Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ihE-F892pKzwiA73ZEr0FGIHIYs.roa
File: ihE-F892pKzwiA73ZEr0FGIHIYs.roa (raw, json)
Hash identifier: v8AQv6YZXo0wiYdPcmMUXyJxmaVww8AnpVPfnLtHAX0=
Subject key identifier: 8A:11:3E:17:CF:76:A4:AC:F0:88:0E:F7:64:4A:F4:14:62:07:21:8B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018392E7CEFDCD23BB839BFB0CE0726929B2
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ihE-F892pKzwiA73ZEr0FGIHIYs.roa
Signing time: Sat 01 Oct 2022 09:36:48 +0000
ROA not before: Sat 01 Oct 2022 09:36:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 188.132.150.0/24 maxlen: 24
77.92.154.0/24 maxlen: 24
78.135.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:92:e7:ce:fd:cd:23:bb:83:9b:fb:0c:e0:72:69:29:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 1 09:36:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a113e17cf76a4acf0880ef7644af4146207218b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ff:1a:45:cc:86:ea:f1:2d:2b:6d:b7:30:42:
f3:02:2c:ac:90:ec:16:af:e8:71:d6:3b:07:04:26:
f8:46:32:6c:1d:61:db:70:95:aa:5d:a2:8e:70:ee:
f8:04:db:e9:34:a3:30:7e:1d:b2:d0:ed:d6:ee:cf:
bb:f3:eb:93:8e:9f:0d:5f:69:3b:81:a1:74:f7:d0:
0a:8b:01:4d:1d:3f:aa:47:1e:0b:0f:fc:82:7e:53:
03:07:7c:33:3d:b3:38:17:fd:bd:fc:bb:39:e1:0e:
93:c3:8f:7c:4f:eb:2a:54:70:58:69:1b:c3:f0:5f:
e7:03:bb:3a:42:f2:f1:96:dd:7d:9a:34:56:d1:d8:
0c:99:bb:02:38:d6:c1:81:16:c4:15:9e:56:e0:ad:
aa:62:cd:6f:c2:a3:86:96:13:01:fc:0b:6b:b7:62:
6f:a1:11:e2:cd:30:4a:14:ef:96:b7:5a:c7:d0:bc:
d2:db:4a:ba:9e:f7:b1:d5:ca:60:b7:39:52:a5:c8:
d4:c0:db:3b:73:ed:c4:3c:82:ed:56:9e:9c:7b:53:
b3:37:f9:5f:c5:55:5e:b4:bc:85:c4:df:29:40:3c:
dd:5a:6f:96:11:12:2a:ea:e5:4c:48:02:ea:2c:72:
63:76:dd:12:d2:89:44:f6:a7:a4:3b:31:7e:3d:2e:
0e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:11:3E:17:CF:76:A4:AC:F0:88:0E:F7:64:4A:F4:14:62:07:21:8B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ihE-F892pKzwiA73ZEr0FGIHIYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.154.0/24
78.135.87.0/24
188.132.150.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e2:aa:d2:64:0c:bc:6f:72:50:a5:bd:b3:18:79:ca:2d:6b:
01:da:13:68:6c:2e:31:f5:c8:0c:5c:70:30:96:74:ec:b6:95:
81:eb:3c:2f:c5:ce:fa:14:34:46:89:26:c0:bd:83:3b:00:a5:
c8:83:9d:56:d8:dd:af:d0:cc:68:3a:07:54:f6:e1:f4:3a:b2:
0d:36:89:f9:13:bc:39:41:84:47:2e:1d:6d:e8:cf:72:1e:85:
4f:48:67:c3:2e:76:61:7c:b1:29:61:ba:68:68:b2:c7:b7:c7:
64:91:fe:27:c0:b4:55:a8:37:e3:fc:aa:46:6d:fb:e6:bd:0e:
9a:bb:5a:c8:9c:c7:0b:17:5b:81:3c:3a:c8:21:5a:28:fb:e7:
5c:ce:5d:ce:08:27:84:27:7c:c9:57:a7:43:e3:b2:ba:9e:ac:
5d:4a:b7:e1:6d:d5:bb:91:ce:24:00:81:f6:3c:44:14:42:6a:
f8:6f:29:5b:41:31:7f:df:5e:e7:b5:b9:59:c2:13:16:f1:45:
a5:8e:49:d8:b0:e9:76:d5:aa:4e:1b:14:a6:cb:49:51:fd:b4:
41:cc:41:14:94:22:75:a3:a5:bd:d7:6a:0f:ce:b2:3e:da:51:
5b:07:a0:69:88:9a:73:4c:62:7d:77:e9:15:bc:4a:b4:ee:40:
e7:94:fc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:59 2024 by rpki-client on console-ams.rpki-client.org