Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/EhRxRD5yc_BYSWyUWmP-XLUooAM.roa
File: EhRxRD5yc_BYSWyUWmP-XLUooAM.roa (raw, json)
Hash identifier: 37iI1d3NzP5QVzA0Uiee/slRo1iQJVzI3LolgSweL28=
Subject key identifier: 12:14:71:44:3E:72:73:F0:58:49:6C:94:5A:63:FE:5C:B5:28:A0:03
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1C43375C
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/EhRxRD5yc_BYSWyUWmP-XLUooAM.roa
Signing time: Sat 01 Jan 2022 07:55:41 +0000
ROA not before: Sat 01 Jan 2022 07:55:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208747
IP address blocks: 77.47.248.0/22 maxlen: 24
77.47.248.0/21 maxlen: 24
77.47.143.0/24 maxlen: 24
77.47.178.0/24 maxlen: 24
77.47.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474167132 (0x1c43375c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 07:55:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=121471443e7273f058496c945a63fe5cb528a003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:db:f6:17:82:7e:c4:7b:98:18:a0:64:55:
7f:69:fa:0a:84:60:65:ce:3c:2c:34:b2:c3:c7:9c:
38:c1:bd:86:98:8c:f0:e1:8d:94:23:4a:8a:aa:15:
15:9e:67:15:bd:93:f4:cf:88:15:36:f2:14:78:ff:
70:55:b7:89:ce:65:22:d1:b9:63:b5:2d:5e:91:e6:
56:34:18:86:19:d2:ad:73:4c:90:a0:e3:76:a6:dd:
40:67:d1:5c:15:38:03:6f:43:81:a6:1e:7e:76:4e:
63:08:6a:e2:6e:f0:8b:83:e6:ab:d8:01:27:ef:df:
bb:86:b1:96:55:9e:a0:f6:62:4f:7a:04:de:8e:11:
d4:cc:66:ef:1c:60:e6:48:fc:fa:d1:e7:71:92:03:
c4:82:41:b9:19:e5:08:33:c0:ef:ec:09:9c:23:0e:
1a:af:3d:02:8f:d6:be:e4:18:e3:44:1d:f4:10:90:
ee:31:d8:58:c5:46:a7:fe:dc:47:7a:e5:f5:62:96:
56:30:c7:95:97:21:78:17:f5:45:fc:77:08:b6:98:
7a:87:b5:1a:cd:e6:83:1f:35:c7:22:bf:71:5c:c3:
c0:33:0d:c7:7b:47:07:10:dc:43:1e:e3:ee:3d:93:
21:70:61:d7:49:cf:e8:e0:1c:a3:5b:2e:ef:dc:ad:
2d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:14:71:44:3E:72:73:F0:58:49:6C:94:5A:63:FE:5C:B5:28:A0:03
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/EhRxRD5yc_BYSWyUWmP-XLUooAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.178.0/23
77.47.248.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:2b:2f:07:ab:2e:bf:e8:dd:89:3c:60:f7:b6:dc:68:ed:e9:
92:fc:d6:79:fb:79:5d:ae:1e:63:b6:f7:df:eb:2c:35:2b:50:
75:f3:87:d7:f7:57:bf:97:11:72:e0:70:f6:c1:17:7a:1b:67:
08:a7:1f:38:1d:52:4f:15:57:96:0a:5c:27:10:14:3b:c4:43:
4c:b3:5c:ea:00:3f:4b:ce:05:49:c1:8f:27:f4:1c:95:e2:a4:
04:04:6d:05:74:6a:7d:5f:ee:75:5a:0a:5e:eb:6c:26:c7:72:
2e:33:05:74:81:66:e6:0f:eb:7c:7a:8f:81:23:ec:a2:ad:33:
db:d8:bc:f3:1e:60:d5:34:95:ba:50:8a:75:e6:9d:3a:2f:e5:
aa:38:d4:3a:fb:86:02:69:a8:ec:5e:99:30:b3:32:f5:53:34:
41:a2:92:2b:dc:1e:73:b9:e8:c1:04:70:d1:d5:16:78:30:b5:
b4:9f:0c:89:32:1c:0e:05:29:d7:e0:64:85:3a:54:e1:00:f1:
1a:4e:35:bc:0c:4b:26:31:ae:3d:a9:12:d1:00:af:5c:f9:bc:
44:e6:c6:26:a5:c8:cc:1f:ad:db:75:4d:ef:cd:c6:18:4a:59:
be:11:6c:b4:e7:06:d7:33:ea:67:61:43:ca:4d:42:a8:41:30:
d3:39:ec:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org