Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/8lBsRYc3c6Ne7Di5ltmwyfnetno.roa
File: 8lBsRYc3c6Ne7Di5ltmwyfnetno.roa (raw, json)
Hash identifier: uWEhF69nSvjhHkI0yZJyjni1GtxP1bpeLmqGEuAXtpA=
Subject key identifier: F2:50:6C:45:87:37:73:A3:5E:EC:38:B9:96:D9:B0:C9:F9:DE:B6:7A
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1DD01645
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/8lBsRYc3c6Ne7Di5ltmwyfnetno.roa
Signing time: Tue 03 May 2022 10:58:47 +0000
ROA not before: Tue 03 May 2022 10:58:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 212.111.215.0/24 maxlen: 24
77.47.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500176453 (0x1dd01645)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: May 3 10:58:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f2506c45873773a35eec38b996d9b0c9f9deb67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c7:ad:45:4f:28:44:6d:ac:23:70:0f:b8:65:
8c:08:12:c3:87:91:33:7a:f0:14:3a:66:62:ed:c0:
2d:a4:d0:46:25:e4:c6:7a:a6:7c:78:89:af:9f:5f:
d1:d2:8d:a1:48:88:07:67:e8:29:a8:5b:6a:d9:9a:
07:1e:71:ca:10:85:4c:4d:3e:fc:1b:1c:51:9b:45:
c1:e0:9e:20:a9:38:96:bc:8b:9e:03:9d:90:ee:ee:
18:0c:41:8d:d6:d7:d0:2f:93:b2:2c:d6:31:23:0b:
0c:31:90:ff:67:f7:95:72:35:9d:53:0a:03:c3:58:
11:4c:02:60:a2:29:8a:21:68:af:56:16:ce:1e:d9:
00:89:2e:74:6a:37:c0:3f:ea:e1:06:47:25:2b:4f:
70:66:92:92:a5:33:25:5f:41:8e:d2:7d:66:e5:70:
e6:32:32:4a:d2:33:c7:b0:9e:57:39:31:7b:b8:09:
85:3e:18:80:c1:5e:78:73:d3:e5:33:a0:60:2e:6b:
e0:69:ca:3e:b9:60:15:87:5b:11:44:2e:81:a5:8b:
53:d3:1b:b3:a3:49:b7:40:6e:f2:1e:6e:af:d5:3e:
32:f7:76:f0:00:ff:5b:ce:f2:db:72:52:d6:93:ac:
2b:9d:4a:8a:a1:98:f5:fe:a6:6a:3c:00:b3:cc:c9:
8c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:50:6C:45:87:37:73:A3:5E:EC:38:B9:96:D9:B0:C9:F9:DE:B6:7A
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/8lBsRYc3c6Ne7Di5ltmwyfnetno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.240.0/24
212.111.215.0/24
Signature Algorithm: sha256WithRSAEncryption
03:3b:c7:61:ae:8b:db:87:28:0a:99:44:ff:35:04:a3:52:63:
83:97:b8:12:7f:04:e1:b8:8a:97:e9:ed:d4:78:08:a0:68:45:
21:f0:92:67:8a:02:46:e6:b9:54:57:ad:59:d2:1e:01:97:44:
23:ff:6c:ae:62:f1:03:9f:01:a2:f8:46:69:c1:1c:65:05:15:
2c:06:87:73:a6:c4:1a:5e:7b:f9:40:1a:d5:98:c7:8e:fd:c8:
99:7b:af:ae:b1:8e:47:d1:8e:20:12:3b:ed:ff:c1:d1:e0:02:
d4:d3:05:7c:6c:61:30:92:3a:eb:ed:6a:8e:b5:1a:80:33:23:
a3:c0:ac:d8:d3:79:b8:e8:c9:9d:80:f4:ad:24:e1:ec:26:a4:
6d:35:96:a4:09:02:b0:83:c8:c8:7b:d9:33:cd:a6:4a:52:eb:
ba:2c:7d:86:80:24:40:fa:d0:cb:4e:1b:da:34:ae:8a:86:fe:
88:ab:2d:bc:4e:36:f3:80:74:50:36:d6:c7:3c:8f:05:02:1d:
8c:f4:0a:58:da:77:6b:98:62:36:c3:8d:e4:d7:49:08:ed:af:
e5:7c:da:2a:fe:7d:bd:29:ce:9c:af:90:ec:35:29:37:e2:b4:
a2:27:8c:7b:99:ba:ed:71:ca:26:22:fd:40:bf:e4:05:4f:6a:
9d:55:1e:9e
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEHdAWRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTQyNjMyNWFjYjhjZTYwOWE2ODZmYTY1NWIwNTg5Njg4MDliMzQ2MB4XDTIyMDUw
MzEwNTg0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjI1MDZjNDU4NzM3
NzNhMzVlZWMzOGI5OTZkOWIwYzlmOWRlYjY3YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOfHrUVPKERtrCNwD7hljAgSw4eRM3rwFDpmYu3ALaTQRiXk
xnqmfHiJr59f0dKNoUiIB2foKahbatmaBx5xyhCFTE0+/BscUZtFweCeIKk4lryL
ngOdkO7uGAxBjdbX0C+TsizWMSMLDDGQ/2f3lXI1nVMKA8NYEUwCYKIpiiFor1YW
zh7ZAIkudGo3wD/q4QZHJStPcGaSkqUzJV9BjtJ9ZuVw5jIyStIzx7CeVzkxe7gJ
hT4YgMFeeHPT5TOgYC5r4GnKPrlgFYdbEUQugaWLU9Mbs6NJt0Bu8h5ur9U+Mvd2
8AD/W87y23JS1pOsK51KiqGY9f6majwAs8zJjCkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTyUGxFhzdzo17sOLmW2bDJ+d62ejAfBgNVHSMEGDAWgBQZQmMlrLjOYJpo
b6ZVsFiWiAmzRjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dVSmpKYXk0em1DYWFHLW1WYkJZbG9nSnMwWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvOGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8x
LzhsQnNSWWMzYzZOZTdEaTVsdG13eWZuZXRuby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
OGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8xL0dVSmpKYXk0em1D
YWFHLW1WYkJZbG9nSnMwWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAE0v8AMEANRv1zANBgkqhkiG9w0B
AQsFAAOCAQEAAzvHYa6L24coCplE/zUEo1Jjg5e4En8E4biKl+nt1HgIoGhFIfCS
Z4oCRua5VFetWdIeAZdEI/9srmLxA58BovhGacEcZQUVLAaHc6bEGl57+UAa1ZjH
jv3ImXuvrrGOR9GOIBI77f/B0eAC1NMFfGxhMJI66+1qjrUagDMjo8Cs2NN5uOjJ
nYD0rSTh7CakbTWWpAkCsIPIyHvZM82mSlLruix9hoAkQPrQy04b2jSuiob+iKst
vE4284B0UDbWxzyPBQIdjPQKWNp3a5hiNsON5NdJCO2v5XzaKv59vSnOnK+Q7DUp
N+K0oieMe5m67XHKJiL9QL/kBU9qnVUeng==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org