Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Yy0EhYAR6bl2h5l_0HiI9S5JBqA.roa
File: Yy0EhYAR6bl2h5l_0HiI9S5JBqA.roa (raw, json)
Hash identifier: c/Zj7xGm/VJ4cTaJzzdDI7uVlAHvSf9IELfR+vZjd9o=
Subject key identifier: 63:2D:04:85:80:11:E9:B9:76:87:99:7F:D0:78:88:F5:2E:49:06:A0
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 03CCF863
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Yy0EhYAR6bl2h5l_0HiI9S5JBqA.roa
Signing time: Fri 25 Feb 2022 21:02:07 +0000
ROA not before: Fri 25 Feb 2022 21:02:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201978
IP address blocks: 188.132.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63764579 (0x3ccf863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 25 21:02:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=632d04858011e9b97687997fd07888f52e4906a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:78:ef:6c:5b:69:00:b8:f4:8e:c8:2b:3b:
a2:3d:72:e8:1a:b2:54:99:3e:51:9a:49:dc:bb:fe:
42:63:14:f3:87:62:0c:cf:2c:d4:0c:d6:9f:8b:81:
89:f4:28:f0:b4:0c:bd:7c:70:7b:ef:8f:e3:ee:f9:
b5:70:d5:2e:e1:d1:d0:7b:d4:4d:93:e5:b4:2e:da:
6a:2a:86:9e:51:9b:a1:6d:15:c4:96:cb:d5:63:87:
37:f8:f7:01:3e:71:2d:f0:1e:4a:f1:4e:b7:20:fa:
a0:9c:cc:63:11:33:46:39:e3:75:58:0d:6a:76:c7:
b8:d4:20:d2:9f:b9:c3:4a:96:58:ae:46:02:f1:f1:
e5:8d:66:ac:b0:72:3f:25:05:bb:a7:57:6c:fb:c7:
22:7e:e9:b6:36:8c:7c:3e:4b:ba:01:60:50:16:ea:
ea:94:f1:b0:ea:1c:1b:ac:0a:b6:46:02:72:05:5f:
1c:52:00:18:03:04:08:ff:2a:77:7f:e0:69:ca:da:
5b:31:a8:73:43:77:b9:e5:64:a5:1f:16:0c:94:75:
c2:f6:c3:e1:b1:0a:1e:ac:84:55:1b:3e:ef:08:a2:
77:d6:66:40:11:5e:73:d4:79:2b:8e:e4:a1:ef:65:
c5:94:3c:68:70:fb:90:17:f4:fd:aa:c0:d1:5d:e2:
30:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2D:04:85:80:11:E9:B9:76:87:99:7F:D0:78:88:F5:2E:49:06:A0
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Yy0EhYAR6bl2h5l_0HiI9S5JBqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.128.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:60:61:08:fc:04:4d:0d:d6:5b:11:d5:c3:55:29:de:6c:db:
59:f4:33:70:3a:eb:2b:17:e5:01:06:47:7f:70:06:fd:9a:91:
5c:f4:71:40:05:3d:ae:fa:05:f1:87:cc:b9:5a:98:36:de:b0:
f5:41:51:64:df:67:18:5c:5f:72:9b:45:64:d8:c0:ba:42:ec:
63:6d:cd:2d:83:cb:19:a6:d6:3a:ff:31:41:f8:80:d2:c8:34:
f4:94:3c:f1:66:9f:58:34:35:c5:10:39:ca:77:88:94:ef:7b:
11:2a:e8:dd:0a:f4:58:a7:2f:2c:a7:16:82:47:2e:33:58:05:
58:6a:43:7a:e3:48:06:ee:d2:ed:9a:ee:c0:a1:76:ab:0c:5f:
4d:df:a0:ec:64:87:d5:f5:41:77:e5:6a:d6:dc:0d:ae:22:69:
c9:ec:85:d2:c5:85:a2:18:46:65:08:25:07:36:d1:05:ac:ec:
ff:cb:39:c5:6a:1d:e0:ee:02:65:5d:5c:f4:04:fb:c2:0a:64:
3e:b3:60:fe:4c:13:ec:d7:28:69:5e:4d:d0:bf:b7:1f:54:31:
bf:b8:0a:98:29:1f:d1:b0:b4:de:93:9b:a1:1a:f9:3c:24:ce:
6b:7f:e3:d3:8d:30:2b:21:92:e7:7b:55:ff:aa:bc:0a:7b:8e:
1c:f4:d2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org