Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/QW2wfM1S3ckdSR35pzYgFG2Q8Nw.roa
File: QW2wfM1S3ckdSR35pzYgFG2Q8Nw.roa (raw, json)
Hash identifier: eanbP8SoTWwqWUp1gKFSpAjvMmh6QXH4C3rXeqoibPk=
Subject key identifier: 41:6D:B0:7C:CD:52:DD:C9:1D:49:1D:F9:A7:36:20:14:6D:90:F0:DC
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1C90FAF9
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/QW2wfM1S3ckdSR35pzYgFG2Q8Nw.roa
Signing time: Thu 27 Jan 2022 17:34:32 +0000
ROA not before: Thu 27 Jan 2022 17:34:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 77.47.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479263481 (0x1c90faf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 27 17:34:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=416db07ccd52ddc91d491df9a73620146d90f0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:a0:ad:52:f5:a9:ab:c8:eb:90:c0:8e:25:
ab:a8:c6:c5:a8:17:41:7e:81:6d:b7:55:6b:08:43:
b9:3f:37:13:77:b8:42:60:25:94:6d:99:c5:26:74:
e5:80:c7:76:b0:16:07:87:5a:70:54:ba:10:ad:be:
5c:95:f5:23:2f:66:ff:6f:8f:ac:d5:9c:e3:ab:26:
3b:94:b3:d2:2d:c5:21:b2:25:8a:4d:ed:35:fe:cb:
ec:de:92:db:e9:94:63:16:06:bd:d0:25:71:e2:03:
09:23:94:0b:e4:12:b3:27:10:94:97:e8:d6:b8:79:
da:2d:59:88:6c:96:61:b4:6f:9a:95:cf:0b:fe:73:
f7:24:60:f8:82:76:6f:ce:a8:f7:6e:95:66:d0:af:
78:f3:ba:2d:fe:7e:c9:b7:30:cf:61:85:ea:b5:0d:
89:16:e9:d4:a5:5d:db:3a:15:08:7d:3c:b1:90:3d:
3b:5b:53:a0:6b:d8:5a:ae:e2:e4:dc:fb:58:1a:5b:
17:eb:6b:21:b7:4c:82:4a:e6:d1:0b:a3:5d:cc:60:
30:1b:c5:9f:48:32:cc:00:48:97:a9:76:71:4b:79:
4f:f7:7a:15:48:b9:0c:75:0a:cb:90:65:a9:ea:41:
ee:73:0f:ff:30:18:2f:bf:13:c1:5f:0e:f5:64:ac:
43:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6D:B0:7C:CD:52:DD:C9:1D:49:1D:F9:A7:36:20:14:6D:90:F0:DC
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/QW2wfM1S3ckdSR35pzYgFG2Q8Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.241.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f0:88:ae:17:35:52:2f:b7:ee:9d:5c:19:5a:a2:0a:d3:46:
ba:9b:34:22:d3:1a:dd:45:d2:e0:82:8c:d9:74:88:b3:c6:be:
35:1b:22:30:ec:fd:10:a9:d0:b5:99:5f:3b:94:17:a9:79:bd:
41:66:f6:94:97:76:2d:37:c6:96:2e:c0:10:56:ae:31:a6:15:
7e:15:cc:08:fe:20:a9:22:c1:5d:4c:cf:1f:56:ce:22:2a:dc:
bc:e2:4b:2a:fc:b7:df:6a:cb:8c:7e:8d:3e:cd:73:db:fe:6f:
6b:9a:e3:19:32:5c:23:18:ca:56:10:ee:7c:3c:90:f1:6e:0c:
ce:21:29:8a:a7:30:40:c8:e3:7b:a4:88:a0:64:22:34:41:6e:
23:7d:48:1c:d8:f6:ce:d6:6e:eb:95:b8:2f:80:d4:70:2e:18:
4f:0e:db:ec:13:d9:23:d4:bb:36:d1:04:11:b3:fe:32:48:4b:
b7:9b:40:e6:b1:83:e3:1a:2b:e9:24:85:7a:5a:e4:d0:f1:18:
98:fc:34:34:27:2d:30:e9:a3:59:98:2c:28:97:ad:25:42:a4:
cc:a7:24:b9:21:c6:09:7e:96:f6:b7:c5:eb:bb:f6:dc:27:c2:
31:86:1c:01:f9:ea:50:a0:0f:24:ff:bc:a8:8d:b0:75:d5:07:
88:68:a9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org