0:3a:24:80:
b4:d6:94:dc:57:a8:08:1b:6e:0c:b3:43:5d:fb:98:
0b:ac:ec:0f:c0:a1:7c:7e:3b:1c:86:01:4e:85:11:
b7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C5:9E:B5:6C:33:EF:59:17:B7:AD:5C:CA:02:DB:7B:08:6C:07:56
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VMWetWwz71kXt61cygLbewhsB1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.128.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:23:1f:fa:47:02:69:c7:72:8a:ff:5e:e0:6e:6b:d9:0c:c9:
52:12:ee:59:13:e7:e1:dc:86:c5:7f:8a:df:b6:c4:fc:56:58:
e4:e2:19:64:52:9a:18:43:7a:91:be:c0:bb:f3:16:90:f6:2e:
4e:35:2b:22:ad:a0:e8:c2:eb:3f:ae:e6:b7:86:0d:39:84:9d:
14:cb:5d:56:3b:d4:9b:53:5b:5c:e9:12:66:2b:25:f2:3e:99:
83:a9:99:11:e9:94:5a:c1:1e:eb:18:5d:d2:65:ed:79:3f:fd:
2a:1d:18:35:2d:fb:fc:67:df:f7:ee:be:a9:93:be:5c:91:52:
3d:4e:a1:af:9a:e2:5b:e7:1d:f8:3b:46:62:79:b4:f0:53:64:
1d:dc:0c:68:34:53:fe:a6:c7:d9:12:a9:04:24:f9:ef:2e:6a:
82:36:35:df:14:b7:8a:16:8f:c9:d4:17:2a:cb:b6:be:0a:62:
b0:ed:9b:e0:12:c4:54:9d:d8:f4:bc:bb:03:18:4a:52:ea:8d:
dd:c3:b3:2c:19:ce:31:63:4f:c5:90:c3:28:8e:92:09:ed:b3:
6b:57:5c:f1:9a:01:46:6b:b3:65:da:05:ed:97:6e:39:f7:7e:
e8:30:33:25:2c:9a:11:2f:51:36:17:a5:64:7f:24:6a:f1:ba:
c6:8e:db:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org