Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/XUEyCrW-LrkPzWecNqqnY6c3cy8.roa
File: XUEyCrW-LrkPzWecNqqnY6c3cy8.roa (raw, json)
Hash identifier: 05U44mj8j8fDiAA9EOZwbSwmSVZS2YZx3B7tPtzxfic=
Subject key identifier: 5D:41:32:0A:B5:BE:2E:B9:0F:CD:67:9C:36:AA:A7:63:A7:37:73:2F
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1DEA7A09
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/XUEyCrW-LrkPzWecNqqnY6c3cy8.roa
Signing time: Fri 13 May 2022 13:17:41 +0000
ROA not before: Fri 13 May 2022 13:17:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.111.211.0/24 maxlen: 24
77.47.210.0/23 maxlen: 24
212.111.216.0/23 maxlen: 24
212.111.218.0/23 maxlen: 24
212.111.220.0/22 maxlen: 24
77.47.252.0/22 maxlen: 24
77.47.248.0/22 maxlen: 24
195.178.128.0/22 maxlen: 24
195.178.142.0/23 maxlen: 24
185.143.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501905929 (0x1dea7a09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: May 13 13:17:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d41320ab5be2eb90fcd679c36aaa763a737732f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:c7:b7:35:9f:39:fa:11:4d:98:0e:ad:87:
46:5e:a4:3f:5f:29:40:4d:61:20:bc:8a:5e:cf:7f:
c6:ce:56:91:b6:7e:2d:87:13:0b:e1:c2:3f:45:76:
59:9a:d7:0f:7c:a7:46:89:be:1e:86:a3:51:32:c8:
fe:f9:6e:37:f0:e0:59:80:e7:8a:6a:d2:62:24:dc:
3c:b4:9e:50:46:cc:7a:88:39:5e:6b:95:58:37:48:
54:85:a3:0e:90:1d:76:9d:68:44:28:ce:ac:41:7a:
82:54:b1:67:c4:eb:2a:6d:9a:db:28:ae:e9:13:38:
54:d2:9f:97:1d:bd:ca:a0:30:ab:97:89:db:fd:92:
88:6e:53:5a:fa:f1:a9:e1:bb:09:57:31:c9:31:9a:
ce:01:f3:33:86:e3:81:cd:0a:1a:47:7f:ca:8f:94:
d2:0d:d2:24:b6:2e:5e:14:cf:70:b9:27:7a:e4:c7:
00:47:32:49:1d:ba:0e:c2:3e:7a:65:76:72:5c:ad:
a4:18:ba:86:e7:9f:47:ee:b3:ef:92:63:df:99:c9:
01:ab:04:b1:a6:c6:45:55:aa:ed:e9:17:6a:e5:7d:
a2:1b:42:b7:16:86:23:54:25:2b:9a:22:fd:cd:9c:
fc:78:d3:41:8d:18:b8:17:36:39:f6:5e:7f:6a:4e:
74:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:41:32:0A:B5:BE:2E:B9:0F:CD:67:9C:36:AA:A7:63:A7:37:73:2F
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/XUEyCrW-LrkPzWecNqqnY6c3cy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.210.0/23
77.47.248.0/21
185.143.56.0/22
195.178.128.0/22
195.178.142.0/23
212.111.211.0/24
212.111.216.0/21
Signature Algorithm: sha256WithRSAEncryption
47:13:9b:c8:bb:15:bd:1a:f6:e4:99:a1:0b:7b:93:56:9b:54:
08:b1:dc:d6:eb:88:4a:ed:69:a7:78:5a:96:f8:99:2a:ec:11:
ea:88:bd:49:8b:30:fc:87:68:c3:27:f9:0c:e2:b0:8d:b4:b9:
ff:86:1f:bf:c3:fd:22:34:a7:48:cc:05:f0:74:4a:98:c8:94:
df:a7:45:90:a4:1b:76:39:5a:8c:23:9b:dd:96:16:c7:f8:77:
fa:11:3b:20:ae:f6:43:35:78:81:61:0d:ae:42:ed:a7:5f:6a:
a1:47:b2:a9:88:2b:3c:34:e5:6d:62:3c:85:e6:d8:26:c1:e0:
03:17:5d:07:67:f9:41:d6:9d:a8:3a:c8:77:a9:d1:b4:1a:03:
14:1d:ba:94:89:7e:d2:32:3d:dc:bb:b1:4d:c5:9c:e3:65:18:
c5:52:ca:9e:7d:ec:de:d8:3e:49:6f:bb:64:28:80:05:00:19:
83:6e:78:ad:92:90:5c:49:79:6c:2d:f5:90:6d:55:f4:a8:0c:
7d:96:9e:62:b1:f2:6d:07:8e:ea:e0:61:f3:73:c6:4a:f5:8a:
47:60:c9:1d:5f:8b:4f:10:6b:ab:dc:dc:93:d3:59:12:ee:ac:
fc:8b:68:42:94:91:b5:8f:33:b5:73:3c:74:2e:6c:c8:d2:f2:
16:bd:bf:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org