Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/DKZq3952C-ijW7FnnyMTwq8i0qA.roa
File: DKZq3952C-ijW7FnnyMTwq8i0qA.roa (raw, json)
Hash identifier: j8sr1CteyBiFP5pDa+os5oEq/oo0pFvp6x25xpQcQvU=
Subject key identifier: 0C:A6:6A:DF:DE:76:0B:E8:A3:5B:B1:67:9F:23:13:C2:AF:22:D2:A0
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01821CDB7FF3DA2E57B9E2EBDBBC880FA88F
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/DKZq3952C-ijW7FnnyMTwq8i0qA.roa
Signing time: Wed 20 Jul 2022 18:25:23 +0000
ROA not before: Wed 20 Jul 2022 18:25:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204197
IP address blocks: 77.47.143.0/24 maxlen: 24
195.178.132.0/22 maxlen: 24
77.47.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1c:db:7f:f3:da:2e:57:b9:e2:eb:db:bc:88:0f:a8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 20 18:25:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ca66adfde760be8a35bb1679f2313c2af22d2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:ca:c9:83:1d:49:2d:c2:5c:ba:b0:9a:6f:
cd:59:83:cc:47:95:df:7d:96:02:75:d8:2b:ff:8c:
08:1a:c3:f9:ff:db:3c:44:fc:1b:39:ab:52:22:89:
dd:b1:0a:a1:d0:4c:55:1c:4d:98:84:ef:8e:5b:1a:
c8:98:72:fc:78:14:29:61:0d:3c:f7:b6:3d:61:cc:
3c:32:71:7a:ae:eb:8c:35:06:0e:7d:bc:b9:ae:8b:
98:92:69:28:39:32:7f:c7:2e:16:7a:7f:b3:d5:ec:
d5:54:ec:70:c5:dc:de:b8:b3:71:26:9e:7f:84:01:
28:3c:76:0e:f5:48:94:56:36:5f:ac:1c:c7:eb:be:
b2:6d:53:04:de:58:96:a6:9b:39:65:bf:d2:90:8b:
a0:12:8c:ff:6f:c8:66:65:86:4b:54:60:bc:b8:5e:
03:d5:09:62:95:a3:88:b4:f6:38:18:d2:01:50:00:
43:09:f2:b6:ab:45:24:6d:4f:16:ca:fe:90:c8:42:
72:a9:2a:36:bb:f4:10:34:64:54:d7:74:99:cf:fd:
53:d9:1a:fb:b9:c1:99:49:11:0c:7e:e5:e1:cf:ee:
ac:a2:49:15:78:4e:c4:22:1c:29:46:44:eb:5a:c6:
e6:b8:e2:58:9c:ed:ff:91:6f:37:b2:2e:35:1a:5f:
6c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A6:6A:DF:DE:76:0B:E8:A3:5B:B1:67:9F:23:13:C2:AF:22:D2:A0
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/DKZq3952C-ijW7FnnyMTwq8i0qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.180.0/22
195.178.132.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:dc:72:a0:e4:0d:f2:9d:71:80:95:db:64:31:2f:b0:50:b9:
e8:83:ac:0e:d7:be:c7:f8:77:98:a5:f8:a4:22:e3:84:99:8e:
11:d5:16:54:6b:56:7e:2c:90:7b:9f:6c:73:bf:ba:28:0a:02:
51:c5:f4:1d:a4:50:f5:82:d5:69:f7:0a:33:96:67:ba:72:b0:
05:6a:8f:36:06:6f:95:8f:6f:31:78:9e:f4:02:63:cc:f0:86:
16:3d:a7:ee:ee:03:87:50:60:9f:3a:78:2f:f3:ac:2b:bd:00:
34:3a:15:29:ba:7f:63:e3:f5:0e:87:22:f0:0c:ca:ec:83:74:
9e:a0:41:a5:e6:10:1f:bc:32:0b:0a:46:d8:69:f7:da:76:dc:
07:4b:e9:91:57:29:90:a4:ef:e0:77:ca:74:f8:1a:4e:73:88:
09:90:b3:7a:cc:a7:a1:88:39:7d:5d:e5:fc:2f:6b:20:00:fd:
9c:10:aa:f9:9f:03:f7:9e:45:25:bb:1c:7a:7f:a6:60:fd:ad:
4f:b2:4a:fa:d7:70:4b:cc:15:b5:d3:73:85:51:5b:25:60:0c:
5f:d6:af:14:91:2a:ae:c5:84:c2:08:38:6b:1b:1f:50:ae:69:
80:3e:ec:26:09:80:f3:9c:71:c3:7a:4e:05:cb:ea:cc:9b:22:
7d:d6:7c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org