Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/fUY2UVU3hse3jk-cgpxgqnJ3x_Q.roa
File: fUY2UVU3hse3jk-cgpxgqnJ3x_Q.roa (raw, json)
Hash identifier: 8C8IcmoAw2U64Fw4KS8RzcRzMvi5Gi32jouMjoHWR2k=
Subject key identifier: 7D:46:36:51:55:37:86:C7:B7:8E:4F:9C:82:9C:60:AA:72:77:C7:F4
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01847D044A76559E994A7B594330D6F884D4
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/fUY2UVU3hse3jk-cgpxgqnJ3x_Q.roa
Signing time: Tue 15 Nov 2022 20:39:04 +0000
ROA not before: Tue 15 Nov 2022 20:39:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204197
IP address blocks: 77.47.210.0/23 maxlen: 24
195.178.140.0/24 maxlen: 24
195.178.142.0/24 maxlen: 24
195.178.146.0/23 maxlen: 24
77.47.178.0/24 maxlen: 24
77.47.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7d:04:4a:76:55:9e:99:4a:7b:59:43:30:d6:f8:84:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Nov 15 20:39:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7d463651553786c7b78e4f9c829c60aa7277c7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:d0:b7:d5:45:57:c0:ff:d3:2b:c1:bd:04:
0c:8c:1c:c9:27:43:f6:ff:7e:7f:a3:f7:f0:24:2e:
ea:a1:21:d1:c4:ec:6d:99:e8:87:aa:c2:d3:a8:4d:
f1:c2:5c:e1:d8:8d:6e:db:e5:45:75:ae:40:90:2d:
bd:15:02:3a:21:3b:c7:45:03:01:a1:62:7b:5f:a8:
63:c9:c2:e0:4a:88:a9:ad:76:27:f5:46:70:f0:ab:
2b:4e:08:c3:4a:92:cd:c7:9b:9b:37:1d:5f:c7:29:
76:3c:e9:85:8e:dc:53:09:ea:81:03:d1:5b:a9:f6:
de:bd:43:dc:72:33:91:e7:18:75:a5:d9:7c:e4:2b:
4e:fd:4b:c1:7c:81:7a:46:01:a3:9b:c8:b1:48:bc:
7d:43:5f:e0:b2:d8:a2:ec:61:16:be:a3:27:c6:72:
cf:26:91:ae:46:4f:2c:42:21:01:ff:89:84:43:a4:
d0:5d:ff:25:af:ef:cb:41:13:a3:d5:df:fb:ba:77:
93:6e:39:75:f0:00:ee:a2:34:b9:fa:3a:da:99:a5:
96:77:98:1d:17:2d:58:69:61:af:20:57:89:90:ed:
b4:e5:b5:c2:c3:5e:b3:4c:19:23:5b:6c:f8:c7:3e:
6d:23:38:b7:ee:2f:c8:9b:44:ba:2b:1f:28:5e:9a:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:46:36:51:55:37:86:C7:B7:8E:4F:9C:82:9C:60:AA:72:77:C7:F4
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/fUY2UVU3hse3jk-cgpxgqnJ3x_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.178.0/23
77.47.210.0/23
195.178.140.0/24
195.178.142.0/24
195.178.146.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:50:dc:e5:70:30:74:0c:cd:0f:0f:2f:63:10:e4:4a:fb:13:
5f:a8:05:c0:93:8f:6a:11:02:be:46:a4:6e:30:84:4a:cc:55:
c5:e2:f7:08:fe:b4:da:27:73:5a:49:c1:01:9b:4f:03:91:57:
0c:d8:72:03:fc:69:20:35:66:1f:10:fa:1b:f1:98:c7:10:1f:
19:ad:50:4c:97:bf:66:b4:1c:0c:c0:7d:14:ae:dd:e5:98:b8:
0e:6d:8a:70:40:59:32:c1:2e:99:ed:59:e1:04:7c:b8:28:10:
c7:8b:c3:a1:77:cf:22:af:b1:e8:50:8c:f0:ba:49:52:6b:27:
26:6f:fe:73:fd:98:ea:e4:7b:96:55:2a:c2:21:76:f1:de:34:
6c:cb:47:7e:1f:f2:fa:d3:d8:c7:e1:af:ae:16:ab:de:b0:ac:
25:83:79:7b:fb:65:c3:1b:17:7e:3d:8c:b1:6c:1c:84:59:7f:
ee:a6:64:e6:a9:62:12:13:47:74:92:3d:02:87:d5:36:fb:c0:
6b:32:fe:e5:fd:0d:18:ff:a3:1f:12:ac:f1:f2:85:56:29:4e:
67:56:91:02:ce:5b:67:86:f9:7f:97:c0:3e:a8:88:89:51:55:
bd:bb:b9:38:bf:a1:3a:64:f7:76:27:23:fa:08:89:f0:e1:65:
b0:95:f7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org