Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/KgKIqyvq-OdRd5t6bWgqlJMeuOM.roa
File: KgKIqyvq-OdRd5t6bWgqlJMeuOM.roa (raw, json)
Hash identifier: 5Nr4YSoDZWiZt2HZUlNLB6iMRs+rHQTvBP4m2kkFtSo=
Subject key identifier: 2A:02:88:AB:2B:EA:F8:E7:51:77:9B:7A:6D:68:2A:94:93:1E:B8:E3
Certificate issuer: /CN=cb20606de730456edd7335cc882cbdf4396f3460
Certificate serial: 33D5552F
Authority key identifier: CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/KgKIqyvq-OdRd5t6bWgqlJMeuOM.roa
Signing time: Sat 01 Jan 2022 05:52:07 +0000
ROA not before: Sat 01 Jan 2022 05:52:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209901
IP address blocks: 188.125.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 869618991 (0x33d5552f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb20606de730456edd7335cc882cbdf4396f3460
Validity
Not Before: Jan 1 05:52:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a0288ab2beaf8e751779b7a6d682a94931eb8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ed:8d:c5:20:fa:7a:36:3e:51:cd:07:71:d7:
38:f4:b8:0d:25:8b:af:b4:f5:f6:52:b6:58:5b:e1:
e3:de:1c:ab:a3:ff:86:3b:4b:3d:d0:22:32:43:e1:
28:7d:47:c5:9e:d6:ec:6b:d1:b6:f1:9a:22:9d:82:
de:15:e7:1c:c9:a7:45:a5:f7:bf:18:02:6a:b3:16:
38:6d:d7:91:60:0d:ff:86:47:cb:96:06:5f:20:c5:
ad:3f:5b:52:bf:f6:7d:12:e4:df:bc:da:3d:ad:ef:
95:8f:d4:14:62:4d:4e:ad:3a:e0:ed:4c:64:61:b9:
68:04:ee:c8:5d:65:11:8f:a5:c8:ba:e9:50:3c:78:
e8:82:ad:14:84:58:07:ae:fb:39:29:1e:2b:8a:8c:
3f:f9:df:3c:95:a9:59:c5:7e:60:a3:10:5b:52:4f:
e7:bb:56:0b:bb:55:27:e4:80:72:47:c2:fd:e5:2a:
1b:e7:63:d0:32:52:ef:91:18:24:29:36:ff:7c:90:
fb:80:7b:1d:e1:6b:d3:46:d0:3c:bf:7f:6f:80:a5:
24:78:52:81:17:7e:e6:6b:9a:21:e6:a5:dd:bb:3b:
f9:61:05:1b:bd:ef:b9:b9:aa:22:6c:be:39:13:90:
b4:af:89:3a:d6:38:60:ad:4b:3e:17:9c:8c:2f:c6:
a3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:02:88:AB:2B:EA:F8:E7:51:77:9B:7A:6D:68:2A:94:93:1E:B8:E3
X509v3 Authority Key Identifier:
keyid:CB:20:60:6D:E7:30:45:6E:DD:73:35:CC:88:2C:BD:F4:39:6F:34:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyBgbecwRW7dczXMiCy99DlvNGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/KgKIqyvq-OdRd5t6bWgqlJMeuOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf7a28-bf1e-4835-beed-b3d86aa43bc5/1/yyBgbecwRW7dczXMiCy99DlvNGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.156.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ff:c0:7e:81:8d:99:64:02:ac:0a:31:b1:db:41:a4:a5:70:
7a:21:3c:e1:e6:eb:fd:ad:ba:e6:13:63:00:c6:3e:15:1d:ff:
8a:10:31:f8:07:96:d5:71:2f:eb:26:16:4c:18:db:a4:b4:a2:
76:01:43:b0:37:e2:de:35:8b:d9:c4:38:bb:39:e3:7c:ea:4c:
fe:21:b1:ab:16:a0:92:bd:c0:34:3e:0f:0d:b1:75:72:49:c9:
52:58:53:17:c4:95:62:4c:9e:79:56:bc:91:16:37:cd:3b:d3:
8c:b5:d3:2e:58:fa:78:c7:98:81:db:47:65:ab:9d:07:81:46:
1e:be:a0:c0:05:93:2d:2d:e4:43:46:26:5e:b2:46:3a:fe:5a:
bc:0e:6e:2c:ab:31:0d:fa:2e:82:ba:45:ca:2f:54:73:f0:20:
c8:f1:9b:60:7d:6d:dd:5d:86:67:eb:46:c0:34:be:9e:32:9b:
b0:a4:e9:03:f5:6a:1f:e6:90:46:6a:20:b9:9c:06:2e:26:c9:
e4:aa:d3:65:09:64:5f:e0:35:0b:b7:06:cf:95:b2:01:d8:8e:
f3:c2:fa:ca:c3:68:99:f5:4c:a0:7d:10:31:b7:5b:b3:ab:93:
da:76:3d:e0:e2:85:50:e1:34:f6:6d:ed:16:46:d8:dd:0f:e6:
fc:6d:65:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-fra.rpki-client.org