Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Vjr4BA8amR_wg7YLCJDpa9BWj9A.roa
File: Vjr4BA8amR_wg7YLCJDpa9BWj9A.roa (raw, json)
Hash identifier: OFzAXi8hVWyQLjzQaGuXs6MYrKbIHWd6MwmJRXhFawo=
Subject key identifier: 56:3A:F8:04:0F:1A:99:1F:F0:83:B6:0B:08:90:E9:6B:D0:56:8F:D0
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 04FA8BDE
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Vjr4BA8amR_wg7YLCJDpa9BWj9A.roa
Signing time: Wed 29 Jun 2022 12:33:02 +0000
ROA not before: Wed 29 Jun 2022 12:33:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202561
IP address blocks: 188.132.221.0/24 maxlen: 24
188.132.222.0/24 maxlen: 24
188.132.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83528670 (0x4fa8bde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 29 12:33:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=563af8040f1a991ff083b60b0890e96bd0568fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:e0:a2:39:60:7b:01:b9:f6:65:23:51:25:
f0:09:1d:7e:f3:3a:5c:50:88:11:ed:ad:14:d3:7e:
a6:d5:22:c1:c7:d6:b9:47:44:b6:99:55:ce:a6:ca:
d9:60:f5:38:a5:d7:ea:3e:84:bc:20:b9:f4:b4:56:
56:d6:3c:f7:f8:f7:ad:f7:6c:7a:30:c4:21:5e:27:
b7:89:ba:5b:d4:fb:d5:a0:77:8c:4b:33:eb:a1:44:
10:48:77:35:68:7d:73:0b:21:cf:5a:12:b3:de:9c:
0b:c1:a7:16:db:57:b9:25:49:75:0d:dc:36:0f:e3:
ad:c0:e0:5f:0d:e9:6a:bf:c2:58:1a:91:82:f8:8d:
17:ae:3d:ae:67:b8:26:69:b6:ae:40:2a:91:17:ca:
70:1f:75:ce:6a:3a:de:e7:bf:8d:71:ea:99:a3:52:
e3:e6:20:20:dc:8c:52:48:cd:6a:43:8b:ee:7d:09:
4e:18:31:90:64:42:16:da:54:e9:47:21:5e:a5:9b:
4b:72:fc:01:70:ed:9e:8e:21:c9:67:d7:6b:34:6c:
f9:e1:68:bb:88:26:d9:ae:6e:82:77:74:c4:13:18:
6c:90:9f:2d:06:61:bd:ff:a5:83:21:9a:4e:12:0e:
02:ae:57:cc:38:cf:62:68:80:47:3f:8d:e6:cb:de:
2a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3A:F8:04:0F:1A:99:1F:F0:83:B6:0B:08:90:E9:6B:D0:56:8F:D0
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Vjr4BA8amR_wg7YLCJDpa9BWj9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.152.0/24
188.132.221.0-188.132.222.255
Signature Algorithm: sha256WithRSAEncryption
80:35:53:07:ce:54:3a:f4:61:32:c2:65:eb:5e:9e:22:62:24:
9c:29:b7:63:20:8e:65:41:f1:11:79:63:ce:86:ad:d5:c3:0b:
1f:22:f7:3a:4b:64:06:ba:48:bd:c6:fd:9d:82:a4:b4:9d:bb:
77:1f:ad:f9:ed:60:a9:ed:d5:d7:8b:da:e3:45:4f:7e:f6:07:
06:d8:ec:24:44:38:3c:63:cc:4b:bf:10:a7:2c:69:eb:f9:bb:
9d:29:8a:1a:a1:af:4a:f3:57:0d:71:9a:85:6f:41:bc:18:c6:
c7:f0:82:61:b3:12:8d:d1:94:8c:40:63:ce:f9:10:b7:42:dc:
80:01:7e:51:80:bd:e0:5f:fd:4d:34:b7:68:ba:c3:4d:b8:7e:
b3:c4:fc:fb:fd:70:39:3f:e5:b6:b3:3e:63:89:62:63:87:c9:
5b:f9:17:29:2f:8a:dd:51:92:62:8b:4d:8c:66:ae:b7:2f:5e:
e1:a1:13:84:a5:94:c5:c2:98:10:dd:e2:00:e3:e3:fc:01:31:
89:b1:70:d9:35:6d:2b:51:de:7d:f4:1a:29:fe:76:5c:47:ec:
cd:1c:39:98:86:de:17:af:36:97:f3:25:90:dc:3a:9f:34:d3:
2e:3d:f5:66:a1:80:c7:66:db:0f:c0:cb:50:fe:8a:6d:28:91:
40:6e:b8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org