Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/W1R7VauApoLh2HSgTiajJzMBbiM.roa
File: W1R7VauApoLh2HSgTiajJzMBbiM.roa (raw, json)
Hash identifier: VUwiXg/NMb+QIKAnMaZEjC81q9J1MH6Z/oT+24hTIqc=
Subject key identifier: 5B:54:7B:55:AB:80:A6:82:E1:D8:74:A0:4E:26:A3:27:33:01:6E:23
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1E587D8C
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/W1R7VauApoLh2HSgTiajJzMBbiM.roa
Signing time: Wed 22 Jun 2022 16:35:34 +0000
ROA not before: Wed 22 Jun 2022 16:35:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.210.0/23 maxlen: 24
77.47.212.0/23 maxlen: 24
77.47.244.0/22 maxlen: 22
77.47.152.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
77.47.154.0/24 maxlen: 24
77.47.153.0/24 maxlen: 24
77.47.155.0/24 maxlen: 24
195.178.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509115788 (0x1e587d8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jun 22 16:35:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b547b55ab80a682e1d874a04e26a32733016e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e8:a4:77:1c:45:0e:ce:27:40:3c:7b:c9:e8:
66:bc:76:44:45:15:87:f8:d1:81:f8:72:d4:0c:95:
d4:4d:72:ce:7b:1a:7e:11:53:95:e9:d1:43:fe:1d:
0d:47:6d:a0:3f:08:73:bd:a8:7e:55:f4:73:46:1c:
b0:ea:26:7d:cf:f1:7d:9e:13:02:82:c1:55:bf:15:
ae:f3:14:8a:d0:0c:a8:25:a2:5f:6d:f5:22:5b:2f:
c4:82:84:11:16:8e:9e:94:d8:30:8f:7b:13:53:2d:
7f:a0:cd:6c:b1:2d:c8:7d:5f:f8:f0:88:54:5a:1e:
03:fe:83:5d:95:19:e2:09:23:a0:3e:5b:ab:97:4c:
49:3a:b2:e3:38:d1:74:9a:55:b5:ee:20:2a:4a:44:
a8:d7:2b:ae:b9:d2:65:97:ad:ec:9a:e3:7e:36:62:
1f:73:e0:49:97:f6:bd:cd:f4:9c:4a:97:91:07:3b:
31:74:2b:17:97:f1:87:5a:84:d3:ee:b1:28:40:c5:
4d:64:af:1f:d0:27:04:b5:6b:84:fc:32:a0:08:22:
e5:63:96:23:e4:55:e3:6f:79:7f:13:9a:7a:e0:11:
20:dc:dd:57:16:14:26:d4:83:6a:1c:c4:35:b3:3c:
9c:64:89:ec:d4:4b:f9:8a:3d:87:d4:3a:4a:8d:7b:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:54:7B:55:AB:80:A6:82:E1:D8:74:A0:4E:26:A3:27:33:01:6E:23
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/W1R7VauApoLh2HSgTiajJzMBbiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.152.0/22
77.47.210.0-77.47.213.255
77.47.244.0/22
195.178.144.0/23
195.178.152.0/22
Signature Algorithm: sha256WithRSAEncryption
60:17:39:d1:66:7e:54:d8:76:70:6c:ca:91:2b:ad:47:a6:95:
35:a0:4a:cd:42:bd:ca:3b:12:2b:03:1d:af:9e:1d:e5:95:1f:
93:52:68:10:9d:d8:80:88:0c:29:78:59:a7:f0:17:42:e6:14:
64:d9:8f:b8:08:79:2a:5d:e1:d7:02:a6:d7:b2:31:b0:2f:22:
39:1b:e1:fe:07:31:59:0b:73:e8:be:3b:c0:59:8e:b4:46:d4:
61:82:7a:dc:b7:6b:3f:0e:24:1c:bf:a8:dc:d0:10:0c:8d:29:
45:8a:04:2f:6e:36:59:63:40:0a:57:86:6c:21:d5:3b:b7:d1:
53:6e:7d:67:91:d0:30:39:f6:2e:76:b0:92:b3:53:cc:70:d3:
65:55:d5:e0:0d:04:3e:78:c9:3f:9e:ae:a2:97:85:17:83:15:
75:c4:54:c6:3a:c7:5a:92:c7:5f:d4:8d:b6:9c:75:02:f5:d1:
6e:4b:70:32:2c:16:f9:0f:ae:e0:34:b1:0f:52:b8:76:42:fb:
d7:d6:72:37:12:37:a8:03:ca:4b:14:7e:b3:0a:66:20:a8:b6:
f1:19:4e:c8:ee:37:01:f8:27:ce:62:1d:4d:0e:ca:7f:ef:51:
05:f4:9d:75:d5:36:b1:90:72:bb:28:bb:c1:5f:0b:8b:6a:93:
55:3d:3f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org