Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/ug63hbgyGuZdPKiq_FrAc9-RvKE.roa
File: ug63hbgyGuZdPKiq_FrAc9-RvKE.roa (raw, json)
Hash identifier: Pz98IJbHcsi+bUYxocFbJMVOzECocPQh7LqXshVsM5A=
Subject key identifier: BA:0E:B7:85:B8:32:1A:E6:5D:3C:A8:AA:FC:5A:C0:73:DF:91:BC:A1
Certificate issuer: /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial: 3882D3B6
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/ug63hbgyGuZdPKiq_FrAc9-RvKE.roa
Signing time: Fri 27 May 2022 13:56:13 +0000
ROA not before: Fri 27 May 2022 13:56:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49632
IP address blocks: 188.125.174.0/24 maxlen: 24
188.125.161.0/24 maxlen: 24
188.125.160.0/24 maxlen: 24
188.125.165.0/24 maxlen: 24
188.125.164.0/24 maxlen: 24
188.125.163.0/24 maxlen: 24
188.125.166.0/24 maxlen: 24
188.125.170.0/24 maxlen: 24
188.125.169.0/24 maxlen: 24
188.125.168.0/24 maxlen: 24
188.125.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948097974 (0x3882d3b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Validity
Not Before: May 27 13:56:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba0eb785b8321ae65d3ca8aafc5ac073df91bca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:98:83:cd:ff:f6:d9:3c:55:8b:a1:cb:15:b1:
d3:12:b4:73:be:fd:7e:34:ae:a4:0d:e1:bf:6d:e3:
9e:8d:d5:6f:97:a5:3c:d9:e0:59:bf:0d:be:7a:bd:
0b:46:cf:74:7d:09:a0:58:3e:dd:39:86:66:58:ca:
27:76:6e:de:4b:fb:cc:f4:85:2c:4d:e5:f3:86:08:
d3:7b:da:9e:08:9a:5c:46:53:97:e8:ba:96:ec:d4:
54:54:be:66:bc:4f:85:00:55:68:d8:46:5e:42:71:
9b:9b:19:94:80:0c:25:0e:dd:54:21:f5:88:1e:0e:
8e:aa:61:6c:90:6d:03:c8:c7:db:88:26:9b:31:c1:
ba:1d:de:f7:d1:f3:85:93:67:c6:da:6b:1f:e0:21:
b6:f6:b3:86:b9:da:61:48:89:88:7b:47:c7:8d:14:
7a:32:68:f0:06:13:92:34:7b:36:be:79:47:fe:26:
e1:ab:29:50:ad:af:e6:1c:5f:ca:b3:93:10:bc:03:
c7:e0:d2:25:de:51:99:ce:4f:f3:89:e5:37:7d:ec:
a3:27:f5:e2:e4:80:1d:73:7a:49:4d:13:db:48:80:
46:dc:14:9a:6b:46:d2:15:60:43:c5:a2:6e:a9:30:
73:cd:9e:5b:3a:fa:8f:2c:52:12:6e:7f:ee:6a:43:
e8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0E:B7:85:B8:32:1A:E6:5D:3C:A8:AA:FC:5A:C0:73:DF:91:BC:A1
X509v3 Authority Key Identifier:
keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/ug63hbgyGuZdPKiq_FrAc9-RvKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.125.160.0/23
188.125.163.0-188.125.170.255
188.125.174.0/24
Signature Algorithm: sha256WithRSAEncryption
71:4f:16:f1:dc:65:c7:6a:f1:f7:74:e5:08:25:c7:f3:a6:cf:
64:b4:33:aa:a9:0b:c2:51:7a:6b:ea:65:73:09:93:04:fb:c8:
6d:74:1c:be:f1:f7:06:2c:e0:e1:2e:3e:e3:7e:04:0c:96:2d:
1a:5c:70:2c:15:0b:bb:ae:3c:bb:50:22:b7:54:23:d0:a3:50:
31:5b:38:24:25:59:1e:f6:a3:16:d3:15:29:59:e2:6e:8d:12:
72:a7:b4:24:0e:a9:1f:6c:d4:30:da:f0:89:6b:d4:07:e9:02:
71:0b:2a:88:bc:3d:2c:85:a9:cc:9a:9a:5b:03:9b:08:a7:a7:
d3:41:4b:44:1f:6a:90:94:0b:0e:00:45:d2:74:71:59:5c:d8:
df:53:bf:be:4c:da:ec:cb:40:c6:63:82:d8:74:61:51:b9:e4:
e8:51:00:03:06:5d:cc:0a:6c:48:a1:8c:09:9e:9b:f3:11:d2:
11:d8:12:7b:9f:d6:54:8a:ec:c5:ef:a2:49:bc:9d:4d:9d:f4:
ec:c2:2b:ab:3f:e2:e4:75:b0:5c:9c:f2:b5:47:6c:43:7b:55:
64:47:6b:7f:86:d7:e3:14:c0:e1:b6:49:b1:52:5e:29:3e:73:
6a:c4:33:0e:b0:ff:2c:c2:ad:4b:22:f4:46:50:8c:d7:95:4f:
52:95:ef:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:47 2024 by rpki-client on console-fra.rpki-client.org