Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/4cxXdkF-rOyECeQ5KhZh5D5w5N8.roa
File: 4cxXdkF-rOyECeQ5KhZh5D5w5N8.roa (raw, json)
Hash identifier: r4dYM4X0sAVkc9ZTBV0W7J3yS1F4venKmDarUPJHLZM=
Subject key identifier: E1:CC:57:76:41:7E:AC:EC:84:09:E4:39:2A:16:61:E4:3E:70:E4:DF
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1CCE357F
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/4cxXdkF-rOyECeQ5KhZh5D5w5N8.roa
Signing time: Tue 15 Feb 2022 16:04:23 +0000
ROA not before: Tue 15 Feb 2022 16:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204197
IP address blocks: 212.111.220.0/22 maxlen: 24
195.178.132.0/22 maxlen: 24
77.47.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 483276159 (0x1cce357f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 15 16:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1cc5776417eacec8409e4392a1661e43e70e4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:53:b0:92:3b:43:ca:d4:3e:93:5f:a7:a9:
19:3f:a3:69:a7:bf:c6:db:a5:08:22:c9:79:a2:1b:
65:1d:49:16:da:40:cf:1f:dc:f5:8f:97:f3:0d:81:
09:6e:0d:e6:15:81:d7:e6:c3:4a:c2:4f:24:9d:75:
78:0a:9b:db:8c:f1:a3:6f:48:dc:cb:66:df:41:44:
6f:15:ef:eb:09:3d:9a:1b:22:51:16:0f:0f:08:6d:
59:20:55:9f:ca:12:70:c0:4f:33:a3:9a:f3:72:ea:
ee:cf:12:94:7d:36:e3:4d:f2:51:32:d6:7b:8f:2d:
17:97:90:f7:1f:d0:2f:fb:f9:7a:9b:20:a7:c7:24:
e4:54:bd:96:5e:a0:70:45:fe:15:54:f9:87:90:c4:
d1:03:a0:c7:70:08:d1:9b:9e:e2:96:20:46:44:10:
b7:60:14:3d:d2:e3:df:1b:cc:d7:08:46:ff:4c:c5:
cd:be:35:36:18:cf:43:42:bc:47:26:8f:2a:e0:34:
d5:93:e0:fc:fb:59:2d:c2:25:88:6c:f9:86:8e:a5:
c1:62:a5:66:5c:3a:3d:55:1b:48:cc:48:c7:0b:d2:
51:5b:87:5a:28:4e:4a:87:f4:75:74:a6:c0:7f:15:
15:9f:53:f0:64:29:1d:a1:4c:52:ff:26:ea:cd:52:
0e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CC:57:76:41:7E:AC:EC:84:09:E4:39:2A:16:61:E4:3E:70:E4:DF
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/4cxXdkF-rOyECeQ5KhZh5D5w5N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.180.0/22
195.178.132.0/22
212.111.220.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:4a:ac:ee:11:7a:c3:3a:4e:fa:5a:5a:0d:47:64:66:ec:bb:
d1:87:45:b3:52:07:5b:f0:dd:68:50:38:7f:a7:3d:34:a5:07:
e6:da:bb:54:26:f1:1e:10:fc:87:05:f0:dc:96:0c:18:e3:e9:
a4:03:4a:76:f8:77:53:be:72:ce:e3:13:8a:27:b4:b1:3e:93:
8e:70:07:e0:9c:cb:6c:64:e0:8f:83:6c:77:91:a3:03:79:9f:
fe:a2:0c:30:75:75:55:06:00:86:27:26:95:cc:14:1f:d2:ef:
a8:8e:74:0d:bd:45:67:26:be:83:c5:65:4c:11:d0:44:39:6f:
7f:15:14:22:2e:00:36:45:2f:bc:e7:92:39:fa:09:17:c2:f2:
50:f7:74:0c:ef:11:86:fa:a6:8e:46:10:59:79:36:6a:4e:1e:
76:83:a2:11:25:5d:7b:f7:30:c3:c9:65:b4:7a:37:49:80:4e:
04:f2:97:34:f5:06:60:5e:fa:98:f0:80:ed:f2:75:50:e8:55:
b5:2c:15:b6:8b:74:91:84:02:62:ee:59:4c:9e:7a:71:a0:46:
bb:ac:4e:43:25:98:7a:01:98:91:90:10:9d:f7:80:09:ea:1e:
74:f4:dd:01:3d:23:31:d3:72:e0:bf:d5:a1:83:b6:8d:d1:dc:
3a:a4:cd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org