Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/LGG3BrZsvqGr7Hjzo457WeDtzG0.roa
File: LGG3BrZsvqGr7Hjzo457WeDtzG0.roa (raw, json)
Hash identifier: 5Dcfmg7669EPylIwzzO3zugV9mXqk+WvgrY96pDxnzE=
Subject key identifier: 2C:61:B7:06:B6:6C:BE:A1:AB:EC:78:F3:A3:8E:7B:59:E0:ED:CC:6D
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1E26D2EF
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/LGG3BrZsvqGr7Hjzo457WeDtzG0.roa
Signing time: Wed 01 Jun 2022 09:41:27 +0000
ROA not before: Wed 01 Jun 2022 09:41:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 212.111.200.0/24 maxlen: 24
77.47.157.0/24 maxlen: 24
77.47.156.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
77.47.178.0/24 maxlen: 24
77.47.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505860847 (0x1e26d2ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jun 1 09:41:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c61b706b66cbea1abec78f3a38e7b59e0edcc6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:1b:2d:b1:4c:36:b1:36:e1:87:45:6d:4d:
03:cb:bc:83:ab:e7:ae:2a:d4:0a:a9:4d:0e:b7:23:
04:32:f9:b2:26:7e:02:ad:dc:af:3f:46:fe:e0:ef:
e7:35:93:9c:82:14:74:04:dc:5f:7b:bd:f3:db:0a:
52:fb:85:21:0b:10:23:91:ce:45:da:cf:dc:5c:7d:
fc:de:3e:9e:c0:1c:ba:af:a2:7f:f0:18:ee:52:0a:
6d:db:f7:5a:42:75:34:04:ce:ad:ef:27:5a:67:8a:
3f:d4:07:a8:0e:d9:5e:1a:55:80:ad:23:fe:75:2a:
8f:28:55:73:91:ad:58:0d:9a:db:21:5d:28:28:cc:
74:ac:b7:ca:8e:e7:f7:61:63:95:88:78:a4:05:b4:
a1:84:b0:4a:70:f8:97:e2:a6:a9:7a:c2:11:0d:f7:
ee:df:53:2a:f5:fe:d8:cb:93:d2:ce:3f:37:79:01:
77:b4:ee:60:97:ba:a6:e0:55:d9:b4:90:ea:40:b7:
90:65:39:4f:26:61:00:bb:7b:92:6f:29:c9:1d:5a:
45:be:ab:c8:e8:52:23:0f:7f:94:3e:e7:40:93:56:
99:8e:56:24:10:1a:5f:60:7f:54:8b:7d:90:2e:c0:
bd:ac:36:66:db:a4:69:8e:18:cf:55:cc:d6:a7:76:
bd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:61:B7:06:B6:6C:BE:A1:AB:EC:78:F3:A3:8E:7B:59:E0:ED:CC:6D
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/LGG3BrZsvqGr7Hjzo457WeDtzG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.156.0/23
77.47.178.0/23
195.178.147.0/24
212.111.200.0/24
Signature Algorithm: sha256WithRSAEncryption
53:86:87:c9:f4:53:b5:b9:f7:93:4b:a5:31:cb:3c:05:97:a1:
86:41:ad:fb:03:c7:f7:49:16:6d:0f:d5:31:f8:08:93:d7:2a:
d4:ec:d4:8f:ec:73:4d:4b:09:eb:e1:36:87:23:12:17:de:1d:
df:ad:1f:8c:5a:15:50:cb:78:4b:b0:c3:22:2a:b5:da:fb:11:
8d:62:98:5e:e0:d4:7d:ca:6f:78:2b:f6:fc:47:54:d3:db:94:
fe:ef:3f:97:50:21:9a:70:a0:b1:54:3b:f3:72:07:4a:6a:20:
f2:e5:b1:8e:36:4e:65:1d:85:2c:49:1b:f2:0e:25:46:46:db:
6e:a5:88:b5:13:65:a4:00:fb:db:38:d5:63:ef:d7:19:e4:1e:
dd:37:5e:5d:b4:c4:0c:a4:6d:41:4c:ea:71:ac:ae:d1:23:10:
7b:44:2b:ba:88:84:18:87:0e:90:2f:5e:16:fb:80:a8:1c:72:
2f:5f:39:16:e9:fd:d0:0a:d3:77:a4:a9:59:b9:98:a7:d6:cf:
f2:7c:4b:0b:e4:8c:90:f6:b6:b3:68:f7:d1:75:e4:74:86:40:
25:49:ad:bf:bc:ea:ac:5d:55:48:b4:2a:53:79:1c:63:48:26:
c5:9c:19:41:cc:4b:f7:93:fb:25:40:6f:c7:85:2b:31:c8:0a:
ea:12:ee:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org