Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/nreRYpdZofJVn3fdFm_XVlV_9QA.roa
File: nreRYpdZofJVn3fdFm_XVlV_9QA.roa (raw, json)
Hash identifier: fAJ/MSgwVz0FfY0lL1nuWR4zvjH84J8uhvIiVmendwE=
Subject key identifier: 9E:B7:91:62:97:59:A1:F2:55:9F:77:DD:16:6F:D7:56:55:7F:F5:00
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 05148612
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/nreRYpdZofJVn3fdFm_XVlV_9QA.roa
Signing time: Wed 29 Jun 2022 14:02:02 +0000
ROA not before: Wed 29 Jun 2022 14:02:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211327
IP address blocks: 188.132.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85231122 (0x5148612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jun 29 14:02:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9eb791629759a1f2559f77dd166fd756557ff500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ca:32:14:ca:57:5d:f0:66:2b:28:69:eb:7c:
ea:d1:75:1a:e4:3a:bb:d3:ec:14:24:1c:ef:0f:56:
7f:ab:d0:ce:a9:be:ad:de:8a:df:a6:bd:6b:dc:52:
07:d6:d0:64:fc:29:70:c2:34:12:1b:e1:90:f1:ca:
0d:38:71:a1:51:81:b4:6c:b4:9c:bd:f7:4d:66:c0:
7c:60:13:20:7b:4c:db:e6:47:11:40:43:eb:72:a7:
62:9a:6f:62:ad:d1:01:5a:ca:cf:c7:79:7e:c2:52:
6d:d8:1b:bf:5b:a6:03:c1:d3:17:53:c6:98:b2:4e:
5c:8e:f5:e4:79:42:07:c4:a4:af:cd:0a:37:32:9d:
51:c2:dd:d0:88:f1:4a:0d:79:dd:f4:8b:e5:7b:69:
e9:06:cd:08:f5:fe:85:95:0e:6e:50:31:96:43:46:
e0:69:5a:38:e9:6e:66:cb:bc:58:47:6e:8f:b7:27:
49:f1:65:be:a1:08:16:39:dc:09:46:fc:6c:1b:a1:
27:e8:17:a8:da:27:bc:4c:ce:97:e1:e2:ae:9d:72:
15:51:4e:92:7a:74:7d:c4:a4:14:bd:53:b5:5b:92:
e3:87:04:47:23:24:b6:d9:68:fc:24:7d:6d:27:32:
04:f9:dc:83:9f:9c:be:7c:59:5a:ce:0a:3e:9a:19:
b3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B7:91:62:97:59:A1:F2:55:9F:77:DD:16:6F:D7:56:55:7F:F5:00
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/nreRYpdZofJVn3fdFm_XVlV_9QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.178.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:83:a6:ce:f9:36:24:40:71:c4:0c:2f:a1:fd:31:06:4a:58:
f4:07:45:91:09:72:8c:51:71:b1:66:3c:8f:47:73:23:36:99:
3a:38:be:c8:b4:3f:81:b2:f5:45:90:8a:dd:83:78:c4:4b:0b:
25:98:ad:d8:79:19:2e:f3:45:3a:54:e1:f0:b3:79:d9:6a:24:
60:d0:06:e1:83:b1:dc:a1:f6:c5:2e:bb:79:b8:8c:a9:f2:ba:
9c:78:8a:90:6f:2d:68:04:91:2b:ef:1a:3d:df:22:7a:00:a7:
ee:c2:37:54:b6:76:7f:9d:32:99:dc:3c:db:b0:cd:2b:17:75:
70:a4:e7:48:7a:27:4c:d9:d4:e1:6d:18:94:ad:1e:82:cd:85:
d2:23:b0:1c:cc:53:43:b3:72:03:17:77:b1:f2:f4:da:70:45:
d7:28:e1:c0:8a:44:39:7f:47:92:63:93:06:fe:20:24:58:de:
f0:7d:cb:57:e2:9a:8e:db:1b:e3:68:da:1f:59:38:de:67:ae:
e2:c0:a8:1d:29:a6:8e:c3:52:85:96:50:05:af:f9:ee:db:61:
a6:7f:01:48:a5:f4:ca:e0:62:b8:4a:1c:97:4a:3d:84:57:3b:
e6:25:13:46:9b:c4:c8:ac:dc:c1:86:3b:73:bb:69:19:7c:02:
a1:d1:d4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:59 2024 by rpki-client on console-ams.rpki-client.org