Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/4DJ1NCIIXqHv3qxH40PEPlRhwHE.roa
File: 4DJ1NCIIXqHv3qxH40PEPlRhwHE.roa (raw, json)
Hash identifier: jjICnGJtq+ru8Ec/s/Z7v+mBUQONw9rWc36JxwSGo10=
Subject key identifier: E0:32:75:34:22:08:5E:A1:EF:DE:AC:47:E3:43:C4:3E:54:61:C0:71
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01821CDB7F61E2C0C6E07FDCB04DDA0F5BD5
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/4DJ1NCIIXqHv3qxH40PEPlRhwHE.roa
Signing time: Wed 20 Jul 2022 18:25:23 +0000
ROA not before: Wed 20 Jul 2022 18:25:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3319
IP address blocks: 212.111.200.0/24 maxlen: 24
77.47.210.0/23 maxlen: 24
77.47.244.0/22 maxlen: 22
77.47.152.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
77.47.154.0/24 maxlen: 24
77.47.153.0/24 maxlen: 24
77.47.155.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
195.178.146.0/24 maxlen: 24
195.178.152.0/22 maxlen: 22
77.47.178.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1c:db:7f:61:e2:c0:c6:e0:7f:dc:b0:4d:da:0f:5b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 20 18:25:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e032753422085ea1efdeac47e343c43e5461c071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e9:ce:70:77:ef:c5:cd:fe:8f:1b:4b:ba:e0:
97:29:66:d0:77:04:e1:8f:a2:66:6a:fe:25:31:e9:
1a:c2:45:57:d2:66:de:3e:ac:f4:a4:b3:09:fc:ca:
44:45:67:41:a2:7d:76:d8:8b:45:52:4a:c7:c9:24:
b4:8a:60:2e:59:60:97:20:c0:fd:c8:e4:5d:be:73:
f2:c6:0e:4d:62:84:37:b1:1b:b0:a4:08:76:4b:2a:
ac:c4:25:7e:b4:bb:8e:52:2c:c7:d9:f2:3b:6f:9b:
b5:2e:e6:7f:b9:a1:11:99:96:d8:82:dc:48:c4:dd:
5f:f8:03:7c:26:87:db:82:32:8c:57:7b:51:8c:a0:
86:c9:e5:4e:7e:a7:e1:fa:f5:8a:2e:ca:a6:af:b5:
cd:0f:a1:ef:62:3f:8c:b3:85:e3:2c:4f:be:f9:c6:
b3:be:57:ef:cf:d8:6a:d0:de:81:2c:33:89:80:9d:
37:8e:02:c0:08:33:66:58:f9:80:6d:2d:e7:ca:87:
2b:c1:61:12:d3:0d:41:2a:70:ce:fc:0e:c0:35:0b:
67:9b:06:ea:ee:95:3b:bd:63:61:56:78:c8:d8:84:
98:81:91:83:93:32:5d:b4:95:70:a2:34:c6:72:95:
5a:48:07:42:da:c1:d3:49:fc:f4:da:ec:4f:ae:35:
fc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:32:75:34:22:08:5E:A1:EF:DE:AC:47:E3:43:C4:3E:54:61:C0:71
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/4DJ1NCIIXqHv3qxH40PEPlRhwHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.152.0/22
77.47.178.0/23
77.47.210.0/23
77.47.244.0/22
195.178.144.0/22
195.178.152.0/22
212.111.200.0/24
Signature Algorithm: sha256WithRSAEncryption
27:96:3f:0d:3f:b6:a4:8e:8f:11:ed:d2:3a:94:1c:4e:f1:74:
fe:48:0f:64:91:5e:50:ae:ea:ad:6d:e6:f2:8c:02:de:d8:75:
24:03:ab:19:40:d3:5c:ad:da:b1:d3:1a:ed:2a:50:95:86:26:
6d:48:21:fb:dd:8f:0e:e9:c9:96:cb:4f:fa:0f:eb:0e:66:2c:
2c:1a:d8:fd:6e:92:2c:c8:16:5a:f9:0d:83:90:ec:b5:45:ad:
70:e1:dd:cc:c0:9e:9f:16:20:5a:87:e4:da:51:6b:92:9c:3d:
55:00:d9:23:33:ef:e0:e8:f5:84:5c:d3:8b:a8:1e:e5:56:ae:
52:8a:39:e0:74:8c:aa:71:41:38:b8:ba:93:0b:2f:fd:24:73:
32:24:ae:a0:3f:0c:11:2a:6c:9f:0d:74:f0:bf:49:65:10:e1:
96:15:aa:6f:71:10:76:89:8f:84:88:47:32:8d:06:87:8d:c7:
48:53:88:55:37:7e:9b:80:dc:47:89:9d:6d:e5:e6:28:72:2b:
c6:c6:d9:71:29:8b:7e:88:65:93:65:ad:62:af:e0:94:18:c0:
82:40:75:b8:8a:bc:0a:93:ec:79:7c:7b:3c:ad:5a:6b:1c:f1:
a1:a7:74:82:95:c3:09:0e:0c:de:70:6f:cc:74:d1:81:14:12:
92:f2:99:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org