Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/eq3kS0YkhFTRB5ru5E1RbLlJdGo.roa
File: eq3kS0YkhFTRB5ru5E1RbLlJdGo.roa (raw, json)
Hash identifier: a2ZSGxDO1XVbDhePKC2yDKtMfW/NCtzMQbVQnfKnXRk=
Subject key identifier: 7A:AD:E4:4B:46:24:84:54:D1:07:9A:EE:E4:4D:51:6C:B9:49:74:6A
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0181F754AAF8C35B3C6FA9220CF8967EF99F
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/eq3kS0YkhFTRB5ru5E1RbLlJdGo.roa
Signing time: Wed 13 Jul 2022 11:32:09 +0000
ROA not before: Wed 13 Jul 2022 11:32:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 77.47.142.0/24 maxlen: 24
77.47.157.0/24 maxlen: 24
77.47.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:54:aa:f8:c3:5b:3c:6f:a9:22:0c:f8:96:7e:f9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 13 11:32:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7aade44b46248454d1079aeee44d516cb949746a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7c:29:00:ed:f9:ec:38:87:6e:62:d8:6b:b0:
81:e7:cb:0b:a3:0d:07:ba:a9:c1:9a:35:af:02:ff:
47:4d:6f:c1:5a:ca:58:e5:58:95:28:b8:95:df:5a:
dd:d3:d8:81:0f:cc:40:9e:b4:d7:9f:63:72:b7:45:
da:86:a2:ca:18:c1:72:2d:8e:44:d7:c2:97:b2:85:
f3:95:74:65:fd:17:9d:25:3c:ac:0b:23:e8:4e:d0:
d6:22:81:cc:93:87:52:8f:6d:fc:58:e9:59:e1:ab:
3a:4d:e6:6d:d7:50:2c:da:23:a6:a1:bc:b4:3a:b5:
17:3e:67:84:ae:89:ec:c0:e8:16:d0:c1:ba:33:68:
7e:0b:d6:a2:51:79:c9:eb:d4:71:66:51:45:57:6f:
fc:e5:fe:1c:73:ac:4d:b3:b8:57:84:e3:7d:cb:12:
06:f4:74:63:82:78:82:c1:b7:85:0e:96:fa:35:02:
5c:56:8b:34:ab:47:09:44:3c:8a:90:08:9b:c6:28:
e3:1d:f6:6e:3b:b3:ce:77:7f:51:7a:d6:26:6b:3e:
f8:fa:93:73:55:21:c4:5b:a7:a7:36:eb:75:8e:0b:
7f:21:09:2c:b0:fa:f7:13:aa:4a:6f:2c:92:83:bf:
e9:dc:51:03:f3:9a:27:47:87:e6:ce:52:9c:61:94:
3f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AD:E4:4B:46:24:84:54:D1:07:9A:EE:E4:4D:51:6C:B9:49:74:6A
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/eq3kS0YkhFTRB5ru5E1RbLlJdGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
77.47.156.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:1b:eb:f0:a8:b0:70:eb:52:88:5c:4e:81:05:ad:b5:c9:be:
8b:33:09:22:0f:76:4c:19:1b:3b:07:94:61:c1:03:14:18:d3:
71:28:4d:be:52:37:13:62:df:5b:67:ca:35:71:af:2b:a6:71:
61:9f:f6:38:5b:57:04:b3:69:e5:97:e2:57:c2:d6:de:e2:52:
94:6d:58:c9:ed:14:06:94:75:72:f6:36:97:ba:32:ca:18:99:
6a:7b:c4:d8:3f:17:e6:11:e5:ae:62:79:48:c0:08:38:ff:86:
33:47:5e:38:70:ea:7f:a8:68:b6:d9:66:36:c4:60:f5:15:7e:
7c:46:b0:05:77:0b:34:85:f1:aa:c4:2e:1a:da:22:97:02:f1:
65:a4:d1:ed:a9:b8:c7:c4:cf:c2:22:4f:9d:e1:0b:c4:53:95:
24:cf:52:72:28:be:46:1b:cc:c9:e5:19:e6:f6:a5:8f:14:92:
6e:5d:e6:5a:73:13:7e:74:24:b0:70:66:57:cb:29:3f:17:d2:
a7:9a:04:16:70:b9:a8:01:4c:ae:92:8b:09:ee:86:93:73:cf:
5c:ea:65:f5:9c:07:c8:00:a6:a5:84:54:17:88:1e:35:28:12:
42:ac:1c:36:8d:d1:41:e5:bb:a5:c9:77:9f:cc:28:e6:7d:41:
c7:31:5b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org