Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/JLF9kVPhU85AKJjSg1OXGxKmYs0.roa
File: JLF9kVPhU85AKJjSg1OXGxKmYs0.roa (raw, json)
Hash identifier: hb/K2CL/1SLaF5FehXXaJLDrbjsTghLeK3EXcJpZrXQ=
Subject key identifier: 24:B1:7D:91:53:E1:53:CE:40:28:98:D2:83:53:97:1B:12:A6:62:CD
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0184C7F8CFEF9F5C87787E6CAE97F0BDAF8A
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/JLF9kVPhU85AKJjSg1OXGxKmYs0.roa
Signing time: Wed 30 Nov 2022 09:58:02 +0000
ROA not before: Wed 30 Nov 2022 09:58:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204197
IP address blocks: 77.47.210.0/23 maxlen: 24
77.47.178.0/24 maxlen: 24
77.47.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:f8:cf:ef:9f:5c:87:78:7e:6c:ae:97:f0:bd:af:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Nov 30 09:58:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24b17d9153e153ce402898d28353971b12a662cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:f4:a9:fd:65:c5:e0:67:a7:c6:7a:6f:c4:
90:2c:79:a8:ed:c0:33:dc:6d:4b:c4:11:a3:3c:2c:
3d:f6:48:6f:14:97:ce:48:d5:79:e6:c0:38:6b:4e:
6b:58:e4:82:43:10:a7:e0:8b:11:df:01:96:f4:f4:
2c:f6:83:c7:9d:3e:7d:be:d1:72:1b:ed:8a:b7:36:
7f:e3:2e:8e:bd:03:a5:24:42:07:c9:ef:93:93:fc:
87:d7:55:e6:52:8b:cf:46:75:08:c7:d5:6b:b1:ff:
a5:7e:2b:bb:ac:36:31:71:65:ef:06:8d:bd:e6:1e:
2a:c3:04:a0:4d:92:e7:28:56:16:2a:3b:0d:ae:4b:
f5:c7:3e:c9:65:e2:94:d2:5e:b8:91:ae:99:dc:06:
83:01:fc:dc:d3:b6:65:4d:3a:ca:68:de:e9:5d:a9:
51:0a:7f:f5:83:ae:af:55:d6:ef:ef:7c:be:99:1a:
d7:d4:34:3a:71:50:23:44:97:f2:bc:b7:af:20:48:
5e:52:04:d6:17:ea:b5:18:a6:f7:e8:53:26:39:54:
c4:08:7c:81:f2:a5:95:23:62:10:7f:ba:d0:b4:7c:
0b:80:b8:50:1f:4a:fc:a4:65:0c:1f:86:16:ca:7e:
4f:6b:3b:53:11:ed:87:6f:5a:f0:ec:56:1e:1f:ee:
69:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B1:7D:91:53:E1:53:CE:40:28:98:D2:83:53:97:1B:12:A6:62:CD
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/JLF9kVPhU85AKJjSg1OXGxKmYs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.178.0/23
77.47.210.0/23
Signature Algorithm: sha256WithRSAEncryption
10:11:2b:2b:f2:85:f3:09:6f:c7:cd:62:f6:d8:98:ca:8a:97:
ce:59:ce:5e:49:d9:6f:ec:16:e2:e7:19:18:a6:bd:32:3c:dd:
f6:36:72:64:96:24:f1:a4:49:6d:bb:42:a9:d2:e7:79:03:02:
d3:f3:f5:7b:47:f8:bf:51:ef:22:07:b7:b6:44:3d:d7:bb:b3:
bc:e7:04:d6:3c:e7:18:68:ad:6f:73:fb:0c:8a:f1:f0:a9:c9:
3a:81:35:b5:fc:89:6a:ad:66:16:5e:02:4e:2e:54:04:c3:d7:
e6:45:be:7b:51:cc:af:e6:e6:f2:05:32:ae:ce:9e:c9:82:50:
bd:03:ec:f3:40:5f:95:97:92:ad:b3:e3:39:bc:90:2c:87:65:
e2:33:39:10:a9:8d:59:61:eb:dd:41:db:e7:41:71:91:82:25:
b5:4f:f4:15:1c:50:2b:38:0c:63:b0:46:c2:c5:a6:bc:ba:12:
5d:8c:b2:69:c3:52:c3:a8:a5:ef:c8:4a:8f:b6:a3:d4:62:95:
45:b1:51:9d:6c:ef:31:cb:72:d2:fd:2e:6e:8d:31:dd:83:b0:
4c:f8:8a:0c:f1:bd:35:d6:c3:14:6e:74:f1:12:02:97:91:fe:
80:3d:38:98:05:e2:bc:e6:a5:f7:ba:22:c5:40:61:43:4b:a4:
b4:87:e5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org