Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/9YNw__N7YDN003U1meiINbTW7ks.roa
File: 9YNw__N7YDN003U1meiINbTW7ks.roa (raw, json)
Hash identifier: fcLSwD/xVWe1Q7pb+xq6q+qRY7C4hRPAYjCGW6vmMFg=
Subject key identifier: F5:83:70:FF:F3:7B:60:33:74:D3:75:35:99:E8:88:35:B4:D6:EE:4B
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0182646B3397C1FF88962D7F40AFF4970BDB
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/9YNw__N7YDN003U1meiINbTW7ks.roa
Signing time: Wed 03 Aug 2022 15:55:23 +0000
ROA not before: Wed 03 Aug 2022 15:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 212.111.215.0/24 maxlen: 24
77.47.152.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:64:6b:33:97:c1:ff:88:96:2d:7f:40:af:f4:97:0b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 3 15:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f58370fff37b603374d3753599e88835b4d6ee4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4b:63:ce:b4:3c:01:9b:1b:92:96:b2:ff:3b:
21:a5:b6:8f:cd:4b:4f:1d:87:16:3e:78:29:64:db:
31:4e:5a:68:41:c6:52:10:83:75:10:6e:61:09:d9:
20:b3:39:c9:6e:f3:80:ea:df:a6:fd:be:24:04:e3:
40:0a:d9:1d:8b:a5:7b:ea:3f:bd:a3:b8:38:04:68:
bb:a2:2a:04:0c:54:4c:1f:bd:25:af:7d:49:41:8d:
0b:91:2c:5a:66:14:08:8c:9e:58:b9:05:36:6c:ee:
6d:4e:7e:cd:97:e6:d2:86:7a:cd:5d:13:8c:45:35:
3c:61:16:d5:9a:19:89:aa:eb:62:0f:77:b4:85:d0:
22:b6:78:1e:41:fe:2c:46:25:f0:56:dd:58:68:66:
d8:96:8d:fc:ef:b6:08:cd:c2:13:39:90:3a:5e:08:
0f:71:47:5f:22:05:b3:ec:bb:f5:e5:44:c5:f0:9c:
80:70:9b:40:d5:30:91:09:62:54:49:96:09:09:7a:
2a:6b:bb:06:b8:52:05:07:a7:73:32:90:86:f2:5d:
42:f1:ff:c5:8c:67:c7:88:17:ed:64:68:53:02:50:
9c:51:bb:26:26:65:53:52:9a:96:a9:ea:2a:7e:ff:
96:46:a9:a5:03:fd:28:48:9f:fd:8a:14:66:d2:a8:
99:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:83:70:FF:F3:7B:60:33:74:D3:75:35:99:E8:88:35:B4:D6:EE:4B
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/9YNw__N7YDN003U1meiINbTW7ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.152.0/22
212.111.215.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:56:7a:21:4d:43:a6:41:14:36:d9:d6:4b:70:9d:61:e6:c7:
21:4c:da:0e:5c:55:2c:d0:24:95:e1:a1:67:17:3b:a7:4a:21:
41:0e:40:c9:08:3f:dc:cb:0d:4a:aa:6a:99:58:03:7b:b1:54:
60:e6:0c:ed:f7:fe:4b:c0:b8:9e:31:c4:b2:3e:70:55:91:ed:
2b:21:15:5d:05:73:5f:3b:01:ac:b8:17:b4:d3:8a:b3:19:5e:
44:24:bd:6b:45:9a:91:e1:e2:5b:0c:67:f7:ec:79:ae:75:51:
c1:e1:26:ce:60:59:ef:16:87:57:0b:37:ae:43:c6:4c:88:89:
de:48:02:d3:98:3c:b3:78:e7:8e:dd:8e:ba:f8:fc:da:ac:0f:
d4:68:a0:a8:cb:dd:f6:42:6a:a2:9f:bd:f8:24:d0:32:5e:27:
2f:57:42:94:63:cb:d6:d6:43:82:69:41:35:2c:00:87:f2:9c:
bd:0c:4a:5a:33:9f:08:b7:b8:78:89:b0:77:23:15:55:61:aa:
04:84:8c:26:da:2b:7e:9c:2f:24:7c:c1:03:37:62:90:ae:53:
a2:1f:5c:6e:20:9e:4b:3d:1a:e0:53:65:32:7a:9e:6e:87:af:
0b:b7:61:09:96:3d:be:9d:db:a9:7a:7c:eb:2e:8e:33:c1:31:
a2:fa:69:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org