Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/hYabzbi2xcqpAI89WWvdUsU0F7g.roa
File: hYabzbi2xcqpAI89WWvdUsU0F7g.roa (raw, json)
Hash identifier: DTSUkL+KDfneplNgScVxyBXCUc6Rfz4u3IgHuTf6opM=
Subject key identifier: 85:86:9B:CD:B8:B6:C5:CA:A9:00:8F:3D:59:6B:DD:52:C5:34:17:B8
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1E7554CF
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/hYabzbi2xcqpAI89WWvdUsU0F7g.roa
Signing time: Fri 01 Jul 2022 07:11:02 +0000
ROA not before: Fri 01 Jul 2022 07:11:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 77.47.142.0/24 maxlen: 24
77.47.157.0/24 maxlen: 24
77.47.156.0/24 maxlen: 24
77.47.178.0/24 maxlen: 24
77.47.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511005903 (0x1e7554cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 1 07:11:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85869bcdb8b6c5caa9008f3d596bdd52c53417b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c8:4c:02:74:6d:79:ec:6e:d1:0f:20:c7:98:
3f:4b:b1:db:0d:2e:4c:ef:c9:e6:17:bc:2a:5b:0b:
3a:2b:7c:d9:a7:73:3c:dd:6c:8a:d0:80:db:bf:c8:
ad:49:bb:c3:75:a2:0f:36:60:f1:05:08:bc:b5:6b:
f2:72:b3:fa:d1:5e:71:38:da:f2:36:1d:8a:46:05:
5b:e1:0e:98:7c:95:54:1e:d2:a9:14:b0:f6:f3:2f:
20:26:2c:8d:17:bb:aa:90:d4:a1:62:9b:f3:e7:5b:
07:32:9c:ed:77:ca:b7:ce:7b:2d:01:4b:62:5d:43:
c8:e4:b8:f3:55:c6:4f:3e:0a:18:57:b2:c9:85:f9:
f7:40:e1:b0:59:e5:8d:ca:5a:be:35:fb:54:fa:35:
11:fe:cd:b1:da:b0:d9:60:5d:86:85:9b:4a:a5:4b:
02:0b:e2:aa:3e:5c:4f:be:d5:af:af:9e:20:ef:34:
19:06:b4:9d:82:fb:ac:20:09:a1:ff:57:fa:01:9f:
ca:f2:b1:d3:5a:b9:7f:73:7c:74:26:4b:99:9c:9e:
c2:7c:37:87:56:cc:49:55:6a:b9:4f:d5:f5:30:f4:
12:b7:b5:e0:4d:24:29:15:0d:f6:24:9e:45:ef:d8:
1e:85:1e:94:58:ea:70:04:8d:8b:b2:66:7a:9d:99:
97:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:86:9B:CD:B8:B6:C5:CA:A9:00:8F:3D:59:6B:DD:52:C5:34:17:B8
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/hYabzbi2xcqpAI89WWvdUsU0F7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
77.47.156.0/23
77.47.178.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:0c:93:73:f2:cd:a0:23:9d:ee:ec:db:f6:8d:69:e2:23:bc:
9c:03:5b:aa:84:41:bd:8e:a3:fc:90:7e:66:08:bf:0a:77:a2:
42:8e:ce:cd:8c:b9:80:72:36:b3:cf:fa:25:17:87:27:96:ca:
67:6e:da:bf:bb:e9:06:21:8d:b6:e0:d4:53:a1:25:e7:7c:5c:
b2:14:cc:58:f9:26:cc:98:42:2d:5d:bf:26:72:ce:8a:15:da:
10:04:a9:e6:62:5a:4d:61:08:75:dd:15:d7:60:14:00:22:ce:
d8:4d:63:e1:3a:df:88:5e:7c:7d:bd:a6:c0:70:3f:ec:31:d1:
21:ae:26:94:72:93:08:73:2f:7a:92:7f:17:e9:8b:fa:f5:3b:
49:21:f2:6f:67:1f:ce:94:d6:e1:c5:c7:54:45:68:ba:ef:03:
31:66:f7:b2:9a:6a:88:19:a6:cd:33:01:24:78:e7:c3:1f:f4:
f8:48:25:a1:65:84:72:0e:0c:ef:d0:69:9c:b0:2c:9f:b7:86:
71:33:08:a5:fd:b3:38:d8:84:f4:99:97:63:8d:57:43:7d:39:
88:9a:1c:9c:0a:67:2c:41:ed:fe:0e:3c:62:d1:a8:d7:93:ab:
0f:34:f2:6b:6a:33:89:f9:f2:79:39:13:77:32:a4:24:94:ab:
7f:71:f0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org