Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VtlGAKEe658qV4NDVyVJnqStCuc.roa
File: VtlGAKEe658qV4NDVyVJnqStCuc.roa (raw, json)
Hash identifier: mxPqfwJulhq62WAYM8UHdLdDBLuETCJJeoQrvwcc8A8=
Subject key identifier: 56:D9:46:00:A1:1E:EB:9F:2A:57:83:43:57:25:49:9E:A4:AD:0A:E7
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 050EC027
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VtlGAKEe658qV4NDVyVJnqStCuc.roa
Signing time: Wed 29 Jun 2022 14:01:02 +0000
ROA not before: Wed 29 Jun 2022 14:01:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 188.132.150.0/24 maxlen: 24
77.92.154.0/24 maxlen: 24
78.135.80.0/24 maxlen: 24
188.132.209.0/24 maxlen: 24
78.135.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84852775 (0x50ec027)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 29 14:01:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56d94600a11eeb9f2a5783435725499ea4ad0ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7f:10:d6:9f:10:16:57:fd:c2:8b:f3:85:87:
bf:33:52:f1:56:47:8a:f2:ce:e7:58:93:b5:5b:89:
81:3a:97:f9:7d:c8:89:2f:d2:4c:6f:43:ad:f0:35:
98:30:c5:24:67:ef:57:9d:16:d6:fb:d4:e1:4e:39:
6f:78:3a:d3:70:15:57:cb:a6:e0:da:1a:3f:ff:e5:
ea:e3:9e:ca:81:56:ff:68:e9:b9:ca:36:12:ac:7c:
19:5a:10:9b:cb:6d:c3:d0:6d:7d:d5:83:1c:35:5e:
4a:64:6e:ce:f3:11:46:52:f0:3e:90:0e:3a:c3:e5:
61:1b:a9:09:d0:e9:b2:33:79:d8:13:38:0a:98:b9:
cd:6c:80:b0:72:6a:87:ea:df:db:ca:69:0b:4d:80:
21:4b:81:f9:41:2d:0d:16:d4:9d:5b:7b:29:fb:c3:
9e:72:13:9f:64:2d:3c:f8:57:b4:ee:bf:43:a2:9e:
b9:9a:c4:ca:f1:09:a7:46:01:24:4f:ba:a6:01:03:
b0:31:12:e7:8c:b9:ed:31:bb:58:df:b9:14:f3:4e:
49:aa:29:33:95:b9:8b:36:02:5c:16:59:5a:87:cd:
90:21:36:ad:62:47:8b:22:f2:69:0b:b6:ce:70:98:
1c:5f:c6:a6:87:72:e2:79:72:8d:85:9e:0a:56:0d:
4f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D9:46:00:A1:1E:EB:9F:2A:57:83:43:57:25:49:9E:A4:AD:0A:E7
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/VtlGAKEe658qV4NDVyVJnqStCuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.154.0/24
78.135.80.0/24
78.135.87.0/24
188.132.150.0/24
188.132.209.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:53:07:1b:51:73:26:74:28:35:8d:b7:3f:86:0b:2c:47:74:
17:7d:9d:06:a2:ee:22:f8:1a:b3:f3:94:7e:0b:24:bf:4d:58:
88:4d:56:71:64:bd:f1:9f:f1:68:69:6a:1d:4a:fb:71:b7:be:
19:bb:7a:41:09:d7:d2:b9:e6:94:8f:88:a2:c7:2d:5d:c2:c0:
d2:ab:84:91:55:05:02:07:80:79:cd:86:af:ae:4b:e7:58:0e:
ba:7e:16:e9:3c:c1:c3:1a:48:db:e0:53:d2:1a:7f:4e:a3:97:
17:91:ed:41:6a:08:12:e4:7f:36:b2:f4:22:b9:82:cf:8f:b4:
f3:3f:89:f5:b8:d8:aa:e6:e1:ce:54:09:67:45:32:4f:42:96:
f4:ab:f8:77:b9:b9:75:ec:e5:a2:87:6d:fe:df:62:da:f3:55:
99:96:02:46:b2:54:b5:45:67:d0:84:4a:57:4e:bb:86:ff:57:
6f:b7:06:4f:99:37:83:21:57:70:a2:29:86:b0:37:cd:92:9f:
a1:82:3e:02:d4:64:fd:18:bb:28:41:a5:fc:46:7e:61:f4:17:
a3:23:17:02:75:33:1a:44:2e:41:a5:41:94:21:eb:95:b7:96:
94:b7:82:71:dd:b7:46:13:3e:fa:e0:42:57:21:b9:d6:72:23:
f6:7e:89:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org