Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0rEjgBhdxzygKvcHsf8lmyRp48Q.roa
File: 0rEjgBhdxzygKvcHsf8lmyRp48Q.roa (raw, json)
Hash identifier: WmOvDnIR3aU0RC8ZiBVFXg8mJc0G50PkEYlX5ppIvjM=
Subject key identifier: D2:B1:23:80:18:5D:C7:3C:A0:2A:F7:07:B1:FF:25:9B:24:69:E3:C4
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1D9C4ED4
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0rEjgBhdxzygKvcHsf8lmyRp48Q.roa
Signing time: Wed 13 Apr 2022 10:17:46 +0000
ROA not before: Wed 13 Apr 2022 10:17:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 212.111.200.0/24 maxlen: 24
77.47.142.0/24 maxlen: 24
195.178.146.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
77.47.178.0/24 maxlen: 24
77.47.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496783060 (0x1d9c4ed4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Apr 13 10:17:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2b12380185dc73ca02af707b1ff259b2469e3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:71:b5:f4:c2:46:89:fa:be:c7:f6:7c:1c:
c9:23:e4:b0:cd:4b:f8:98:cd:d6:1c:f9:0c:d9:fa:
d7:e3:df:f6:51:0e:f6:18:05:59:5d:1f:d0:00:55:
b0:66:13:24:b0:51:b9:0f:b9:91:77:66:f4:78:c3:
83:bb:3f:49:81:2f:88:93:e7:c3:49:0b:40:60:51:
04:96:95:11:7d:80:54:c8:de:9f:a4:8f:db:71:4a:
f1:8a:99:2a:9a:ba:84:cb:b6:fc:d6:fa:05:57:80:
7f:40:03:d2:fa:be:eb:40:ae:4d:ca:1a:93:49:55:
f7:f4:f7:bb:bc:0e:a1:4c:a3:08:6a:6e:5b:8d:a6:
46:70:7a:68:41:11:ef:1d:31:9a:65:2c:f0:5f:5c:
90:ba:a9:1c:80:5c:b2:b1:62:c8:ac:65:a0:5c:d1:
1b:97:dd:32:e2:02:c8:67:b4:94:08:60:38:89:27:
95:1b:fa:49:62:12:fa:1a:18:ae:f1:39:7d:8e:d4:
75:88:5a:66:bf:6c:89:46:a2:64:f9:31:7a:33:74:
48:f2:87:a9:84:62:1c:2b:3a:f5:37:80:a4:d5:8c:
a7:d8:4f:55:72:b9:c7:fe:3f:f0:ef:b6:33:46:db:
7f:06:fd:42:c5:fe:68:73:34:ba:23:99:e2:c0:5d:
8e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B1:23:80:18:5D:C7:3C:A0:2A:F7:07:B1:FF:25:9B:24:69:E3:C4
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/0rEjgBhdxzygKvcHsf8lmyRp48Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
77.47.178.0/23
195.178.146.0/23
212.111.200.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:30:0b:3e:11:3a:b2:bd:c0:bd:38:04:6c:f6:e1:83:f9:dd:
5e:54:70:90:60:eb:cd:1b:56:fa:23:40:9b:28:92:fb:87:7b:
5c:c7:62:ae:a4:03:7a:86:39:0c:16:92:fa:f6:d8:fd:93:24:
f4:df:d8:60:e0:67:ac:4f:b1:d9:4b:48:9e:54:7f:cf:6e:fa:
e1:29:35:a3:1e:da:79:e7:f2:ed:b7:f4:75:84:6e:80:fb:44:
13:b4:fb:70:26:75:84:01:9b:eb:32:33:32:dc:c8:99:de:d6:
84:bb:10:89:c6:52:74:8c:a1:79:5e:14:6f:53:bc:77:8d:06:
75:a9:a4:47:c7:1e:49:47:96:b3:e9:61:e2:ae:cc:87:e3:58:
12:3a:da:09:29:6c:ff:e4:5f:4f:9b:dc:18:d5:a8:fb:71:8f:
93:e8:9f:da:fb:d2:27:fd:57:b9:16:35:4d:51:26:b5:04:65:
5f:77:79:19:bb:ab:3d:44:f6:09:b7:ff:94:1b:1a:ce:bb:44:
e3:32:d0:37:e7:b4:79:9c:d1:0e:7e:63:e4:b2:64:55:3b:a4:
85:82:4c:88:1d:16:f2:ae:1d:ac:dc:0f:c4:c0:75:ba:0e:5f:
30:d2:24:c5:6c:56:e9:b0:9a:a6:99:9c:f0:b6:61:ae:ff:b9:
7d:0d:c2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org