Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/aUXWNG8Va1Fbki6-xSAievtmpTI.roa
File: aUXWNG8Va1Fbki6-xSAievtmpTI.roa (raw, json)
Hash identifier: BkESvNDVgpXU+QEpzofFCVHwZ916P/I1O5oPLYRd1nA=
Subject key identifier: 69:45:D6:34:6F:15:6B:51:5B:92:2E:BE:C5:20:22:7A:FB:66:A5:32
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0182CF9EEECE3D009D8872CA87991FBB4A97
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/aUXWNG8Va1Fbki6-xSAievtmpTI.roa
Signing time: Wed 24 Aug 2022 11:31:15 +0000
ROA not before: Wed 24 Aug 2022 11:31:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 77.47.240.0/24 maxlen: 24
77.47.143.0/24 maxlen: 24
77.47.142.0/24 maxlen: 24
195.178.132.0/22 maxlen: 24
195.178.143.0/24 maxlen: 24
77.47.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cf:9e:ee:ce:3d:00:9d:88:72:ca:87:99:1f:bb:4a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 24 11:31:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6945d6346f156b515b922ebec520227afb66a532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:aa:5f:33:92:23:43:db:27:5c:ba:de:26:86:
e9:43:ce:9f:b1:99:f3:56:ba:ef:f2:4c:d3:c4:15:
ae:38:3e:f9:60:4e:5d:2b:6e:24:1f:24:f3:77:77:
f4:1e:67:3d:79:cc:cd:82:9c:26:2e:db:e9:e9:ce:
4c:f7:5c:64:bd:d1:5d:0d:ee:aa:3b:00:4a:ad:17:
22:fd:e0:31:e1:89:a1:ff:da:f4:b4:e2:41:14:b0:
e2:bf:79:3c:1b:f5:48:40:e6:3e:20:70:bd:78:29:
fb:51:ce:7f:25:2e:c5:4f:03:ac:0a:1d:d6:d2:d9:
40:d4:a7:52:c6:50:25:51:78:12:28:ba:26:0c:49:
0c:37:66:6d:cd:e0:2d:f6:f7:65:a3:29:ff:02:f1:
ac:88:5a:68:aa:19:d8:25:7e:f7:0a:dc:66:06:b3:
a2:06:4e:d5:e3:01:c4:99:e1:a7:47:b5:65:07:be:
7a:91:db:e2:13:8e:30:0f:c8:e0:71:a7:37:8d:19:
83:82:39:aa:13:10:be:df:a2:1d:0c:6b:ae:88:c7:
12:4f:60:b0:1a:0a:aa:91:db:9f:df:d3:d7:45:6e:
a5:6a:91:20:6d:ca:dd:c1:1c:33:a1:54:db:6d:ac:
31:a6:61:63:40:d5:df:ba:cc:96:0a:bf:d1:3b:31:
72:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:45:D6:34:6F:15:6B:51:5B:92:2E:BE:C5:20:22:7A:FB:66:A5:32
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/aUXWNG8Va1Fbki6-xSAievtmpTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/23
77.47.156.0/24
77.47.240.0/24
195.178.132.0/22
195.178.143.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:97:c9:73:bb:3d:9e:25:e6:17:3f:92:ed:e2:39:c2:34:83:
e9:c8:ca:a3:ab:ef:18:37:79:b7:ff:7d:77:db:b7:13:d9:fa:
89:26:f9:78:69:5e:47:01:15:88:ff:2d:cb:28:fd:62:0e:1a:
6f:17:1d:5f:1c:ec:d5:93:41:3b:29:9c:2c:b9:3e:f7:29:b1:
fd:1d:fa:f3:ee:1e:9b:a6:a5:be:76:83:fc:0e:f1:0a:a6:b5:
87:45:e6:19:f4:17:0f:82:d5:38:ee:0c:a2:f9:cf:bb:d0:db:
65:63:f6:df:d9:fa:65:12:32:e2:3f:29:15:82:a2:f5:7d:ab:
10:c8:86:49:e2:aa:2d:ec:06:57:68:cf:07:08:68:2a:c4:58:
aa:63:1a:b5:4a:7a:21:00:df:a3:21:43:4a:09:e0:a0:48:4e:
d6:d8:ca:67:6b:1a:d7:4e:71:52:69:2b:ad:11:c6:dd:d0:9a:
1d:00:da:c6:cb:71:55:19:24:9d:a8:82:7b:0c:36:49:c8:64:
bf:32:67:af:c1:0e:92:9a:fb:7b:97:6a:78:bb:48:ae:37:ba:
23:31:f5:ff:c8:cc:11:20:fc:60:b5:c3:3b:ba:73:be:24:58:
4d:11:10:a8:1c:d0:f2:d5:04:71:98:a8:0a:d9:41:2c:90:8d:
85:bc:75:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org