Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/tLICKVKwBH40KNyxoexO2o4WexA.roa
File: tLICKVKwBH40KNyxoexO2o4WexA.roa (raw, json)
Hash identifier: RbZmkqRjRC17rk9ptPHLvLD7PpPnsgNZ61aCPBX/zwc=
Subject key identifier: B4:B2:02:29:52:B0:04:7E:34:28:DC:B1:A1:EC:4E:DA:8E:16:7B:10
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01840A46B5A733907F28C74C2A9E6999D55F
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/tLICKVKwBH40KNyxoexO2o4WexA.roa
Signing time: Mon 24 Oct 2022 13:55:16 +0000
ROA not before: Mon 24 Oct 2022 13:55:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 188.132.150.0/24 maxlen: 24
77.92.154.0/24 maxlen: 24
78.135.80.0/24 maxlen: 24
188.132.209.0/24 maxlen: 24
78.135.87.0/24 maxlen: 24
78.135.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0a:46:b5:a7:33:90:7f:28:c7:4c:2a:9e:69:99:d5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Oct 24 13:55:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4b2022952b0047e3428dcb1a1ec4eda8e167b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a1:8e:4a:d5:11:d7:85:50:91:a4:70:7a:93:
08:15:76:cc:ba:c0:5e:bf:2c:c2:81:b2:2c:e6:be:
d3:a2:57:4f:0b:d5:6c:24:92:00:42:a8:a2:60:f3:
5f:a7:f2:bb:cc:2c:e8:dd:61:62:3e:20:7b:b6:01:
2b:7f:a0:58:4d:d3:c7:8f:3e:c1:41:47:0d:6c:01:
1a:c8:19:f9:c9:1e:24:15:5a:9b:93:1d:db:5e:12:
cc:a7:1a:d5:3f:be:17:7e:82:12:8d:c4:2b:2d:15:
48:cc:f2:7d:45:b3:e6:c5:fb:9e:af:65:2d:08:e3:
7d:06:d0:11:06:5a:dc:4a:59:f9:31:d3:7f:54:0a:
75:c6:44:74:41:20:53:d4:55:67:ec:a6:dd:7d:f1:
d5:65:d0:c1:fe:8a:ba:25:81:99:32:a8:61:87:6d:
79:4d:97:ee:87:4b:eb:50:e6:b1:d2:7e:0e:66:d4:
e0:97:84:66:01:4a:5a:1e:9a:f4:4c:3a:ae:f4:7b:
36:f0:42:b9:d6:19:4a:ba:ce:49:d3:9c:50:fc:9f:
8a:bf:07:5d:f5:1b:9c:26:ed:62:99:5b:be:b3:b0:
14:90:9a:bb:64:e5:58:a8:b1:66:a9:89:4a:89:99:
0f:2b:a5:88:d3:e9:a3:f1:63:9d:61:17:4a:20:ee:
ca:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B2:02:29:52:B0:04:7E:34:28:DC:B1:A1:EC:4E:DA:8E:16:7B:10
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/tLICKVKwBH40KNyxoexO2o4WexA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.92.154.0/24
78.135.80.0/24
78.135.87.0-78.135.88.255
188.132.150.0/24
188.132.209.0/24
Signature Algorithm: sha256WithRSAEncryption
13:cd:2c:45:5c:68:ce:35:95:25:6b:3d:d0:b5:8f:92:99:1e:
cc:fa:9b:95:9b:da:c0:fd:3f:77:16:62:76:ac:d6:b0:80:9c:
0d:5c:9f:ab:9b:ab:b7:bc:8d:18:1e:50:cd:4e:f7:7c:88:73:
08:11:cf:31:2e:26:2c:24:31:ee:a6:89:7c:13:b4:64:17:46:
b2:31:83:8e:3e:cc:8f:78:78:c1:87:53:0d:47:ba:10:b6:2a:
75:11:3b:b3:dd:c6:8d:cd:b7:f7:f9:ae:51:e7:b2:cd:f5:eb:
a7:1d:c3:df:7a:e7:f4:24:ff:44:15:fb:7f:40:5a:50:e1:d2:
16:e1:9e:e5:b4:1a:9a:00:41:99:7d:92:30:24:7f:e3:b8:9b:
09:80:b8:0c:e6:8e:fc:cf:c3:bc:41:99:d5:5f:56:a6:be:ec:
60:37:e6:6c:06:43:67:5e:38:ff:83:b2:ee:df:55:eb:99:e5:
a1:e7:0c:a1:91:ec:bb:c5:44:4a:64:75:d6:3e:ec:f0:18:c7:
87:62:96:cc:a1:16:27:6e:c3:09:be:9e:2e:39:0a:cc:23:98:
72:3d:56:5e:6d:89:99:f4:a4:74:5d:48:02:82:f5:51:60:e4:
c5:30:15:d7:11:c6:ce:ea:78:bf:54:9f:bf:d7:05:33:24:ef:
bb:d5:5b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:59 2024 by rpki-client on console-ams.rpki-client.org