Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/sDZQ75g0Vqq3j0SM0ySH7F2o_pc.roa
File: sDZQ75g0Vqq3j0SM0ySH7F2o_pc.roa (raw, json)
Hash identifier: DIXlIaqTqB1cZUFA7jNMBkDdf7jSodQJqxPYXHQwGxY=
Subject key identifier: B0:36:50:EF:98:34:56:AA:B7:8F:44:8C:D3:24:87:EC:5D:A8:FE:97
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018268721ED8CD7EA4DD605C4D5B3C21306E
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/sDZQ75g0Vqq3j0SM0ySH7F2o_pc.roa
Signing time: Thu 04 Aug 2022 10:41:25 +0000
ROA not before: Thu 04 Aug 2022 10:41:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202561
IP address blocks: 188.132.221.0/24 maxlen: 24
188.132.222.0/24 maxlen: 24
188.132.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:68:72:1e:d8:cd:7e:a4:dd:60:5c:4d:5b:3c:21:30:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Aug 4 10:41:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b03650ef983456aab78f448cd32487ec5da8fe97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:0b:ae:81:86:3d:3a:d8:29:35:9f:6f:79:
49:36:14:55:90:f7:16:73:c4:44:bf:a8:fb:bd:a9:
52:68:99:89:2c:3f:25:61:ee:04:a4:89:05:a2:b2:
70:e8:ec:e7:09:c0:ff:19:a1:ad:09:db:06:4b:ab:
72:11:b0:38:43:12:e5:4b:05:aa:01:79:d6:69:7f:
ec:08:5a:6b:24:96:ce:ec:b1:03:5b:95:fb:46:2b:
67:15:1c:db:7b:19:c9:34:61:9b:d0:63:d1:ee:0a:
10:ac:b1:19:e2:67:f8:e1:ed:a6:2a:77:c8:30:02:
f1:fa:b1:41:d5:11:de:00:81:56:78:c6:bd:3e:37:
50:71:8e:7a:81:cd:fb:40:54:ef:a5:a1:3d:d5:81:
f6:ef:2f:4e:d6:45:d5:0f:2e:41:c3:f2:fd:11:34:
e3:b6:78:62:49:bd:69:7f:dc:0c:a3:2c:49:a0:9c:
e1:06:fa:19:27:7f:b7:51:60:3b:74:8a:4d:4e:0b:
ac:5d:60:db:f6:97:a6:d1:93:32:fd:0b:b5:98:0d:
7c:53:1e:62:2a:60:a0:ad:ec:97:16:bd:68:3f:5c:
7c:b4:4e:5a:ad:4e:a3:f4:97:93:32:ac:01:19:e6:
b4:b1:03:a7:76:9d:5b:0b:79:af:fe:25:dd:fc:fd:
58:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:36:50:EF:98:34:56:AA:B7:8F:44:8C:D3:24:87:EC:5D:A8:FE:97
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/sDZQ75g0Vqq3j0SM0ySH7F2o_pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.152.0/24
188.132.221.0-188.132.222.255
Signature Algorithm: sha256WithRSAEncryption
83:e7:d9:70:28:de:a3:22:a8:08:6b:bd:44:59:7a:14:db:a3:
0b:27:7b:51:86:e7:ac:55:6d:3d:92:76:af:e3:5f:e7:b4:dc:
7c:64:ae:76:15:e1:f8:99:f3:66:de:7f:c9:b9:57:15:3c:75:
e5:43:c7:53:c5:a9:90:1f:5b:d1:a0:62:39:21:d9:eb:96:bb:
d0:e4:8a:1b:c3:ee:6b:24:9a:f3:ee:0e:19:79:11:f6:ee:f2:
de:bf:1a:bd:aa:f4:98:7d:0d:24:12:28:e9:5f:9b:69:5b:67:
68:8c:61:38:5c:e1:da:53:16:1b:c0:8c:ae:37:5f:c0:79:e5:
f6:27:df:6d:54:46:ea:d9:46:07:52:be:72:18:59:1f:e3:26:
83:ad:83:c2:be:a2:74:f7:cb:aa:ac:65:65:c2:03:74:73:70:
ad:93:eb:49:30:0b:26:a3:bc:f0:cc:50:19:f6:ed:d6:92:3f:
51:7c:77:b2:8e:c8:00:46:c7:e0:0e:88:52:1e:cc:de:5c:3b:
57:fc:4e:ea:20:f6:9a:b4:70:31:0e:51:42:f4:0e:97:d2:11:
13:8b:b8:df:8b:bb:ba:a7:ff:4a:17:d5:6a:4d:c4:c4:e8:a8:
2d:34:12:fa:7c:d2:fb:e7:ed:b5:bd:60:ac:0f:0e:8d:34:ef:
55:f7:02:e6
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYJoch7YzX6k3WBcTVs8ITBuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjIwODA0MTA0MTI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDM2NTBlZjk4MzQ1NmFhYjc4ZjQ0OGNkMzI0ODdlYzVkYThmZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3cLroGGPTrYKTWfb3lJNhRVkPcW
c8REv6j7valSaJmJLD8lYe4EpIkForJw6OznCcD/GaGtCdsGS6tyEbA4QxLlSwWq
AXnWaX/sCFprJJbO7LEDW5X7RitnFRzbexnJNGGb0GPR7goQrLEZ4mf44e2mKnfI
MALx+rFB1RHeAIFWeMa9PjdQcY56gc37QFTvpaE91YH27y9O1kXVDy5Bw/L9ETTj
tnhiSb1pf9wMoyxJoJzhBvoZJ3+3UWA7dIpNTgusXWDb9pem0ZMy/Qu1mA18Ux5i
KmCgreyXFr1oP1x8tE5arU6j9JeTMqwBGea0sQOndp1bC3mv/iXd/P1YGwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFLA2UO+YNFaqt49EjNMkh+xdqP6XMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvc0RaUTc1ZzBWcXEzajBTTTB5U0g3RjJvX3BjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAvISYMAwD
BAC8hN0DBAC8hN4wDQYJKoZIhvcNAQELBQADggEBAIPn2XAo3qMiqAhrvURZehTb
owsne1GG56xVbT2Sdq/jX+e03HxkrnYV4fiZ82bef8m5VxU8deVDx1PFqZAfW9Gg
Yjkh2euWu9DkihvD7mskmvPuDhl5Efbu8t6/Gr2q9Jh9DSQSKOlfm2lbZ2iMYThc
4dpTFhvAjK43X8B55fYn321URurZRgdSvnIYWR/jJoOtg8K+onT3y6qsZWXCA3Rz
cK2T60kwCyajvPDMUBn27daSP1F8d7KOyABGx+AOiFIezN5cO1f8Tuog9pq0cDEO
UUL0DpfSEROLuN+Lu7qn/0oX1WpNxMToqC00Evp80vvn7bW9YKwPDo0071X3AuY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org