Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/E5RSj17SK70UW7aaKZlutgV1Vzc.roa
File: E5RSj17SK70UW7aaKZlutgV1Vzc.roa (raw, json)
Hash identifier: CWLJd9ITGcq23dLuaKUQyFQxpal4ExcyxtrKJwe3zeM=
Subject key identifier: 13:94:52:8F:5E:D2:2B:BD:14:5B:B6:9A:29:99:6E:B6:05:75:57:37
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1D37D03C
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/E5RSj17SK70UW7aaKZlutgV1Vzc.roa
Signing time: Thu 24 Mar 2022 17:17:47 +0000
ROA not before: Thu 24 Mar 2022 17:17:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 195.178.140.0/24 maxlen: 24
195.178.141.0/24 maxlen: 24
195.178.146.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
77.47.212.0/24 maxlen: 24
77.47.210.0/24 maxlen: 24
77.47.211.0/24 maxlen: 24
77.47.213.0/24 maxlen: 24
77.47.240.0/24 maxlen: 24
77.47.241.0/24 maxlen: 24
195.178.129.0/24 maxlen: 24
195.178.128.0/24 maxlen: 24
195.178.130.0/24 maxlen: 24
195.178.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490197052 (0x1d37d03c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 24 17:17:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1394528f5ed22bbd145bb69a29996eb605755737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:3c:c3:ff:e9:4e:49:b4:c1:4c:08:58:b5:
f4:5e:53:83:3f:9a:b7:24:ea:2e:c8:8a:2b:17:01:
ef:0f:d9:1f:10:6e:92:c4:6f:da:f5:fc:d0:e6:37:
48:62:93:72:08:28:c0:ba:93:82:15:20:1d:67:e1:
38:4d:fd:4f:b6:75:ce:ef:8e:92:a7:dc:9e:a3:dd:
c6:6c:2f:fd:d3:a7:5b:0e:4f:49:13:cf:87:72:b5:
6e:39:c9:88:fc:5e:c7:1c:9a:99:74:45:d4:59:1a:
11:96:6d:76:39:3e:f6:23:33:7f:05:5f:72:ca:4e:
51:10:3a:93:d6:0f:69:53:29:02:94:39:06:20:9f:
47:95:df:18:8b:8c:af:ea:9e:e6:d9:f5:61:8c:b5:
58:c7:55:b7:34:93:f8:d3:4a:6d:81:01:0a:a9:04:
65:d0:ff:fc:8e:1f:ca:e1:e3:ee:a3:ed:3d:ec:b2:
05:1d:47:f2:38:2f:d9:25:41:6a:fa:2e:b2:88:ac:
38:fb:80:4b:84:88:9c:3e:88:e5:b6:9b:db:75:44:
a5:01:06:33:71:83:ab:7b:88:8c:16:85:d1:c7:b6:
5f:01:30:63:9c:b6:cb:5c:2d:f4:da:5b:9b:18:08:
6c:36:82:1e:ec:f3:1b:f4:c1:2f:f5:83:2e:40:95:
18:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:94:52:8F:5E:D2:2B:BD:14:5B:B6:9A:29:99:6E:B6:05:75:57:37
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/E5RSj17SK70UW7aaKZlutgV1Vzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.210.0-77.47.213.255
77.47.240.0/23
195.178.128.0/22
195.178.140.0/23
195.178.146.0/23
Signature Algorithm: sha256WithRSAEncryption
41:3a:64:76:6f:90:49:39:d0:a9:83:89:16:13:a5:21:aa:75:
4f:1c:ad:34:cc:fb:09:dd:d1:04:73:19:b9:95:4b:f8:27:c3:
4e:18:f7:6f:31:8f:ae:8f:a4:fe:e7:97:7a:64:fe:b8:f1:00:
9b:0a:1d:1a:35:10:d9:6e:22:7e:d4:b4:a1:89:93:b9:61:b7:
d0:94:fc:20:e3:aa:ab:dd:94:49:44:fb:b7:88:50:5f:fc:de:
de:b9:f2:08:7c:0d:6c:b9:24:1b:d0:8e:04:fd:05:31:81:26:
f3:4b:78:24:20:38:87:98:2a:d4:2c:2a:92:c5:f7:32:a0:7e:
54:40:c4:1e:ee:7a:03:6f:32:58:14:f6:96:21:e4:f5:11:02:
e4:88:76:89:ed:85:3e:75:45:51:c7:f5:38:41:e6:a1:aa:18:
5b:69:3a:81:7a:1f:54:88:01:ec:e9:fe:81:90:33:db:df:b2:
5e:0d:87:f6:be:72:a0:f8:42:e7:00:16:0b:2d:a3:6b:4f:7a:
2e:53:4f:3a:96:ac:c1:47:90:f6:7f:e5:52:fe:a5:78:11:1d:
2b:c9:55:3e:35:5d:a8:e3:16:cf:d2:01:bf:72:70:a1:29:c5:
df:a6:1d:bc:4a:c8:b9:08:1b:49:91:44:b8:5f:3e:f3:70:0c:
97:03:b7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org