Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GlognPlCfKAxDbmYZ9ORSTRWRK8.roa
File: GlognPlCfKAxDbmYZ9ORSTRWRK8.roa (raw, json)
Hash identifier: w4Mvl8ZFLvwb6qVFP1Ut/b39aImBH0j7T/8kzlyzmrY=
Subject key identifier: 1A:5A:20:9C:F9:42:7C:A0:31:0D:B9:98:67:D3:91:49:34:56:44:AF
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0184EE8F52B8F2D485BE328B47DF03839FB8
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GlognPlCfKAxDbmYZ9ORSTRWRK8.roa
Signing time: Wed 07 Dec 2022 21:48:00 +0000
ROA not before: Wed 07 Dec 2022 21:48:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 195.178.128.0/22 maxlen: 24
77.47.252.0/22 maxlen: 24
77.47.248.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ee:8f:52:b8:f2:d4:85:be:32:8b:47:df:03:83:9f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Dec 7 21:48:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a5a209cf9427ca0310db99867d39149345644af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:41:cd:81:53:02:9c:3c:09:b9:7f:57:4d:
36:a6:46:2e:cc:d3:7e:1e:54:7c:cf:91:e9:e9:08:
17:8b:1d:6e:af:6d:4b:4e:3f:55:8b:4e:0d:43:a4:
7b:e4:e0:2c:61:f6:a0:1d:fb:f5:53:90:e3:27:63:
ba:65:2e:f9:f5:7d:97:b3:ae:db:db:3c:85:7a:bd:
24:c8:b2:09:d1:d8:4d:14:58:37:4d:e5:63:97:71:
7a:d5:ae:83:bc:d1:f2:1a:84:2c:ca:2f:39:0c:41:
8f:ca:ec:db:ce:dd:63:84:27:09:5b:a1:5d:64:65:
50:ba:c0:da:29:ba:8c:77:88:b4:96:c9:25:79:14:
a3:1b:0b:6c:13:c8:de:95:a2:3f:3b:34:31:3f:66:
7e:fb:5e:a4:99:21:0c:17:7f:19:8c:36:90:5f:8a:
ae:a8:28:e1:a3:7f:0b:3c:33:b3:58:42:92:60:f3:
e5:8b:ff:d4:dd:b6:53:8a:04:a6:49:2c:3e:7e:f5:
c6:81:92:fa:9c:37:10:a4:bd:eb:84:51:07:a6:58:
0b:61:b2:a6:01:db:83:d6:6f:70:85:cb:f3:44:56:
9c:40:84:f8:f5:14:cb:1f:b5:3c:43:da:cc:15:39:
81:14:45:19:d0:57:82:82:88:78:17:e4:93:da:ee:
69:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5A:20:9C:F9:42:7C:A0:31:0D:B9:98:67:D3:91:49:34:56:44:AF
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GlognPlCfKAxDbmYZ9ORSTRWRK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.248.0/21
195.178.128.0/22
Signature Algorithm: sha256WithRSAEncryption
33:9e:ad:55:7b:25:73:ea:01:96:a2:c7:fa:4f:50:0c:9d:1f:
01:bc:58:a1:ed:b5:de:6f:65:ed:98:2b:ae:37:cc:fb:46:3c:
6b:45:43:68:2c:c9:26:20:b7:31:a0:10:ce:55:cd:c5:48:51:
90:3e:ab:f2:72:70:ac:de:9a:86:fa:1a:7a:0d:db:29:e9:b7:
6c:f5:3d:6f:4e:fb:62:fe:80:9e:f3:8e:dd:4f:0e:d6:5b:9a:
2d:4d:d2:91:c6:20:24:cf:92:43:2a:40:25:5b:81:a1:df:9f:
25:24:35:8e:63:38:56:6f:4b:f1:21:33:39:39:f4:71:53:ee:
90:4f:57:60:40:9b:81:3f:3a:f8:90:1e:d7:0e:24:1b:88:01:
f5:30:de:de:9d:13:ba:68:9b:09:15:9f:6a:53:bf:15:30:f0:
59:80:01:42:49:fb:44:8d:e5:d2:5f:64:10:ea:a6:cc:6a:54:
9d:43:d6:fa:d9:1c:31:9b:d9:46:82:67:a0:90:0f:bf:52:a2:
c0:fa:58:95:0e:1e:4c:8f:88:78:78:2d:aa:56:82:54:a2:5f:
4d:23:1a:82:e0:97:45:7d:8a:a3:3e:58:46:8f:32:33:9a:dd:
1c:11:a4:11:1a:01:6a:fc:31:66:d5:16:fa:bf:c3:11:9f:5b:
e2:c9:23:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org