Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/zgHzMs1TODIAg3Z-2RafjHe7Nss.roa
File: zgHzMs1TODIAg3Z-2RafjHe7Nss.roa (raw, json)
Hash identifier: zZI9BKOpkjQFcxvYy/ejDqg4Ck+XxW+no4w+xho4aTo=
Subject key identifier: CE:01:F3:32:CD:53:38:32:00:83:76:7E:D9:16:9F:8C:77:BB:36:CB
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 03937205
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/zgHzMs1TODIAg3Z-2RafjHe7Nss.roa
Signing time: Wed 02 Feb 2022 10:12:50 +0000
ROA not before: Wed 02 Feb 2022 10:12:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201978
IP address blocks: 188.132.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59994629 (0x3937205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 2 10:12:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce01f332cd5338320083767ed9169f8c77bb36cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1d:aa:6e:0f:a8:19:4d:b8:58:10:cc:32:ef:
90:19:5d:db:7d:68:46:25:ca:6b:89:d9:38:bf:35:
e7:91:ee:09:7b:ae:6c:6c:ce:a4:2a:f0:5b:90:16:
70:e1:c9:6a:e2:a4:9a:03:d0:7c:fe:a8:2d:88:4e:
d5:1c:ab:29:85:ca:c9:00:4e:ae:9c:3b:4b:6a:58:
4a:67:ef:23:29:57:90:02:a0:0a:fd:08:cf:e0:3b:
6a:ad:aa:48:42:58:58:f3:1d:33:19:2c:6f:1d:a5:
a1:96:f9:7e:b2:c7:5b:6b:33:b4:d8:20:cc:cb:c1:
01:35:6c:c3:95:e8:7c:7e:54:ac:2a:f7:a2:5d:97:
44:db:cb:3d:ef:a6:92:cf:69:fd:63:7f:2c:86:41:
a1:2b:b5:6c:12:a5:74:e1:63:7b:bb:c3:17:6b:b3:
ec:b8:36:1c:02:0d:5e:61:3b:b3:c9:65:53:fe:3f:
38:d1:54:92:99:02:bf:73:90:1b:a7:ee:67:12:9f:
37:c0:4c:8c:50:28:48:67:93:ac:b1:29:36:c8:1e:
d2:a0:d5:13:3d:b8:c2:a8:6c:32:ce:f3:a4:af:d4:
b2:41:a4:ca:79:83:dc:10:8c:65:ee:af:2a:1e:05:
f9:a6:7f:ab:b5:10:53:fb:3a:48:44:fa:d6:d7:14:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:01:F3:32:CD:53:38:32:00:83:76:7E:D9:16:9F:8C:77:BB:36:CB
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/zgHzMs1TODIAg3Z-2RafjHe7Nss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.128.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:53:50:7a:91:d7:1e:84:54:b4:80:0d:79:7c:df:e1:c5:d1:
3e:9a:c4:10:0e:3b:df:22:1f:18:f4:87:5c:b9:29:22:80:a9:
6e:de:7b:32:b8:62:90:64:26:e1:d7:00:7e:73:29:d2:a3:9c:
46:0e:c1:0c:c6:a5:36:a6:fe:92:4e:1b:86:65:28:3a:c6:19:
e5:77:41:3f:21:9b:63:b1:96:c8:9f:96:a1:a2:32:e7:d8:17:
79:93:42:b8:ef:28:07:40:00:fb:a6:f5:d0:6a:7c:13:76:77:
70:d6:e3:d0:44:69:53:51:50:48:92:a6:09:cb:f8:b2:70:65:
c5:05:3e:0f:17:3b:5e:55:2c:ff:52:60:bb:44:ac:f9:61:01:
71:ef:11:65:0e:52:c2:23:e9:a3:3c:36:bc:be:3e:c3:35:09:
71:19:49:24:91:9f:39:eb:b8:04:8c:b4:15:93:c0:0b:21:fe:
d0:92:90:05:dc:c9:b7:8d:2d:7e:43:42:fe:4f:3c:cb:83:9e:
af:ec:6a:a0:40:f2:94:fb:0f:91:98:23:59:a3:7d:7e:ca:18:
84:a0:46:ff:1e:c3:83:bd:62:9a:f2:4c:9a:11:ef:7f:b5:4a:
b9:a8:26:ab:ec:5b:52:b7:95:85:66:ca:5c:20:2b:3b:eb:40:
df:f2:90:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org