Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Yjqi3UC0ayhk2OUKBVud8q10P5c.roa
File: Yjqi3UC0ayhk2OUKBVud8q10P5c.roa (raw, json)
Hash identifier: ff3w2yEihZZygPgWB1UIFpb3cuv+vNYc9eXhSE2GCKo=
Subject key identifier: 62:3A:A2:DD:40:B4:6B:28:64:D8:E5:0A:05:5B:9D:F2:AD:74:3F:97
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1D36BD23
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Yjqi3UC0ayhk2OUKBVud8q10P5c.roa
Signing time: Thu 24 Mar 2022 09:22:51 +0000
ROA not before: Thu 24 Mar 2022 09:22:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 77.47.212.0/24 maxlen: 24
77.47.210.0/24 maxlen: 24
77.47.211.0/24 maxlen: 24
77.47.213.0/24 maxlen: 24
77.47.240.0/24 maxlen: 24
77.47.241.0/24 maxlen: 24
195.178.140.0/24 maxlen: 24
195.178.141.0/24 maxlen: 24
195.178.146.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490126627 (0x1d36bd23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 24 09:22:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=623aa2dd40b46b2864d8e50a055b9df2ad743f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:bf:3a:6c:09:cc:9c:4b:f1:b0:f8:db:d1:
1f:1f:6f:00:bf:80:2e:83:1f:36:a2:3b:b5:1d:46:
bb:7b:5b:c3:e3:e9:e5:b8:e0:92:e6:fe:c6:19:7b:
2c:97:6c:be:8f:97:a5:c2:33:7b:74:8a:3e:51:63:
a8:35:c8:cb:74:20:35:66:d1:7f:72:02:ae:69:a8:
16:e1:ac:b9:ab:f4:1b:9f:aa:b1:a4:d5:ce:bd:aa:
a0:10:8b:89:16:a2:ce:73:90:d6:4d:bc:e8:ce:83:
5c:d7:6c:e1:36:f6:ab:b8:1a:64:45:6e:58:67:62:
0f:26:e8:d3:76:8b:84:ad:28:9b:1a:8d:d4:4e:3b:
84:70:76:c7:53:24:ba:92:e7:c4:58:1b:55:d9:62:
f6:bd:06:d8:22:5e:f8:1e:f5:5d:85:ad:84:3f:f9:
d4:87:41:85:f1:49:6d:2b:91:3e:a6:c2:98:c3:9c:
a8:40:dc:47:0e:8d:84:28:30:a8:1e:e5:bb:1b:e2:
97:b6:39:24:89:73:ad:d8:e0:68:72:1a:53:f1:03:
12:a0:1f:20:9e:a3:4e:28:64:63:e0:1e:4b:a1:85:
b6:ca:d8:21:ca:b8:b1:11:b8:28:38:92:0a:f9:2c:
8f:04:45:93:77:a1:69:cb:f7:d2:c8:bf:0e:4e:82:
ab:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3A:A2:DD:40:B4:6B:28:64:D8:E5:0A:05:5B:9D:F2:AD:74:3F:97
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Yjqi3UC0ayhk2OUKBVud8q10P5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.210.0-77.47.213.255
77.47.240.0/23
195.178.140.0/23
195.178.146.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:d7:d6:be:4c:88:36:64:ac:87:9e:e8:97:47:0d:d3:2a:53:
b6:60:a2:28:d6:3c:e6:62:1f:4e:96:48:63:d0:4b:9f:c7:8c:
61:70:dd:3c:74:3a:e5:b1:21:7f:ee:54:2f:0a:1e:ca:5e:ce:
1d:31:50:38:4c:a3:69:0d:68:87:51:98:02:88:53:c1:ef:ab:
bf:c3:ef:92:a1:dc:a4:33:60:88:78:cb:a3:81:13:3d:1d:91:
27:be:e4:c7:02:8d:18:3b:ac:36:fa:7f:27:55:cc:9b:69:26:
67:11:c3:98:14:65:92:81:d8:46:42:a0:fa:b8:26:18:72:b0:
1d:51:86:fe:92:8e:f0:85:0e:d1:21:1e:3c:c8:fc:6e:44:0a:
a6:ac:d1:60:f0:e4:3f:31:ee:4d:c7:81:67:8a:6b:f2:25:93:
ca:e7:12:4d:cc:d3:d2:15:fb:1a:3d:22:74:2c:5b:31:a1:39:
89:66:3c:6a:5a:1b:18:44:1a:5d:95:af:09:15:7e:42:e1:8e:
40:67:0c:dd:07:59:10:66:47:d0:17:7c:3b:83:22:e8:41:ce:
d7:bd:3e:3b:b4:04:95:fe:0c:c7:13:d1:3b:82:a7:8e:de:a4:
2f:bb:79:43:0c:6e:1e:bd:f1:fe:cc:2c:5c:b8:af:95:9d:a8:
e7:d0:23:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org