Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0eEl0bP5CjYvuvvcjPVo1-f0q7Y.roa
File: 0eEl0bP5CjYvuvvcjPVo1-f0q7Y.roa (raw, json)
Hash identifier: R2ANRZTpEM7gTR8hxOAT9+txa7kxmroCfJYeA0wbHAo=
Subject key identifier: D1:E1:25:D1:B3:F9:0A:36:2F:BA:FB:DC:8C:F5:68:D7:E7:F4:AB:B6
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1DC6A7E0
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0eEl0bP5CjYvuvvcjPVo1-f0q7Y.roa
Signing time: Fri 29 Apr 2022 09:56:17 +0000
ROA not before: Fri 29 Apr 2022 09:56:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.111.211.0/24 maxlen: 24
77.47.210.0/23 maxlen: 24
212.111.216.0/23 maxlen: 24
212.111.218.0/23 maxlen: 24
77.47.252.0/22 maxlen: 24
77.47.248.0/22 maxlen: 24
195.178.128.0/22 maxlen: 24
195.178.142.0/23 maxlen: 24
185.143.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499558368 (0x1dc6a7e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Apr 29 09:56:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1e125d1b3f90a362fbafbdc8cf568d7e7f4abb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:6b:e5:41:98:51:0f:eb:37:82:18:d0:f9:
ad:99:65:f1:f7:66:b9:b3:9e:1f:5a:1c:ec:6b:22:
61:e2:5e:f3:e2:c2:43:67:46:c9:f2:18:38:d8:9c:
eb:6e:ed:15:f5:af:c0:9d:4b:cc:09:a1:9e:d2:fd:
30:e7:f8:21:ba:d4:36:56:c4:51:3d:24:67:d5:6e:
e0:b4:c8:b4:c4:29:0a:08:1f:29:51:29:77:a0:b5:
70:77:5d:ff:b1:ab:86:85:d7:ab:99:04:e9:ca:a8:
26:09:d7:5a:d1:01:48:a0:f5:e9:f9:3d:2e:01:b5:
9d:9d:9a:13:ba:52:de:04:c2:be:fe:35:0c:0e:af:
8c:d1:b5:c7:57:be:f2:01:ba:e3:0a:74:30:cf:24:
64:96:0a:c8:29:18:c2:a6:38:5b:29:99:4e:ef:00:
78:3b:3f:10:26:5a:48:b7:ad:4e:70:0c:26:3d:a3:
16:72:ae:fb:7d:86:b8:67:d8:b9:bb:d5:b5:fd:1e:
d8:1b:9d:3d:cb:59:ae:af:64:38:93:8a:63:9e:c1:
75:9d:7d:05:0b:35:55:6b:11:1d:31:fc:59:ef:dd:
3c:fc:3c:7b:94:c9:91:41:fc:89:19:2a:c4:e9:33:
f8:72:83:e7:eb:a0:a3:d1:28:c5:91:f3:27:97:c4:
e5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E1:25:D1:B3:F9:0A:36:2F:BA:FB:DC:8C:F5:68:D7:E7:F4:AB:B6
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0eEl0bP5CjYvuvvcjPVo1-f0q7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.210.0/23
77.47.248.0/21
185.143.56.0/22
195.178.128.0/22
195.178.142.0/23
212.111.211.0/24
212.111.216.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:1f:b2:5d:f2:27:5f:92:3e:5a:46:03:a6:69:bb:54:ea:ca:
df:85:48:46:bd:1f:a5:50:97:91:d8:bc:18:db:c7:a3:1d:3e:
17:be:73:c0:df:4d:a3:cc:1a:47:80:16:d2:f9:93:1a:0f:20:
69:67:b8:80:bd:b2:68:7f:17:12:43:29:7b:3b:cd:4c:c9:20:
b3:0a:aa:be:e1:d1:27:6a:b3:40:91:fa:38:ab:95:77:01:9f:
83:bc:8a:3a:f6:06:8d:8a:f1:aa:41:c0:99:33:f9:6c:0e:15:
0e:b9:28:4b:e8:19:5e:c9:01:2b:ef:e5:22:02:ce:c1:d0:9a:
c4:2d:3b:18:71:a9:42:71:2b:85:ad:99:92:04:5d:40:ed:6e:
f6:fe:cb:2a:96:1d:99:cc:87:38:38:af:dd:82:0f:05:99:ea:
e4:5b:98:4c:70:1d:cc:b7:38:43:d5:75:e0:11:0f:04:d9:77:
66:a0:f3:9d:84:8d:40:0a:fb:5c:9f:e0:ee:e3:74:49:b5:a9:
46:83:89:3b:f3:8a:aa:2c:3a:58:ed:28:7f:a2:4e:44:c7:38:
55:d1:d3:05:7c:43:24:35:53:d2:46:f9:75:69:79:fc:7e:e7:
18:43:a8:a8:95:f7:19:fb:2b:2c:38:c8:5c:59:03:6f:58:4a:
59:86:d7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org