Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-aGm1lDC5gtKB421pBVKI71Pxog.roa
File: 1-aGm1lDC5gtKB421pBVKI71Pxog.roa (raw, json)
Hash identifier: O86yKBYxp0XX74sw00sEIJczyMei3XVTfTOD4U3pJnA=
Subject key identifier: F9:A1:A6:D6:50:C2:E6:0B:4A:07:8D:B5:A4:15:4A:23:BD:4F:C6:88
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1D6ED275
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-aGm1lDC5gtKB421pBVKI71Pxog.roa
Signing time: Thu 31 Mar 2022 11:40:52 +0000
ROA not before: Thu 31 Mar 2022 11:40:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3319
IP address blocks: 195.178.144.0/23 maxlen: 23
195.178.144.0/21 maxlen: 21
195.178.152.0/22 maxlen: 22
212.111.220.0/24 maxlen: 24
212.111.222.0/24 maxlen: 24
212.111.221.0/24 maxlen: 24
212.111.223.0/24 maxlen: 24
77.47.244.0/22 maxlen: 22
77.47.152.0/24 maxlen: 24
77.47.154.0/24 maxlen: 24
77.47.153.0/24 maxlen: 24
77.47.155.0/24 maxlen: 24
77.47.182.0/24 maxlen: 24
77.47.181.0/24 maxlen: 24
77.47.183.0/24 maxlen: 24
77.47.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493802101 (0x1d6ed275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 31 11:40:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9a1a6d650c2e60b4a078db5a4154a23bd4fc688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a4:1f:11:c6:eb:b6:0a:75:ea:92:85:46:5d:
41:74:89:66:a5:54:cf:c5:54:7d:f7:13:a1:dd:7b:
ee:9d:dc:87:48:b6:82:22:bf:6a:13:ed:98:8a:9d:
fe:90:28:60:f6:7f:1f:f3:da:35:b2:a3:17:f7:06:
d5:8e:b1:b4:39:2e:3a:7c:f9:ed:79:83:1b:dd:fd:
ed:e3:6a:c1:22:ef:93:ba:01:aa:63:db:f4:15:e0:
d3:07:32:ef:7a:cf:08:a9:90:7f:60:e4:52:bd:e2:
26:f7:6c:6e:d9:91:a0:1f:d0:e9:9c:9c:c1:4f:59:
cb:93:56:0a:82:6e:01:b8:c2:d4:e6:22:3d:02:6c:
69:cb:ab:04:bd:32:bf:6c:07:96:7c:f9:8c:31:e9:
a3:aa:be:91:bf:9a:55:4e:3d:7e:be:f6:31:24:27:
8b:13:c9:bd:4d:68:f7:ed:87:f1:67:33:a3:f4:a7:
f7:88:35:43:2e:0e:6d:43:fc:17:10:c3:66:c7:84:
1b:e3:d1:b9:1d:a3:6d:b3:d6:4c:f3:4b:8c:35:d4:
81:24:0f:77:f2:00:ab:30:d0:83:e3:29:b8:88:e4:
51:8e:f9:d9:21:51:69:f2:b4:40:82:b5:c7:c5:ae:
d9:dd:4a:ca:81:7a:62:46:4d:24:79:33:ce:3b:b4:
26:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A1:A6:D6:50:C2:E6:0B:4A:07:8D:B5:A4:15:4A:23:BD:4F:C6:88
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-aGm1lDC5gtKB421pBVKI71Pxog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.152.0/22
77.47.180.0/22
77.47.244.0/22
195.178.144.0-195.178.155.255
212.111.220.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:2d:20:3d:dd:fb:54:40:00:8d:e0:e5:cd:f7:0e:db:12:d4:
74:0d:15:cf:7f:34:0e:e6:7f:84:f2:b3:22:88:da:38:46:ae:
50:06:3f:c9:e4:ee:1e:c7:35:b9:d7:8c:70:0f:66:c1:c1:d1:
76:08:2b:94:1d:84:0b:ff:5d:75:e1:10:43:34:67:7e:49:ad:
bd:6b:0a:7c:60:e7:f3:5d:f8:6b:9d:3a:06:d4:76:f8:d5:77:
0c:dc:eb:c1:e1:99:6c:c5:d7:22:29:c4:29:d3:44:15:b4:4c:
1c:d0:3a:70:bf:5e:02:f0:1a:c5:28:26:72:41:ea:6c:0b:df:
80:87:a9:39:19:f9:3c:fa:9c:7a:bc:e1:59:55:d9:38:8a:5a:
74:79:af:80:98:8b:5d:ae:e3:92:d0:31:cb:26:c5:81:9f:8b:
05:3f:a2:4b:05:d1:e9:2e:0a:6a:9e:18:8e:58:0c:10:d8:20:
36:90:0f:17:ae:61:e7:d9:d1:12:a6:5e:b3:dc:bd:9c:c2:01:
b8:a5:c9:d6:51:85:8d:cf:f5:29:3c:76:f6:06:19:b0:9a:53:
76:86:ee:26:36:6f:11:9e:6d:34:62:e8:74:0f:d7:a7:e9:d1:
4f:c1:1f:fd:89:3d:91:7c:5b:3d:14:77:b6:78:4b:8e:51:a2:
c1:d5:aa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org