Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/g9b7j9y8SVVX8qASUndEruj9AAw.roa
File: g9b7j9y8SVVX8qASUndEruj9AAw.roa (raw, json)
Hash identifier: M7ZcRfIZPkMQXZIYkkNJ+OAiSuPNBqr+5RjGW+u1joA=
Subject key identifier: 83:D6:FB:8F:DC:BC:49:55:57:F2:A0:12:52:77:44:AE:E8:FD:00:0C
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018336C42F66E252B74CD3EB5AF7C6A7C652
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/g9b7j9y8SVVX8qASUndEruj9AAw.roa
Signing time: Tue 13 Sep 2022 12:12:50 +0000
ROA not before: Tue 13 Sep 2022 12:12:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.244.0/22 maxlen: 22
195.178.144.0/23 maxlen: 23
195.178.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:36:c4:2f:66:e2:52:b7:4c:d3:eb:5a:f7:c6:a7:c6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Sep 13 12:12:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83d6fb8fdcbc495557f2a012527744aee8fd000c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:01:fd:65:32:8e:30:cd:d5:ac:c4:c7:f5:fc:
af:35:3b:da:83:a3:a7:fd:04:45:6d:d9:88:1f:81:
58:69:4a:f4:58:6a:70:16:22:aa:b9:a6:e3:ec:ed:
6d:c1:05:3e:0a:c8:42:3a:ba:70:1b:7c:85:2a:f1:
73:4c:b1:de:02:29:6d:0a:97:70:95:8d:48:54:5c:
98:f0:b3:d5:2d:cb:6e:f3:fa:56:81:0e:9d:15:50:
8b:55:dd:f4:ac:04:ab:1f:37:e0:e0:67:92:47:7b:
b5:62:55:15:f5:04:19:16:0a:41:bf:5e:74:22:00:
f3:d1:6f:78:cb:1e:77:e3:3c:26:40:cd:86:09:47:
01:5b:6e:a8:76:cb:4d:f7:d7:6c:da:40:6c:4b:20:
4d:98:4d:3f:9d:82:92:95:28:a6:1b:b5:e3:30:02:
ff:62:f0:fc:32:49:1a:75:bb:2a:ef:fd:e1:9d:b7:
f8:29:e6:9a:96:95:4c:36:02:2e:29:2b:6c:8b:13:
80:20:da:cb:5a:1a:06:e7:59:19:ce:6f:80:e9:7e:
df:50:ad:b7:26:c0:cb:2e:ad:02:f4:8e:66:67:65:
97:01:38:90:ea:7a:41:7e:d3:a8:fe:d7:af:49:21:
42:00:c5:25:a7:3f:b7:fd:7a:fa:f3:e9:df:50:2b:
ce:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D6:FB:8F:DC:BC:49:55:57:F2:A0:12:52:77:44:AE:E8:FD:00:0C
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/g9b7j9y8SVVX8qASUndEruj9AAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.244.0/22
195.178.144.0/23
195.178.152.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:3d:23:8f:05:43:d0:62:1c:3a:6a:ca:32:81:13:09:0c:ac:
a2:bd:43:1e:11:8f:69:ba:65:25:24:e7:f4:5e:d7:cf:93:5a:
a1:3a:2b:c9:fa:cc:2e:57:9d:0a:23:19:57:56:2f:d4:f2:82:
d3:90:67:dc:95:34:50:81:c1:d2:43:88:3d:92:38:d1:ca:c8:
9c:e0:b4:2f:14:68:d6:f3:d3:7a:b1:c4:7f:7a:29:3b:8d:c7:
3f:5b:15:2f:80:e7:0a:84:3e:a2:a9:d6:cd:88:a5:bb:44:7c:
15:d4:1a:ac:8a:67:a7:fa:9f:c7:51:8f:f0:9a:0b:a8:dc:36:
07:39:a8:38:bb:b7:c5:db:db:ba:eb:a6:46:35:13:76:36:7f:
5b:60:ab:7d:d0:3d:f2:ba:19:19:c9:26:2d:89:ab:a6:2a:ac:
49:76:e5:ee:82:df:51:3e:0a:18:c7:31:c1:a1:61:40:d0:b7:
cc:74:dd:6e:94:22:b2:f1:d7:64:4e:10:b8:11:58:de:8b:8d:
fc:73:c1:0f:54:6a:c7:a3:e8:d4:df:a1:a7:ec:33:97:27:94:
1e:b8:55:f7:c6:a0:b7:38:76:d5:01:39:d3:67:7b:74:22:42:
e1:d5:99:16:4f:b8:f5:60:d1:ed:12:4b:34:d5:94:a9:d0:7f:
0d:75:ab:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org