Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/7t7iFnGtTSYVHfv5vTf-lE9-_dA.roa
File: 7t7iFnGtTSYVHfv5vTf-lE9-_dA.roa (raw, json)
Hash identifier: 7idJ6M7/TO0v1gl87e6zc+PGwSEXwqXL7fjzqb0ZD3Y=
Subject key identifier: EE:DE:E2:16:71:AD:4D:26:15:1D:FB:F9:BD:37:FE:94:4F:7E:FD:D0
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0182018F1385B90EE6F68D17CAF7A68E7352
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/7t7iFnGtTSYVHfv5vTf-lE9-_dA.roa
Signing time: Fri 15 Jul 2022 11:12:10 +0000
ROA not before: Fri 15 Jul 2022 11:12:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3319
IP address blocks: 212.111.200.0/24 maxlen: 24
77.47.244.0/22 maxlen: 22
77.47.152.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
77.47.154.0/24 maxlen: 24
77.47.153.0/24 maxlen: 24
77.47.155.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
195.178.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:01:8f:13:85:b9:0e:e6:f6:8d:17:ca:f7:a6:8e:73:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 15 11:12:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eedee21671ad4d26151dfbf9bd37fe944f7efdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0e:14:38:f8:ec:87:86:a8:bd:63:97:0c:61:
b4:7b:7d:04:23:4b:36:9e:fb:43:0f:3b:e3:d3:3d:
3e:5b:a5:5a:51:92:6e:5a:2d:d2:1f:f8:bb:0f:f6:
36:dc:41:ae:97:4f:ac:e0:e3:88:d0:64:3d:af:d8:
4f:40:35:36:a2:8e:b6:5f:63:02:22:6b:1e:ea:34:
a3:ce:c8:f6:59:ae:7d:6e:10:c1:70:9d:d5:30:f7:
7b:b1:42:de:69:c4:d5:52:aa:b3:85:47:31:7a:d1:
da:50:5b:a8:ab:79:ef:7b:a1:c5:6a:04:1d:93:60:
68:19:eb:66:0a:b9:24:83:d5:d5:18:d0:f8:17:79:
97:3f:b8:47:20:b8:1c:0b:cf:6b:8a:0c:91:20:c0:
70:42:e3:fc:43:2d:af:88:c8:24:aa:29:74:85:b0:
11:e9:70:a4:0d:27:3b:12:6a:6d:98:51:e2:0c:64:
29:7d:c8:ea:1a:e8:6d:66:23:2a:96:58:94:a9:e6:
2c:73:84:d1:76:8d:42:5e:97:2f:4e:bd:16:81:30:
90:fa:62:f9:60:e3:16:8c:5b:03:84:bc:81:28:41:
d1:7c:51:25:ac:24:ef:13:d7:2a:33:f8:61:ed:4b:
08:78:a2:4b:cb:30:e0:31:cb:3e:be:07:7d:27:10:
b8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DE:E2:16:71:AD:4D:26:15:1D:FB:F9:BD:37:FE:94:4F:7E:FD:D0
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/7t7iFnGtTSYVHfv5vTf-lE9-_dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.152.0/22
77.47.244.0/22
195.178.144.0/23
195.178.147.0/24
195.178.152.0/22
212.111.200.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c5:1d:c3:29:9b:79:99:2e:51:92:ea:23:08:7d:95:4b:90:
cc:cf:f1:65:0e:ed:7e:47:5a:76:30:ca:9c:97:2c:ed:4d:1f:
11:82:91:01:eb:91:95:14:25:ea:d8:2f:4a:a1:3e:dd:1a:e8:
a0:d8:e3:3d:df:bc:62:2a:4b:f8:99:6d:9a:4e:5d:a3:28:87:
31:7a:b3:6a:aa:59:1c:1f:87:d4:20:f0:a4:a1:e6:90:6f:9d:
4b:a0:9e:17:ca:d7:e8:96:3d:d6:3d:b0:b6:38:2a:4c:83:86:
58:58:96:3f:f6:e0:12:10:d3:eb:ca:bb:66:48:3c:f5:b8:0e:
ee:e2:2e:30:7c:ce:52:70:e7:2b:1e:a3:27:25:27:7c:ff:93:
bd:5d:ba:0d:38:0f:0d:8f:bc:ac:61:d0:fa:62:e4:d0:3d:16:
35:db:c7:da:4c:f6:eb:b8:27:db:b5:db:1e:ec:92:ae:b9:7f:
d9:1c:1f:a4:4d:92:aa:7b:25:12:4d:16:cd:7f:ef:ea:2b:92:
26:1b:eb:f4:a7:a6:4d:50:d6:28:08:c6:3f:31:77:cd:0f:ad:
54:c5:e3:74:de:84:ba:37:d3:5b:c2:05:c4:3d:fe:4c:ce:d6:
c6:9a:b2:b4:e8:af:61:d9:de:58:b7:41:cb:f6:63:7b:07:67:
dc:55:2a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org