Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VtCGg5ff-yUfnzEPT-cueBw_JyI.roa
File: VtCGg5ff-yUfnzEPT-cueBw_JyI.roa (raw, json)
Hash identifier: tVSCvdSAEZsNns9TQSOH53Y7c+p0uFPVCpera2lcsK8=
Subject key identifier: 56:D0:86:83:97:DF:FB:25:1F:9F:31:0F:4F:E7:2E:78:1C:3F:27:22
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 04F72288
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VtCGg5ff-yUfnzEPT-cueBw_JyI.roa
Signing time: Tue 28 Jun 2022 18:36:02 +0000
ROA not before: Tue 28 Jun 2022 18:36:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 188.132.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83305096 (0x4f72288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 28 18:36:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56d0868397dffb251f9f310f4fe72e781c3f2722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f0:a1:6e:92:6c:89:86:b5:80:21:02:73:73:
0f:29:e3:12:78:87:c6:ce:1d:44:13:08:0c:c3:fa:
89:2b:60:7b:0e:6d:83:74:f8:53:92:ee:db:05:fe:
3a:a0:47:f4:ea:7b:1c:58:fb:4f:b5:e4:4f:c9:73:
89:00:33:cd:ed:0a:cd:66:5c:0c:a9:6b:1e:25:0e:
ce:08:57:bd:2c:f1:57:ca:df:12:af:6a:6b:69:49:
89:2b:9b:2f:a4:fc:b6:95:03:71:b2:e9:26:9f:08:
9d:9e:cc:a6:f2:35:aa:68:62:31:03:8e:86:47:85:
ec:b8:4a:55:dd:35:a1:05:4c:1f:25:a6:75:bd:cb:
a6:87:e1:de:fa:df:65:92:4b:e6:29:cd:b1:d0:a8:
98:39:45:6a:53:6b:df:c0:2c:79:5c:d9:21:be:94:
1c:32:a8:3b:9a:16:29:72:54:be:64:51:4e:5f:46:
fc:dc:62:89:36:55:7a:c4:16:13:61:32:f3:87:74:
07:54:4f:5b:ef:a3:35:05:7d:a6:09:f9:03:b9:d1:
d5:dc:49:a2:2d:8b:66:0c:ce:00:ca:73:55:c9:f9:
7c:17:ed:14:ca:2f:d2:17:d6:ab:f2:dc:cc:19:57:
91:81:ae:4e:35:2d:ca:5a:55:ca:a3:ba:5c:53:59:
97:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D0:86:83:97:DF:FB:25:1F:9F:31:0F:4F:E7:2E:78:1C:3F:27:22
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VtCGg5ff-yUfnzEPT-cueBw_JyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.156.0/24
Signature Algorithm: sha256WithRSAEncryption
43:52:17:4a:a7:03:d3:7b:45:d4:06:f1:a4:c0:58:6f:0d:aa:
09:39:41:7f:e4:0e:a3:7d:10:0e:9f:76:d5:c5:da:de:8d:df:
6a:e0:58:d1:f8:b3:71:a3:99:fe:29:50:5c:7d:18:1f:14:9d:
6d:b6:0d:8f:11:60:97:e0:33:8c:b8:20:46:9b:13:98:45:13:
f7:5c:7b:e3:11:e7:16:1d:e3:59:ed:10:20:c9:0c:87:23:ed:
d5:70:7d:5a:b4:54:a3:31:06:b0:37:88:c0:b2:25:f2:5f:18:
dc:dc:fc:43:65:50:61:42:a2:72:ce:06:33:57:7b:cb:05:5c:
3c:ad:65:dc:9b:29:e7:19:a5:2f:1f:c5:a1:54:c6:31:7e:59:
f3:ed:7f:26:08:c2:1b:19:c4:06:8b:a5:96:a2:a2:36:bd:9c:
8e:17:03:b0:06:a7:1a:05:fd:44:a0:6f:56:07:db:d1:40:73:
56:f7:cc:65:78:a9:82:2b:11:9b:f4:d9:40:6a:fb:61:c9:0d:
31:aa:ac:da:1d:a7:81:56:99:46:bb:f8:29:04:6f:04:e8:46:
fc:d0:72:c8:97:a4:04:86:e5:28:34:c6:a6:00:1e:00:3b:8a:
10:d4:72:12:f8:41:ca:3c:1a:c4:c9:39:6e:62:d7:df:03:f2:
e0:6b:ef:ef
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBPciiDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
OWQ1NzQ0N2UzNDIwYjg1Mzg3NWI2ZmE0MDM3MmFhZGUzMTkyY2EyMB4XDTIyMDYy
ODE4MzYwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTZkMDg2ODM5N2Rm
ZmIyNTFmOWYzMTBmNGZlNzJlNzgxYzNmMjcyMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAILwoW6SbImGtYAhAnNzDynjEniHxs4dRBMIDMP6iStgew5t
g3T4U5Lu2wX+OqBH9Op7HFj7T7XkT8lziQAzze0KzWZcDKlrHiUOzghXvSzxV8rf
Eq9qa2lJiSubL6T8tpUDcbLpJp8InZ7MpvI1qmhiMQOOhkeF7LhKVd01oQVMHyWm
db3Lpofh3vrfZZJL5inNsdComDlFalNr38AseVzZIb6UHDKoO5oWKXJUvmRRTl9G
/NxiiTZVesQWE2Ey84d0B1RPW++jNQV9pgn5A7nR1dxJoi2LZgzOAMpzVcn5fBft
FMov0hfWq/LczBlXkYGuTjUtylpVyqO6XFNZl3cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRW0IaDl9/7JR+fMQ9P5y54HD8nIjAfBgNVHSMEGDAWgBTJ1XRH40ILhTh1
tvpANyqt4xksojAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lkVjBSLU5DQzRVNGRiYjZRRGNxcmVNWkxLSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGQvMTU4NmZkLWZkMmMtNDFmOC04ZmU5LTRlMTk4ZjBhNjAxMy8x
L1Z0Q0dnNWZmLXlVZm56RVBULWN1ZUJ3X0p5SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQv
MTU4NmZkLWZkMmMtNDFmOC04ZmU5LTRlMTk4ZjBhNjAxMy8xL3lkVjBSLU5DQzRV
NGRiYjZRRGNxcmVNWkxLSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALyEnDANBgkqhkiG9w0BAQsFAAOC
AQEAQ1IXSqcD03tF1AbxpMBYbw2qCTlBf+QOo30QDp921cXa3o3fauBY0fizcaOZ
/ilQXH0YHxSdbbYNjxFgl+AzjLggRpsTmEUT91x74xHnFh3jWe0QIMkMhyPt1XB9
WrRUozEGsDeIwLIl8l8Y3Nz8Q2VQYUKics4GM1d7ywVcPK1l3Jsp5xmlLx/FoVTG
MX5Z8+1/JgjCGxnEBoullqKiNr2cjhcDsAanGgX9RKBvVgfb0UBzVvfMZXipgisR
m/TZQGr7YckNMaqs2h2ngVaZRrv4KQRvBOhG/NByyJekBIblKDTGpgAeADuKENRy
EvhByjwaxMk5bmLX3wPy4Gvv7w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org