Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/hGfx_ZTeG9mbVilTYBnNyr5QDTQ.roa
File: hGfx_ZTeG9mbVilTYBnNyr5QDTQ.roa (raw, json)
Hash identifier: r/XCzZk4ftWx+m5dInpOl1RGfa0zuIChuLt3Ew0jI6w=
Subject key identifier: 84:67:F1:FD:94:DE:1B:D9:9B:56:29:53:60:19:CD:CA:BE:50:0D:34
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01827E806CEAF44747C2CAB174F29C8131A8
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/hGfx_ZTeG9mbVilTYBnNyr5QDTQ.roa
Signing time: Mon 08 Aug 2022 17:28:41 +0000
ROA not before: Mon 08 Aug 2022 17:28:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 996
IP address blocks: 212.111.211.0/24 maxlen: 24
212.111.216.0/23 maxlen: 24
212.111.218.0/23 maxlen: 24
77.47.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7e:80:6c:ea:f4:47:47:c2:ca:b1:74:f2:9c:81:31:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 8 17:28:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8467f1fd94de1bd99b5629536019cdcabe500d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:e1:f7:fc:ad:c8:dd:f7:f4:28:f9:d5:db:
f0:e3:0f:86:0a:4c:01:a7:35:13:16:8c:66:4a:3d:
26:29:00:8a:eb:1e:00:e7:12:07:eb:96:57:82:83:
c9:66:2b:7e:72:cf:87:40:f4:0e:1e:47:1f:8b:38:
46:a2:cb:14:6b:41:8d:0a:00:d8:dc:29:31:19:82:
4e:87:de:0f:b6:01:d3:54:68:ea:c8:df:a1:e5:85:
7e:ee:a2:a3:08:c9:f0:8c:38:dc:30:a1:41:b7:a2:
84:9e:2f:62:cf:a4:92:34:67:41:e0:0b:4d:40:cf:
11:4b:d4:a4:25:0f:2b:8c:15:0d:2f:f5:1c:f7:4f:
59:97:ff:2e:e3:bb:2c:30:6a:4d:9a:36:be:ab:56:
19:f2:40:64:bf:c6:64:cf:82:1f:44:38:93:46:4b:
c3:c5:68:77:fc:4e:8b:ea:50:fa:03:ba:8b:6b:19:
12:95:fe:33:b6:6d:11:77:52:fe:c4:c2:ab:dc:de:
a7:2a:48:eb:fb:6b:bb:5e:2f:db:8f:28:7f:6e:33:
4c:5a:49:6f:9d:1d:8d:28:92:5a:f5:2a:0a:55:a5:
17:a4:cb:7b:b4:bf:c3:30:00:94:dc:54:d3:d5:2e:
1d:d5:f1:12:89:14:09:09:2a:14:34:97:01:1f:7b:
7f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:67:F1:FD:94:DE:1B:D9:9B:56:29:53:60:19:CD:CA:BE:50:0D:34
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/hGfx_ZTeG9mbVilTYBnNyr5QDTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.180.0/22
212.111.211.0/24
212.111.216.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:95:1b:ef:31:c1:fd:dc:20:7a:03:fe:1b:5e:ae:91:f5:c2:
60:d7:17:27:05:b9:9e:3b:85:b3:09:30:73:d6:97:4a:80:16:
81:65:d1:d8:a2:64:23:ca:74:f0:cb:9c:1e:3a:bc:d8:f0:14:
98:19:44:92:d0:ac:4e:21:6f:93:f2:5b:72:50:03:06:ab:a5:
74:1b:dc:6f:85:13:38:03:80:28:ad:ad:33:f4:33:ae:ac:48:
dc:71:74:ba:1b:f4:72:26:56:9d:b4:42:ba:c9:72:06:1c:f3:
4e:a5:b2:c0:b1:e8:af:a5:d0:d1:ab:84:24:8d:e3:49:1a:1d:
a6:0c:45:46:e4:ac:f5:30:38:bd:bc:20:a9:40:6c:96:de:b2:
72:a0:a9:df:d6:4a:30:0d:ea:f2:fe:b2:53:69:12:77:a7:6b:
b4:32:16:0d:08:b7:90:2b:f3:b3:3d:26:f4:11:02:92:6a:a3:
f9:e0:50:11:71:fc:ed:3b:84:a9:3a:0b:7c:13:e8:84:36:18:
bd:c3:02:f5:20:44:06:d7:cd:c1:95:4d:8c:f9:00:b5:86:64:
18:64:06:30:c4:0a:06:8d:60:c2:a7:5f:8a:41:68:54:9b:ab:
f8:4e:56:91:8e:a0:c9:5c:d9:22:81:1c:a6:61:ec:d9:76:3b:
71:10:c5:b2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYJ+gGzq9EdHwsqxdPKcgTGoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjIwODA4MTcyODQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDY3ZjFmZDk0ZGUxYmQ5OWI1NjI5NTM2MDE5Y2RjYWJlNTAwZDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJfh9/ytyN339Cj51dvw4w+GCkwB
pzUTFoxmSj0mKQCK6x4A5xIH65ZXgoPJZit+cs+HQPQOHkcfizhGossUa0GNCgDY
3CkxGYJOh94PtgHTVGjqyN+h5YV+7qKjCMnwjDjcMKFBt6KEni9iz6SSNGdB4AtN
QM8RS9SkJQ8rjBUNL/Uc909Zl/8u47ssMGpNmja+q1YZ8kBkv8Zkz4IfRDiTRkvD
xWh3/E6L6lD6A7qLaxkSlf4ztm0Rd1L+xMKr3N6nKkjr+2u7Xi/bjyh/bjNMWklv
nR2NKJJa9SoKVaUXpMt7tL/DMACU3FTT1S4d1fESiRQJCSoUNJcBH3t/rQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIRn8f2U3hvZm1YpU2AZzcq+UA00MB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvaEdmeF9aVGVHOW1iVmlsVFlCbk55cjVRRFRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCTS+0AwQA
1G/TAwQC1G/YMA0GCSqGSIb3DQEBCwUAA4IBAQCslRvvMcH93CB6A/4bXq6R9cJg
1xcnBbmeO4WzCTBz1pdKgBaBZdHYomQjynTwy5weOrzY8BSYGUSS0KxOIW+T8lty
UAMGq6V0G9xvhRM4A4Aora0z9DOurEjccXS6G/RyJladtEK6yXIGHPNOpbLAseiv
pdDRq4QkjeNJGh2mDEVG5Kz1MDi9vCCpQGyW3rJyoKnf1kowDery/rJTaRJ3p2u0
MhYNCLeQK/OzPSb0EQKSaqP54FARcfztO4SpOgt8E+iENhi9wwL1IEQG183BlU2M
+QC1hmQYZAYwxAoGjWDCp1+KQWhUm6v4TlaRjqDJXNkigRymYezZdjtxEMWy
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org