Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/mX5eA9_xh9XnZUhGqTq-GKPgsXU.roa
File: mX5eA9_xh9XnZUhGqTq-GKPgsXU.roa (raw, json)
Hash identifier: 9yYo14fDlZzrZOQqwq2ILS+J1CluF7DLx/HUHwoofiw=
Subject key identifier: 99:7E:5E:03:DF:F1:87:D5:E7:65:48:46:A9:3A:BE:18:A3:E0:B1:75
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0182665A8045D2722AA038F7976DFADA921B
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/mX5eA9_xh9XnZUhGqTq-GKPgsXU.roa
Signing time: Thu 04 Aug 2022 00:56:23 +0000
ROA not before: Thu 04 Aug 2022 00:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202561
IP address blocks: 188.132.221.0/24 maxlen: 24
188.132.222.0/24 maxlen: 24
188.132.146.0/24 maxlen: 24
188.132.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:66:5a:80:45:d2:72:2a:a0:38:f7:97:6d:fa:da:92:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Aug 4 00:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=997e5e03dff187d5e7654846a93abe18a3e0b175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:5d:75:61:59:0b:47:23:e3:11:de:c9:5c:
fa:00:a0:5b:ec:53:94:91:d0:ea:44:6f:95:33:b9:
97:16:a8:0e:01:3e:24:fa:67:1e:c2:43:49:5f:04:
a8:fa:3e:76:e5:78:c2:67:41:2d:38:16:aa:f0:17:
69:0d:b5:fc:b5:98:b5:c5:93:65:23:e2:40:3b:1c:
8d:3c:22:0e:7a:51:d0:81:b7:e8:df:11:a6:05:ab:
b8:42:9d:31:77:28:11:14:77:f6:bb:df:3b:a3:df:
0e:b0:9c:cc:c0:32:ee:4c:52:fd:bc:40:de:aa:5f:
e7:8c:76:e2:88:01:c9:fd:73:a5:03:2f:3e:80:33:
b9:ac:ee:49:5a:25:41:9a:b5:86:8b:41:fa:61:73:
ca:29:12:56:43:5a:9a:61:db:41:f6:e2:12:87:b4:
a9:20:0d:72:12:1c:ca:41:63:6c:67:5a:f8:80:47:
d4:a6:1d:a6:fd:97:bf:3b:e5:ec:14:b0:99:11:2b:
ca:76:c1:de:d7:45:ea:7f:8a:e3:30:d0:59:d9:ab:
ca:a6:37:83:0a:37:e2:31:5d:0e:6d:2b:99:90:cb:
ac:20:a7:ef:b2:c6:a9:e6:5d:cc:22:5e:b8:d0:7f:
98:11:78:b3:5c:7d:1d:d3:c9:48:bd:21:07:59:c9:
ca:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7E:5E:03:DF:F1:87:D5:E7:65:48:46:A9:3A:BE:18:A3:E0:B1:75
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/mX5eA9_xh9XnZUhGqTq-GKPgsXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.146.0/24
188.132.152.0/24
188.132.221.0-188.132.222.255
Signature Algorithm: sha256WithRSAEncryption
a6:22:5b:3b:e0:67:55:c8:a3:02:2f:31:b8:23:9d:0a:ea:db:
15:06:89:8a:79:98:62:b6:01:5e:3d:c4:71:03:0d:03:cf:38:
9e:dd:37:3c:ff:91:89:cd:6d:b5:d0:13:15:98:eb:b5:02:33:
63:7e:01:ea:03:50:cc:9f:4c:1c:9f:7c:37:50:9d:2d:a4:ee:
0b:bf:8a:72:c0:c8:1f:43:37:a7:a5:0c:05:ad:0c:d8:b0:fd:
55:eb:50:00:3f:62:09:b7:6d:25:0f:b0:cf:09:ba:3c:e7:a0:
d5:54:1f:91:a5:51:87:c5:b5:a2:71:f7:e7:44:11:8c:98:be:
36:3e:b4:76:6e:e7:a9:72:80:f9:63:f4:8b:24:d2:cf:45:bc:
06:e2:29:b1:13:51:18:e4:ab:d7:e0:fa:93:dd:c4:2d:d7:f2:
64:78:50:a1:83:5d:bb:de:b9:a6:2a:0b:5d:fb:3b:5c:b5:a5:
07:2a:15:29:a6:dd:af:69:50:a0:5d:3d:8c:bc:13:fe:1e:40:
32:cc:a0:86:2d:c3:3b:2b:c0:9a:17:bf:9b:16:20:64:bb:6d:
56:d1:1b:e2:4d:ac:1c:f5:51:9e:5a:fa:39:89:38:49:8b:9a:
4b:b0:71:26:8d:a7:42:31:16:c8:5f:e1:c9:3d:54:49:bb:18:
be:d1:b7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org