Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/XdkSA-JguycOgfji_BafrMgJrlk.roa
File: XdkSA-JguycOgfji_BafrMgJrlk.roa (raw, json)
Hash identifier: iYdQ+rN3HpG26245eWCtltTL5TW40xRV22fD11kUyLg=
Subject key identifier: 5D:D9:12:03:E2:60:BB:27:0E:81:F8:E2:FC:16:9F:AC:C8:09:AE:59
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01828DD1A0D2079F9AD75131B9D37AC6E8C0
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/XdkSA-JguycOgfji_BafrMgJrlk.roa
Signing time: Thu 11 Aug 2022 16:51:41 +0000
ROA not before: Thu 11 Aug 2022 16:51:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3319
IP address blocks: 212.111.200.0/24 maxlen: 24
77.47.210.0/23 maxlen: 24
77.47.244.0/22 maxlen: 22
195.178.144.0/23 maxlen: 23
195.178.152.0/22 maxlen: 22
77.47.178.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8d:d1:a0:d2:07:9f:9a:d7:51:31:b9:d3:7a:c6:e8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 11 16:51:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5dd91203e260bb270e81f8e2fc169facc809ae59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:3f:3f:10:35:d5:94:65:04:36:b9:62:ae:
ac:d4:11:cf:4f:c0:da:dc:24:cf:4c:05:fa:98:83:
3e:51:97:a2:e6:92:fa:43:d7:e4:53:ea:e0:82:f7:
d1:c9:24:ba:bb:42:d5:39:f9:fd:a9:02:15:a8:47:
a7:4c:90:72:8c:a4:5f:2d:70:e4:b4:91:ad:35:f6:
0f:7f:5b:77:75:e9:03:4d:2f:6e:e2:f6:38:a4:05:
aa:5f:6f:0a:9d:05:a8:f8:5a:30:e5:cc:13:80:37:
14:e0:1f:6d:28:cb:5a:04:40:8e:3e:9e:fd:ba:a8:
c1:7d:db:9b:17:a3:37:8c:33:3c:3e:1f:26:7e:f4:
77:3c:16:69:57:71:37:0c:bd:c5:ae:14:9a:44:85:
59:3b:94:a0:10:ac:78:9d:e9:7c:5a:8d:57:b2:09:
68:48:40:e3:4e:a4:80:1e:a9:aa:10:bb:88:a3:2c:
a8:cc:e0:e6:5f:b7:cd:9c:b8:db:c6:d8:99:cc:61:
3d:f8:e6:84:00:f0:b5:1a:a1:06:24:92:09:99:db:
0e:e7:40:d0:b7:b5:82:b3:72:4f:bf:38:c7:95:59:
78:4b:2d:f0:ed:b3:01:a8:8b:2e:8e:41:7e:60:7d:
c9:c2:a2:9d:61:64:8a:0b:8e:fe:99:71:31:a5:7c:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D9:12:03:E2:60:BB:27:0E:81:F8:E2:FC:16:9F:AC:C8:09:AE:59
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/XdkSA-JguycOgfji_BafrMgJrlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.178.0/23
77.47.210.0/23
77.47.244.0/22
195.178.144.0/23
195.178.152.0/22
212.111.200.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:5f:02:77:ae:2d:03:7a:f9:b2:bd:80:53:78:1d:0a:2a:ae:
53:e2:91:0d:42:d5:3f:5f:35:3d:aa:37:87:b9:bc:ae:7d:e3:
74:2d:c5:ae:2c:82:52:56:22:22:ba:df:e0:2b:85:08:ee:fb:
6b:88:27:b4:ba:6e:2a:01:c1:c2:ca:68:56:ca:65:64:5e:6e:
60:3b:2a:af:7b:7c:9a:d9:63:5d:fc:c0:3c:26:99:34:e5:70:
d8:21:0d:da:a6:04:42:e7:f6:46:6c:ce:45:a8:7d:8b:a1:dd:
16:1e:1d:90:62:68:57:85:66:ce:45:f6:91:3f:4b:07:cd:bc:
b6:9d:e0:4b:7e:ea:22:21:1b:32:fc:87:9a:bc:06:4d:08:81:
30:62:d7:85:85:c8:8f:99:f9:a1:78:92:48:17:f6:aa:4c:7b:
dd:e0:b1:cc:69:53:0f:0f:75:97:23:a8:29:6c:80:9c:7e:fe:
e0:cf:ff:a4:97:91:77:65:57:79:a0:6a:c1:34:f0:3c:d7:5d:
84:70:19:94:1d:eb:e8:47:a0:25:2e:f6:12:0e:e2:ec:76:80:
23:f8:bd:33:4c:60:ce:ba:cd:74:20:99:0c:1b:d4:df:ef:53:
b1:1d:28:e3:8e:86:96:99:6b:e6:e3:42:f8:55:74:45:b9:f4:
66:20:f6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org