Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/4izcK6GuLu9vDUeQc-aTQWdPcBU.roa
File: 4izcK6GuLu9vDUeQc-aTQWdPcBU.roa (raw, json)
Hash identifier: D0ved+CRdR6AcbY4hpxjIm4jUWsTs1XOnP61O7Sl4oc=
Subject key identifier: E2:2C:DC:2B:A1:AE:2E:EF:6F:0D:47:90:73:E6:93:41:67:4F:70:15
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1D8B3AC6
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/4izcK6GuLu9vDUeQc-aTQWdPcBU.roa
Signing time: Fri 08 Apr 2022 13:41:46 +0000
ROA not before: Fri 08 Apr 2022 13:41:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 212.111.200.0/24 maxlen: 24
77.47.142.0/24 maxlen: 24
195.178.146.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495663814 (0x1d8b3ac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Apr 8 13:41:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e22cdc2ba1ae2eef6f0d479073e69341674f7015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:ee:41:42:a9:ea:51:8a:76:fe:59:ca:c6:
d0:d4:01:5a:85:9f:a1:66:ab:0c:99:27:cd:78:19:
1a:a7:b6:3d:b2:bf:ad:f8:f5:70:e0:ee:d3:b5:79:
ea:d6:75:b5:29:d3:5d:21:63:d9:d9:f1:df:a6:e9:
32:90:ed:1c:28:29:6a:b3:3c:16:01:e4:49:7d:a4:
02:89:5c:ff:e9:56:a1:cd:8e:5c:5c:5a:cd:26:87:
b3:29:23:3f:a5:4c:e7:35:f6:17:31:a3:53:a2:43:
08:f8:13:62:80:b3:df:18:55:34:a8:47:ef:83:a0:
07:f3:53:4a:0a:e8:8c:4b:fc:37:32:86:e0:61:ef:
fb:9e:3b:0c:70:b0:78:6f:77:1a:b4:2a:25:3d:4b:
c9:db:cf:19:80:5c:13:d9:6d:d3:95:a9:ed:d9:49:
6c:7e:ad:2a:56:bf:66:a6:e5:87:6f:7d:98:41:28:
12:5c:8d:86:fd:ef:c1:18:e9:6c:c6:92:59:2e:63:
d6:20:3b:1c:6c:63:0b:38:92:e3:3f:d0:e8:2a:0e:
71:fc:c0:8c:ce:03:a6:7a:aa:b6:37:c1:42:b0:92:
89:b6:aa:82:5c:77:02:b4:30:66:40:c3:85:51:d2:
cd:d3:80:89:f2:b5:dc:29:12:b1:bd:80:c1:f9:f9:
28:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2C:DC:2B:A1:AE:2E:EF:6F:0D:47:90:73:E6:93:41:67:4F:70:15
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/4izcK6GuLu9vDUeQc-aTQWdPcBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
195.178.146.0/23
212.111.200.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:b3:fe:7a:69:ed:32:b7:f4:5a:fb:88:6c:89:6b:bc:d9:8a:
d4:9a:da:87:2a:7b:af:cb:1b:e4:8b:a8:6d:03:4f:c0:8b:6f:
3a:47:cd:8a:a3:63:2f:51:6f:96:d1:97:38:d9:75:9e:3c:63:
fe:fb:d1:7c:e8:bb:cb:48:08:85:e7:58:c7:83:0f:32:ff:c3:
7f:a9:0a:11:9a:6f:d6:41:51:6a:27:46:20:1b:23:bd:89:af:
d1:6a:53:5e:f9:57:f5:3a:c6:76:fb:0c:0f:bf:7f:dc:b7:ef:
50:d1:ff:0e:d2:0d:0e:a4:8d:81:81:a8:36:90:71:61:99:b2:
f2:f1:51:3a:e0:6e:f2:93:fe:a8:e9:de:40:f8:28:88:52:c0:
67:6f:aa:3e:5b:e1:31:6b:86:2d:91:91:9f:08:d8:0f:b9:d5:
06:45:b2:fb:8e:5d:6b:53:54:7a:98:9b:e2:fc:6c:5a:4f:1f:
52:d3:14:20:7a:93:5a:25:e8:3a:20:a3:7e:9e:21:23:bd:e9:
51:d5:82:2c:bf:35:48:11:e7:4c:8a:4d:8d:bd:dd:8e:b7:e0:
da:39:9d:fd:64:d0:74:a1:26:c4:35:08:8a:4c:7b:1e:dd:f3:
c8:14:39:d3:f0:26:9e:68:ca:15:31:ef:0f:e6:b5:7a:42:6f:
79:bd:63:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org