Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/5-HEQsMF3mE-kTvJuAusGgHkbkY.roa
File: 5-HEQsMF3mE-kTvJuAusGgHkbkY.roa (raw, json)
Hash identifier: XpfSmCM2cmqWonU+qxz+W+6lT2i2+WMyZQeSuZimnfc=
Subject key identifier: E7:E1:C4:42:C3:05:DE:61:3E:91:3B:C9:B8:0B:AC:1A:01:E4:6E:46
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0182018F14223B029A0F03D752980091F60D
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/5-HEQsMF3mE-kTvJuAusGgHkbkY.roa
Signing time: Fri 15 Jul 2022 11:12:10 +0000
ROA not before: Fri 15 Jul 2022 11:12:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204197
IP address blocks: 77.47.143.0/24 maxlen: 24
195.178.132.0/22 maxlen: 24
195.178.146.0/24 maxlen: 24
77.47.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:01:8f:14:22:3b:02:9a:0f:03:d7:52:98:00:91:f6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 15 11:12:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7e1c442c305de613e913bc9b80bac1a01e46e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:1e:22:93:af:e0:19:64:71:47:6f:8e:b0:
d4:ca:46:4c:ed:95:ec:20:69:cb:4d:bb:85:8e:3d:
a2:e0:97:bd:e6:8b:ce:4f:2b:ab:d3:17:c8:58:80:
b3:43:11:34:d1:3e:01:c2:b8:f1:f7:70:34:00:aa:
f7:9b:b4:47:cb:0c:7a:34:df:44:b4:71:d0:6a:a2:
e5:11:38:ad:ac:b3:2f:cf:37:80:36:ee:f1:61:66:
51:cf:65:45:ba:f2:67:29:b4:3f:54:b8:b1:ec:c4:
e6:3f:b2:fa:ed:9b:1d:bc:6d:c8:fa:24:aa:0a:f6:
68:7b:46:fc:b4:83:6d:65:96:45:7a:64:55:3f:58:
58:d9:09:b9:0a:5a:03:f6:81:4d:9b:cc:d5:9d:1c:
41:46:58:26:57:4b:5f:01:ce:57:cc:d2:d8:cb:d0:
a8:52:e6:74:87:f2:f6:79:26:40:53:8f:28:65:1b:
e2:69:a7:a2:b0:1b:00:f1:45:e6:54:7e:5b:8f:8c:
25:19:68:fd:01:18:ce:21:30:9c:63:5c:e6:e1:3f:
71:e0:aa:87:76:1f:ad:f3:88:8d:df:12:79:9b:06:
d2:1c:0a:ff:a8:9c:b5:83:8e:63:7e:14:12:59:f3:
e0:3a:74:98:62:c4:8a:9d:12:32:53:7f:d1:fe:4c:
96:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E1:C4:42:C3:05:DE:61:3E:91:3B:C9:B8:0B:AC:1A:01:E4:6E:46
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/5-HEQsMF3mE-kTvJuAusGgHkbkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.180.0/22
195.178.132.0/22
195.178.146.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:42:fd:37:25:0f:91:b7:64:20:56:7f:e2:af:4b:c2:e6:4b:
91:93:97:34:3b:ef:ac:27:19:47:26:de:da:b3:f2:1e:b1:32:
a5:b2:d2:14:4f:81:43:ef:34:37:44:61:5c:9b:5c:ad:cd:9b:
6a:fb:6b:9a:09:a5:06:86:48:6a:04:c8:80:63:9d:34:db:71:
f1:f1:f7:8a:39:f9:b1:9b:19:95:c5:9f:5d:49:f7:58:80:d1:
be:3f:f6:a7:93:06:d3:2b:c3:13:25:b3:a9:7a:66:50:25:a2:
f3:2b:32:0c:84:3e:0b:3a:2e:3f:4b:46:f7:0c:da:8a:0d:a6:
14:23:14:29:97:9b:45:81:cc:6d:27:a8:b1:5b:57:00:67:ca:
f0:89:b0:ca:6c:b7:8b:a9:1c:c9:fd:6b:e1:08:5c:c0:85:48:
d2:d5:a8:ac:ed:1a:7d:4a:14:2d:00:4c:19:d0:dd:53:ed:b2:
7d:61:95:88:4c:9a:0e:83:24:03:af:2d:5c:15:58:36:dc:7a:
f8:d3:c2:31:62:2c:37:3e:1f:77:ad:c6:dd:29:aa:f1:6d:16:
dd:5d:6f:f2:3f:3e:47:d1:e1:0a:30:4e:32:f9:27:66:21:06:
60:0e:e0:86:09:7f:07:98:b0:c9:f6:60:f4:12:45:b1:b0:f0:
25:47:3a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org