Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/aTiOJE9nCzu4Qt3WTTxS7g_FbPQ.roa
File: aTiOJE9nCzu4Qt3WTTxS7g_FbPQ.roa (raw, json)
Hash identifier: xOl3a/ycwCqBlAoXqov1nIGkSw/R6mNmDy+8J+ESm4Q=
Subject key identifier: 69:38:8E:24:4F:67:0B:3B:B8:42:DD:D6:4D:3C:52:EE:0F:C5:6C:F4
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0182016B5F30607B9A47DAD9856D9B45800A
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/aTiOJE9nCzu4Qt3WTTxS7g_FbPQ.roa
Signing time: Fri 15 Jul 2022 10:33:09 +0000
ROA not before: Fri 15 Jul 2022 10:33:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.111.211.0/24 maxlen: 24
212.111.216.0/23 maxlen: 24
212.111.218.0/23 maxlen: 24
212.111.220.0/22 maxlen: 24
77.47.252.0/22 maxlen: 24
77.47.248.0/22 maxlen: 24
195.178.128.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:01:6b:5f:30:60:7b:9a:47:da:d9:85:6d:9b:45:80:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 15 10:33:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69388e244f670b3bb842ddd64d3c52ee0fc56cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:81:6c:64:4f:cf:11:30:91:3e:20:a9:99:f5:
f2:3c:b1:82:93:3f:c8:69:eb:3c:92:78:aa:4c:b9:
ec:b1:c0:73:93:29:e6:2e:ab:c7:87:a6:9f:99:cf:
4e:03:30:a9:b5:3e:54:ac:02:c0:77:22:46:2c:3d:
4e:35:24:e6:c9:45:81:3f:4f:00:61:39:24:17:44:
4d:5e:73:0e:72:e7:b0:f7:01:97:24:9b:f6:08:c4:
c6:33:bb:eb:9b:b7:73:ee:a8:01:22:28:8f:b7:4f:
2b:38:79:a5:a3:ee:dd:01:62:08:c4:f5:64:04:96:
cb:93:e2:5c:a1:82:26:a6:ff:91:50:a9:1c:51:e7:
87:2d:98:81:77:20:fc:28:58:74:9b:62:c1:93:fe:
7d:21:67:22:f8:0e:db:b9:67:89:19:79:34:ca:8b:
72:cb:f9:ac:b8:b3:87:bf:36:fd:fb:dd:f6:9a:95:
c0:46:21:2f:ad:23:52:64:be:f7:db:ae:1b:18:3f:
01:75:07:3e:fb:88:06:13:45:9d:4e:25:a8:4e:bb:
3f:07:9d:b1:80:b0:99:44:a6:58:8b:be:b6:3c:9d:
02:b0:c8:27:16:42:fa:68:83:5e:bb:1c:bc:b2:1b:
81:04:af:37:f1:12:ba:2b:90:b3:03:5f:a9:0d:03:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:38:8E:24:4F:67:0B:3B:B8:42:DD:D6:4D:3C:52:EE:0F:C5:6C:F4
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/aTiOJE9nCzu4Qt3WTTxS7g_FbPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.248.0/21
185.143.56.0/22
195.178.128.0/22
212.111.211.0/24
212.111.216.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:21:e4:4c:07:83:63:d6:75:29:fe:e8:23:19:84:49:16:8f:
63:82:00:0d:35:16:fd:6d:c2:82:98:1d:e5:40:db:9a:00:41:
87:c1:71:c8:80:de:67:4b:41:e0:d6:d7:f3:3a:12:80:ba:ab:
f5:da:fe:6e:e7:b0:70:03:90:7b:55:6e:69:c0:de:d8:9c:3a:
d6:7d:1f:dd:3b:02:d1:67:c1:af:72:71:ae:cc:21:99:98:41:
d7:3c:78:46:1f:26:7f:ab:e0:fe:2b:6a:4f:a7:8d:8c:82:72:
ef:ef:0a:87:81:73:b9:b8:06:f8:90:f2:0f:c1:38:b1:e0:04:
fc:42:4e:1f:92:8a:33:5f:60:3b:41:ae:4e:18:ea:e6:29:ed:
79:32:dc:5d:0a:66:af:16:b4:59:1e:55:48:76:07:55:93:69:
94:f3:83:85:ac:89:f2:83:c8:7c:b0:71:1e:5d:72:56:3c:04:
0d:cf:af:5a:85:22:f3:a3:5d:39:b7:2c:85:95:b9:40:01:40:
5f:9b:09:63:33:66:24:42:52:6b:bb:e2:23:85:50:af:cf:b9:
2d:55:46:1d:93:ec:4e:1f:5e:cc:a5:f1:72:80:d5:a9:9f:00:
58:31:f0:cb:8b:5c:4b:aa:4a:96:92:17:59:47:c5:14:4e:44:
fb:52:25:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org