Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Csq12Xjv8kfUdospc1pSY-gWkaM.roa
File: Csq12Xjv8kfUdospc1pSY-gWkaM.roa (raw, json)
Hash identifier: ZZC5pvqxawDjOuk7uinwnLSW947Llfkb6SFFkuTdcVo=
Subject key identifier: 0A:CA:B5:D9:78:EF:F2:47:D4:76:8B:29:73:5A:52:63:E8:16:91:A3
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1E77840F
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Csq12Xjv8kfUdospc1pSY-gWkaM.roa
Signing time: Fri 01 Jul 2022 10:53:25 +0000
ROA not before: Fri 01 Jul 2022 10:53:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62456
IP address blocks: 77.47.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511149071 (0x1e77840f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 1 10:53:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0acab5d978eff247d4768b29735a5263e81691a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:90:76:71:42:c6:05:d1:9a:5e:6d:df:ca:
3e:f6:17:c1:7c:d7:fc:cd:cf:0b:9d:a4:9c:0e:ec:
02:7a:fc:98:8f:c1:d8:dd:d7:a8:6b:51:7a:8c:fd:
89:90:67:3c:40:48:dc:8f:08:dd:6b:6b:80:bd:33:
a2:e5:41:f5:42:7e:2d:b2:5f:b4:9b:16:44:66:8e:
80:54:86:30:ee:6c:cc:6f:60:28:56:b2:68:98:c1:
a8:f5:6a:2a:49:41:de:76:b1:0e:c5:8f:23:ee:5e:
30:1a:3c:50:79:66:77:9a:26:39:b2:1b:6e:a6:dd:
cf:9f:3f:60:8f:19:5a:2b:88:34:af:c0:c3:11:22:
06:7f:87:f7:63:43:4a:b3:ea:48:af:1e:c2:86:4a:
cd:9f:a4:cf:f5:0f:3c:23:e0:9a:6d:b7:0b:3d:90:
57:b6:06:0c:ca:07:21:f6:bc:cb:7d:b9:90:22:c8:
1f:4b:31:d3:c9:a9:58:10:77:bd:a7:de:38:95:1b:
55:b3:97:73:b0:c7:7c:b0:36:08:6a:2f:ac:33:a2:
b2:b7:cb:c8:53:dd:88:af:dc:2a:0d:d8:4d:2c:70:
d6:dc:cb:43:fb:55:7f:61:20:37:c3:df:cd:05:40:
86:b7:cf:fc:08:59:4f:31:1e:cc:0a:d2:8e:15:bb:
eb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CA:B5:D9:78:EF:F2:47:D4:76:8B:29:73:5A:52:63:E8:16:91:A3
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Csq12Xjv8kfUdospc1pSY-gWkaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:c6:c1:83:bb:eb:8a:68:e1:88:de:13:03:1a:85:8c:a2:38:
c0:c9:0c:0b:cf:16:00:74:40:62:2f:70:fc:76:e8:ce:f5:e1:
52:80:c0:73:2c:66:0b:10:1e:d0:2f:88:4b:dc:bf:d0:f3:c7:
82:d0:59:c4:26:c4:22:cb:e5:bd:b7:ed:b3:0f:65:c3:e0:ab:
01:ab:18:f2:9b:f8:a1:f0:1a:2a:2b:6f:34:44:8b:c0:13:a6:
bc:18:0c:18:f4:58:23:34:52:af:f7:0e:bb:b7:14:78:1b:61:
94:84:43:b8:cf:04:9c:bc:0f:15:30:68:30:e7:e0:94:c4:c2:
e8:59:5d:7d:df:f3:73:72:0e:90:9a:4e:99:7a:82:f2:ca:a6:
39:46:a2:f1:1a:78:ba:63:a4:0b:51:86:fd:4f:54:2e:d4:8b:
dd:75:06:1c:c0:6d:8b:e2:e1:6d:bd:84:60:f5:ea:ad:6a:12:
f4:28:dc:21:e4:e8:c7:15:bb:0a:eb:8c:4a:a0:a7:6e:b3:a8:
18:3b:5f:ec:83:c8:ab:fe:2b:25:8b:d7:63:77:e8:4a:e9:07:
54:ab:d0:f1:2b:6e:42:55:67:dd:5a:ab:b7:55:04:9a:35:91:
1b:57:b7:32:01:1c:92:1c:69:9f:43:ac:3c:ff:78:c6:37:9d:
8d:ae:ed:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org