Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/n3glEjvKIHPeipJfv9Evy1BefXQ.roa
File: n3glEjvKIHPeipJfv9Evy1BefXQ.roa (raw, json)
Hash identifier: r8LAfYDzzXp7a8v30+sWFZwBYGMs2bc++6qCExsqNX0=
Subject key identifier: 9F:78:25:12:3B:CA:20:73:DE:8A:92:5F:BF:D1:2F:CB:50:5E:7D:74
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 04DA5B2C
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/n3glEjvKIHPeipJfv9Evy1BefXQ.roa
Signing time: Fri 17 Jun 2022 07:24:57 +0000
ROA not before: Fri 17 Jun 2022 07:24:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207474
IP address blocks: 188.132.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81419052 (0x4da5b2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 17 07:24:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f7825123bca2073de8a925fbfd12fcb505e7d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:8a:25:9c:52:28:dd:d0:e4:33:9e:9e:7b:
3b:37:3e:1f:fa:6a:d2:1a:a1:7e:47:69:86:b8:a0:
67:5b:c9:f0:a8:aa:a9:9b:b4:a2:eb:62:4f:11:ba:
c6:e0:55:7c:22:d8:28:8d:03:9a:c7:90:e2:07:99:
f4:3b:b8:62:09:df:46:ff:5e:a8:dc:ac:3e:64:c8:
7f:9a:7e:79:77:b2:2f:e5:39:58:9d:b4:f2:df:51:
f6:07:2a:aa:6c:5e:77:e9:91:f4:6f:41:9d:2b:9b:
83:c3:7e:c9:87:c8:b8:09:cb:50:e3:5e:16:e0:90:
a1:59:94:f5:06:e5:80:4f:88:96:56:db:a7:83:14:
79:5b:00:1c:30:fd:7c:d3:53:73:02:70:bb:4f:a9:
7f:01:28:ce:96:45:ce:cd:8b:58:79:b8:8d:ae:3f:
d1:28:b3:af:74:7f:ee:19:be:e0:aa:f6:97:9a:d1:
2a:3d:91:fc:6c:cd:3a:b6:38:c1:f8:c2:e9:f4:68:
1f:f3:37:61:4c:3c:00:14:d6:cc:b8:67:2b:64:35:
ea:a7:4f:b1:59:c5:cc:cf:40:ef:14:46:a8:be:ad:
5a:d7:18:79:92:fe:fa:3e:31:ae:cc:fe:d9:a3:a4:
ec:46:8e:4b:0a:dd:2b:c4:ba:4e:a5:d4:52:a3:3e:
28:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:78:25:12:3B:CA:20:73:DE:8A:92:5F:BF:D1:2F:CB:50:5E:7D:74
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/n3glEjvKIHPeipJfv9Evy1BefXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.152.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f9:1e:80:7b:8e:14:14:f8:dd:1d:f6:e1:bf:da:18:db:07:
48:48:a0:96:4f:8c:6a:b1:34:6c:87:e5:4b:86:34:6e:5f:0f:
09:9b:ef:f3:c5:4f:3b:c3:7e:ac:77:69:3f:f3:0e:f7:d5:fe:
54:8e:3a:21:82:f6:dc:3a:97:19:6d:e3:3b:0b:c5:1f:1d:a9:
f9:37:a9:f4:87:93:4c:27:91:84:bf:28:6d:09:bd:49:8a:c5:
c8:75:9c:3d:69:f8:7e:3a:54:82:f0:fd:85:e3:d4:a8:c4:f0:
d9:e0:5d:f4:e1:2e:78:3f:ea:e5:5f:bf:09:40:33:77:44:d2:
8b:58:13:64:95:c1:db:8d:e5:3d:e7:d0:b1:04:79:07:24:9a:
59:81:a0:13:d7:73:9c:89:1a:0c:a6:94:65:8d:bf:be:ce:73:
59:90:45:48:85:5f:4e:6d:94:78:2b:a9:fa:a1:c0:a3:a6:94:
7b:f5:c5:3b:c7:8f:a4:74:64:14:47:a0:64:23:10:cf:bd:8a:
5e:1f:ad:9a:06:e5:0d:6e:64:c7:c0:66:71:6b:c7:60:28:ad:
df:7b:6e:02:01:b5:f9:8e:60:eb:97:67:8a:26:0e:47:1a:37:
17:7c:bc:6a:26:34:54:b5:71:a2:6b:0e:ff:15:0f:d5:ef:9d:
d0:f9:24:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:59 2024 by rpki-client on console-ams.rpki-client.org