Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/joyoehr-D4DWpRX5UB0ccnzooXQ.roa
File: joyoehr-D4DWpRX5UB0ccnzooXQ.roa (raw, json)
Hash identifier: +BZqIaBKmoVCYRP+57u93EYHYe3Dbj/rK/z7nItxRF0=
Subject key identifier: 8E:8C:A8:7A:1A:FE:0F:80:D6:A5:15:F9:50:1D:1C:72:7C:E8:A1:74
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1C68CAC5
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/joyoehr-D4DWpRX5UB0ccnzooXQ.roa
Signing time: Thu 13 Jan 2022 14:57:45 +0000
ROA not before: Thu 13 Jan 2022 14:57:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.111.211.0/24 maxlen: 24
212.111.216.0/23 maxlen: 24
212.111.218.0/23 maxlen: 24
77.47.148.0/22 maxlen: 24
195.178.142.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476629701 (0x1c68cac5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 13 14:57:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e8ca87a1afe0f80d6a515f9501d1c727ce8a174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4a:0f:fd:85:a7:c5:7f:63:37:a5:e6:e2:7a:
d7:27:ac:bc:85:36:6b:7d:c1:1d:10:aa:5d:96:38:
c4:36:e8:52:ba:80:10:5b:b5:a5:84:c3:ed:da:06:
10:19:6d:74:2b:dc:62:10:7f:b7:09:dd:08:ec:8f:
be:f9:91:6c:a2:51:02:0d:44:37:e0:7d:d1:ca:72:
53:68:81:77:f3:46:84:3a:3a:4b:ec:fb:8f:fc:8a:
95:3d:61:88:70:fe:16:4f:b2:18:04:35:55:6a:0a:
a6:16:b5:96:f8:34:b5:99:59:43:80:24:c0:6e:d4:
30:f1:1f:6e:b3:92:af:c8:04:3f:c5:29:8f:45:d4:
87:12:fb:dd:e9:62:31:66:50:c9:2a:3c:56:8f:cc:
3f:bf:e0:1d:9b:32:72:a7:7d:e9:25:92:f3:ca:b5:
07:1b:09:e8:d7:5d:42:57:b1:34:58:08:1f:06:8e:
b1:93:10:d5:41:94:b6:6d:74:b3:fd:77:1a:c6:51:
32:9f:e6:d8:92:a8:ec:87:c7:bc:f3:1e:32:eb:a8:
52:de:9d:e8:7d:f5:d7:40:6d:fc:d4:c2:73:ae:ca:
2d:d9:d7:31:0b:fa:a0:2f:42:bc:f8:b3:9a:d5:96:
39:e1:8d:84:67:fe:2f:6b:75:8d:13:91:76:28:9e:
db:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8C:A8:7A:1A:FE:0F:80:D6:A5:15:F9:50:1D:1C:72:7C:E8:A1:74
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/joyoehr-D4DWpRX5UB0ccnzooXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.148.0/22
195.178.142.0/23
212.111.211.0/24
212.111.216.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:26:ec:92:92:88:1a:cc:47:8e:e4:da:ba:1f:5b:1e:ee:66:
88:57:9b:3b:a0:9e:fd:22:1c:3e:14:99:8c:8d:c5:8b:3b:0b:
52:74:e5:3c:fa:24:bd:1a:d1:0e:04:13:0a:5b:e0:47:cc:41:
8a:57:92:af:a2:74:7f:a8:78:10:f5:7f:75:f6:f9:c9:fd:af:
c2:ab:79:5e:30:40:57:ad:ab:56:10:e9:ba:b3:d2:1a:25:33:
95:d8:a3:25:8b:a4:b2:24:fa:f1:6d:32:33:1e:fa:26:db:b5:
93:2e:1f:f3:23:14:f7:3c:19:51:fb:08:14:f0:e8:fd:4c:1a:
73:60:ba:4e:d3:cc:69:e0:2a:35:9d:ae:de:01:13:cd:5a:d6:
af:b7:8f:41:08:f8:22:e7:23:58:0f:04:c0:89:fd:e6:35:45:
ae:54:f0:78:19:a9:97:31:2b:3a:01:4f:13:ca:83:d1:29:da:
97:fc:29:9a:b4:b6:30:f8:39:c0:22:72:88:e4:9b:bf:d6:c2:
e1:3c:e1:0c:b1:82:b9:12:eb:b2:cc:f1:a6:a0:be:8f:6b:40:
d6:57:a1:17:9b:c8:b4:d0:43:2c:98:13:34:18:ef:a6:f6:06:
e3:73:86:38:00:41:01:40:a3:11:ed:e6:1c:02:34:e4:75:be:
94:d5:cc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org