Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/SHRfzCd345AwmV6YNeDx7hENTHo.roa
File: SHRfzCd345AwmV6YNeDx7hENTHo.roa (raw, json)
Hash identifier: 80+2eo6fd5a4d2sWZmYY03zE/CVyLjVfV2VvDTHf4kE=
Subject key identifier: 48:74:5F:CC:27:77:E3:90:30:99:5E:98:35:E0:F1:EE:11:0D:4C:7A
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0182018F14889073DE0B064223E5E9C99047
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/SHRfzCd345AwmV6YNeDx7hENTHo.roa
Signing time: Fri 15 Jul 2022 11:12:10 +0000
ROA not before: Fri 15 Jul 2022 11:12:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207083
IP address blocks: 77.47.212.0/23 maxlen: 24
77.47.240.0/23 maxlen: 24
195.178.142.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:01:8f:14:88:90:73:de:0b:06:42:23:e5:e9:c9:90:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 15 11:12:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48745fcc2777e39030995e9835e0f1ee110d4c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:2b:4e:b1:35:28:bc:85:53:78:25:90:9d:
29:7f:c3:87:bb:d1:4e:8f:78:47:b5:63:ff:36:b4:
23:2d:17:66:4e:1e:e1:48:0e:5f:c9:b5:5f:72:92:
60:c7:c7:a8:eb:7b:bc:79:da:55:46:54:43:93:ef:
7d:ae:14:03:6d:ea:82:7d:7a:0c:31:28:b1:64:4c:
9d:b6:b8:13:f3:b5:0e:1e:4d:22:65:fd:26:79:49:
ef:2b:49:3a:71:3a:37:80:a8:71:73:7f:13:c2:a3:
05:b5:93:3e:45:78:40:09:75:e6:58:0d:d4:95:0a:
75:85:15:e5:16:d6:0e:a5:d1:cc:3c:d4:65:fc:d9:
21:d7:89:58:7a:d4:c7:a1:8e:59:51:8e:2a:54:cc:
5b:ff:b2:be:13:8f:81:fb:61:7c:eb:c6:03:72:6c:
3d:17:95:cc:ef:43:61:da:74:6c:9c:3d:32:23:8d:
22:1e:a2:43:f1:b9:f7:86:47:54:2a:d2:ce:ad:29:
05:38:d0:75:79:08:ef:85:a7:6f:ab:6c:18:19:b6:
8c:06:40:62:03:6f:32:c8:77:b3:1a:4e:b1:1e:c5:
cc:8b:90:66:ae:dd:b8:46:6e:42:d1:5e:c5:53:aa:
40:b6:a0:57:c3:d7:2e:f1:10:25:a5:19:c1:5d:ce:
fd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:74:5F:CC:27:77:E3:90:30:99:5E:98:35:E0:F1:EE:11:0D:4C:7A
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/SHRfzCd345AwmV6YNeDx7hENTHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.212.0/23
77.47.240.0/23
195.178.142.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:15:44:fd:91:a0:60:30:ea:dd:34:ed:e6:93:0f:57:28:d5:
0b:f0:8c:33:66:fb:9d:99:2a:e3:b5:67:a3:7d:2d:c9:9b:41:
09:15:e2:14:52:e9:27:a3:9f:35:32:7a:0a:dd:0c:67:68:a3:
3a:95:84:47:80:6d:a0:49:87:d3:c1:a2:61:ec:2c:5a:b3:fd:
55:b5:e2:19:0e:9d:9d:b5:ce:d3:41:d1:e5:f7:66:7c:e5:b9:
0f:62:5c:e9:92:09:42:7c:fb:cb:6b:0b:df:37:67:3e:35:72:
52:f6:6e:72:57:97:91:b3:16:2e:38:0f:8b:7a:1e:8c:e9:be:
a6:75:14:d5:73:d3:90:12:c4:3a:82:0a:e6:82:e8:bd:59:a8:
d8:2f:aa:79:81:bf:11:89:6a:53:59:5c:ee:88:ce:0d:28:5f:
a7:5b:df:00:4b:6d:f9:66:e7:06:41:7a:93:3d:ee:a2:86:6a:
cc:48:de:24:72:e8:f7:98:17:b8:bd:1d:c5:fd:3e:9e:0c:ba:
b0:db:1d:54:3b:a5:8f:1f:df:52:7b:7e:11:fe:17:61:fb:0f:
5c:46:a8:18:63:3a:d8:cc:33:5b:9a:81:8a:dd:b1:ed:1b:70:
b5:a6:59:ab:a5:0d:28:31:44:96:ea:5b:52:b1:7d:68:77:92:
c2:5c:f9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org