Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/jZBeIYmcqZjBUGLA5rwaXpFiLR8.roa
File: jZBeIYmcqZjBUGLA5rwaXpFiLR8.roa (raw, json)
Hash identifier: +N5E+Un3RJAa6zgtfWWNaqq5CEVBuDZa20dpOTqwHfA=
Subject key identifier: 8D:90:5E:21:89:9C:A9:98:C1:50:62:C0:E6:BC:1A:5E:91:62:2D:1F
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01821CC008D3C192575BE572A4961D37B51B
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/jZBeIYmcqZjBUGLA5rwaXpFiLR8.roa
Signing time: Wed 20 Jul 2022 17:55:23 +0000
ROA not before: Wed 20 Jul 2022 17:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 195.178.128.0/22 maxlen: 24
77.47.252.0/22 maxlen: 24
77.47.248.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1c:c0:08:d3:c1:92:57:5b:e5:72:a4:96:1d:37:b5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 20 17:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d905e21899ca998c15062c0e6bc1a5e91622d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5f:7e:f8:93:3d:ca:7c:57:8f:ee:bd:0f:76:
bc:c8:20:99:ff:d4:5a:8b:51:6f:5b:4d:28:5b:d5:
30:63:f5:87:9c:52:d6:ae:3c:63:a8:2c:27:d1:ca:
1a:25:05:55:64:e1:e5:08:91:24:4c:78:d2:db:7a:
bc:28:24:b7:e1:33:d3:24:1b:71:dd:33:a6:42:87:
2c:64:7b:f7:5a:1e:8e:06:3f:d0:34:b7:35:7d:c8:
11:b9:07:c8:a9:9a:b2:03:7a:10:ce:79:c9:8f:7c:
3e:64:88:48:0c:a8:8f:4d:bb:8b:72:a0:16:f0:18:
fa:ea:72:22:a8:e3:04:ce:0e:d6:71:f7:8b:69:22:
38:34:0f:3d:ef:2b:ca:29:7a:07:b2:69:17:7e:09:
6c:47:46:fc:00:96:f9:ae:1a:3f:ce:b3:d8:da:24:
06:18:a2:8a:87:f2:c0:02:70:1f:f4:a3:22:6a:4d:
32:e5:07:9d:ce:4c:8b:84:2d:62:b1:99:66:02:f6:
97:ca:58:70:36:16:2c:b8:8b:f2:db:f6:60:85:c9:
e5:3e:24:28:61:ae:54:d5:6b:52:c7:4c:44:13:7f:
b4:0e:05:8f:d0:70:39:fe:20:3c:35:0f:f6:59:c6:
66:c9:71:20:c7:17:a8:47:f7:d6:b2:b3:bb:29:1e:
50:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:90:5E:21:89:9C:A9:98:C1:50:62:C0:E6:BC:1A:5E:91:62:2D:1F
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/jZBeIYmcqZjBUGLA5rwaXpFiLR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.248.0/21
185.143.56.0/22
195.178.128.0/22
Signature Algorithm: sha256WithRSAEncryption
32:5f:b2:b3:9c:4b:66:ae:03:87:f0:b8:76:19:29:cd:58:71:
c9:48:0f:c9:a0:ae:e0:86:74:12:fa:2d:6e:44:0d:56:d5:fa:
02:68:3f:72:05:b6:a7:ee:e0:52:eb:e2:31:4a:60:8f:cf:0c:
46:f4:92:14:4b:1c:38:34:f6:b8:8b:f4:2c:87:30:4b:a9:79:
16:bc:a8:c4:68:56:ff:a2:59:1c:f6:52:ea:cb:c7:c3:f9:81:
cd:fa:6e:a4:16:ee:ab:4b:64:33:ae:65:dc:a6:dd:d3:75:c2:
27:5d:1a:ac:b0:c3:0f:40:e2:6c:e2:1e:5b:51:34:23:70:2c:
47:b8:4d:91:b6:3d:57:a0:84:b3:eb:c7:85:7d:62:b5:fd:b7:
5e:79:0c:bd:a3:18:9b:c1:b1:11:f9:c4:71:22:04:14:5e:13:
4b:9a:01:8a:70:4a:56:23:5f:3b:fa:98:35:57:86:c5:fb:ac:
23:38:86:f9:d7:e0:aa:06:b0:39:31:81:1d:f2:20:09:8c:57:
2e:d6:ae:4c:76:be:00:87:91:b7:2b:e5:bb:52:0d:78:6a:ed:
55:04:0a:3d:7d:3e:82:4b:62:b2:65:50:4a:e0:05:68:d1:89:
00:32:25:08:d5:b4:a6:3b:92:47:34:25:7c:78:87:f9:1b:9d:
c2:89:ae:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:06 2023 by rpki-client on console-ams.rpki-client.org