Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/KNV2WnLKJ1_1__7wdrHp3P2uG-w.roa
File: KNV2WnLKJ1_1__7wdrHp3P2uG-w.roa (raw, json)
Hash identifier: YyWKGGv8EOMmfr0o1HmVR8IS4//FtSFmzw/7XBaTQ3k=
Subject key identifier: 28:D5:76:5A:72:CA:27:5F:F5:FF:FE:F0:76:B1:E9:DC:FD:AE:1B:EC
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1CDC2BD4
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/KNV2WnLKJ1_1__7wdrHp3P2uG-w.roa
Signing time: Mon 21 Feb 2022 13:51:01 +0000
ROA not before: Mon 21 Feb 2022 13:51:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.244.0/22 maxlen: 22
195.178.128.0/22 maxlen: 24
77.47.148.0/22 maxlen: 24
77.47.152.0/24 maxlen: 24
195.178.144.0/21 maxlen: 21
77.47.154.0/24 maxlen: 24
77.47.153.0/24 maxlen: 24
77.47.155.0/24 maxlen: 24
77.47.156.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484191188 (0x1cdc2bd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 21 13:51:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28d5765a72ca275ff5fffef076b1e9dcfdae1bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:aa:ed:63:48:a7:44:f7:7c:50:28:1b:33:
4e:c6:b9:0b:78:82:f7:e6:e0:2f:38:2b:96:07:b7:
8a:d5:d0:cf:fa:e8:e8:e3:63:e0:c0:17:0c:63:46:
47:54:ee:84:ff:d3:59:6f:02:5f:df:0c:e7:91:80:
d8:18:da:e4:27:07:49:60:b1:0c:cc:d4:af:e7:3c:
81:b8:5b:c3:d5:db:17:ab:1f:91:87:3c:5c:5c:32:
40:be:55:c1:95:62:af:3d:92:20:f1:9d:e4:42:dc:
76:04:48:ca:94:25:70:1a:e1:15:63:15:b0:9f:b2:
45:64:fb:0e:9b:eb:e5:39:b1:ff:70:57:d2:5e:9e:
ec:56:fa:66:10:dd:ee:8a:49:09:8d:7d:43:31:32:
ae:ab:c6:77:a0:af:df:50:03:7b:e3:4b:31:0c:f2:
1c:0f:13:20:69:e7:3e:72:31:a7:fd:ac:6a:d1:b4:
c7:f9:78:12:e3:e5:55:2d:b0:eb:3f:15:b1:36:11:
dc:68:a4:d7:11:d7:41:b8:85:c8:7c:26:76:a2:62:
52:ca:91:d6:63:53:23:66:7c:13:4a:16:72:e1:c4:
80:c6:9f:0b:d8:33:87:71:cd:77:96:ef:00:d0:ef:
d5:92:3b:47:62:b4:42:fc:a6:18:33:98:5a:a7:39:
75:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D5:76:5A:72:CA:27:5F:F5:FF:FE:F0:76:B1:E9:DC:FD:AE:1B:EC
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/KNV2WnLKJ1_1__7wdrHp3P2uG-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.148.0-77.47.159.255
77.47.244.0/22
185.143.56.0/22
195.178.128.0/22
195.178.144.0-195.178.155.255
Signature Algorithm: sha256WithRSAEncryption
90:64:ee:56:78:0e:b4:95:a6:51:3d:2b:ed:eb:c4:b1:d4:e1:
da:50:26:8d:ff:0e:de:cd:1d:9e:ea:10:af:f2:58:ee:ce:e2:
7b:e5:66:2f:d5:86:78:03:c4:7d:08:c8:b1:67:7d:28:c3:61:
67:03:d4:88:bd:8e:93:cd:1f:f9:8a:8b:2a:49:a1:85:f7:87:
e2:16:25:d9:52:09:ac:93:7e:2c:c6:c8:91:e4:61:1c:42:98:
b0:5c:c4:a8:5d:e8:54:00:82:d5:ad:9f:e6:ec:eb:f5:fd:ba:
61:5e:37:ff:6f:7b:e3:9c:32:0f:4a:1c:41:7f:7a:c3:9b:61:
74:53:ec:02:58:c6:d4:a8:5a:3e:be:32:c7:f3:17:f6:43:fc:
dd:c6:fd:e4:82:73:19:03:77:98:18:86:f1:9d:db:59:96:45:
be:9e:e1:81:2f:16:cf:db:96:1b:f2:74:03:06:82:c8:4e:83:
0a:e4:6b:b9:44:dd:08:f0:e9:92:26:45:e9:69:96:ae:17:ed:
b9:d7:00:b5:ed:15:27:8e:e7:c6:2d:c6:76:b7:c1:32:cd:d0:
3a:33:50:15:ee:fb:6e:77:7d:40:a5:b6:44:b9:00:45:73:e0:
db:48:aa:23:59:44:e4:66:a1:b3:84:63:dc:1e:fa:ab:5d:45:
85:4c:d6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org