Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/p6pAqDYy1SFgBHswVd5khlx_tuM.roa
File: p6pAqDYy1SFgBHswVd5khlx_tuM.roa (raw, json)
Hash identifier: jdrRgVyyNm3maHAlWyM1xgYXKzuJOJeF56YqgmEH1xA=
Subject key identifier: A7:AA:40:A8:36:32:D5:21:60:04:7B:30:55:DE:64:86:5C:7F:B6:E3
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018264A7ABEADEF545C68778676768D649D2
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/p6pAqDYy1SFgBHswVd5khlx_tuM.roa
Signing time: Wed 03 Aug 2022 17:01:26 +0000
ROA not before: Wed 03 Aug 2022 17:01:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399587
IP address blocks: 77.47.252.0/22 maxlen: 24
77.47.248.0/22 maxlen: 24
195.178.128.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:64:a7:ab:ea:de:f5:45:c6:87:78:67:67:68:d6:49:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 3 17:01:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7aa40a83632d52160047b3055de64865c7fb6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a1:99:ea:8a:46:30:90:b8:ae:fa:0b:82:1c:
a3:d2:f7:86:7e:34:8f:b9:f7:4e:fe:28:20:8f:64:
c7:9b:82:e5:f6:fd:3d:5e:ca:99:fc:f6:f7:8c:9a:
46:77:a5:e3:43:fa:57:db:32:d3:36:ec:0c:4f:81:
cf:21:ab:dd:fc:a9:59:7b:17:69:1c:5c:24:03:e9:
5d:ab:f7:1d:a0:d0:00:9b:05:9b:75:8b:89:d9:84:
57:a1:b4:a3:83:fd:55:71:a4:7d:08:dc:93:f6:7a:
9a:e1:b0:66:77:be:9f:c9:dc:93:18:92:e3:d0:80:
aa:c1:7b:bd:fa:45:ce:6e:35:ad:aa:64:67:91:2c:
bd:3b:ed:ed:60:1a:fa:a4:01:98:00:ac:94:0d:7a:
0f:c6:57:61:9c:3c:1c:28:cb:b2:5d:41:c5:a0:4c:
92:eb:ca:bf:3c:d9:3a:74:d6:b2:2d:d7:83:74:4c:
79:15:10:91:1b:e1:09:9e:b3:08:75:dd:8f:7a:94:
04:31:94:fc:e1:6e:5d:d7:7b:da:b6:0a:bc:a5:2d:
90:fc:10:c0:31:e7:fb:8a:1c:67:a4:d2:c9:29:98:
aa:fb:17:8d:50:0f:22:f9:31:40:e9:a0:15:e2:83:
06:4f:42:f7:a6:ad:a7:b5:d8:a6:85:fe:4f:1b:6c:
02:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AA:40:A8:36:32:D5:21:60:04:7B:30:55:DE:64:86:5C:7F:B6:E3
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/p6pAqDYy1SFgBHswVd5khlx_tuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.248.0/21
185.143.56.0/22
195.178.128.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:34:d0:c2:ff:04:89:d3:03:3f:59:91:eb:82:52:d3:68:26:
4f:ff:d0:09:0e:f2:16:da:bf:64:3d:4a:7f:af:21:d0:d3:a7:
da:eb:33:48:41:d6:c1:29:20:8d:03:40:54:2d:9a:db:68:a2:
65:14:a2:32:bc:8f:4a:91:b1:6e:66:8b:3d:14:01:45:bc:69:
6b:06:81:58:15:55:c8:49:c4:00:9c:58:2d:4e:3b:c4:07:d3:
5d:bb:5d:1f:c1:2a:2b:92:92:d7:86:c1:94:41:3e:bb:68:75:
cc:39:5d:43:31:89:13:37:36:02:95:7d:5c:d8:70:98:2f:bf:
c3:53:2e:e4:a1:53:94:8c:9f:c5:5c:04:e9:76:e2:fc:7a:36:
35:29:cd:81:e4:58:6a:00:df:c7:4c:11:76:c9:d4:c4:b0:3f:
e1:eb:5d:85:4e:e9:ce:cf:71:fe:ea:dd:14:cf:a7:61:bf:e2:
15:4f:64:e9:f8:9d:ef:ad:b9:8c:62:4e:12:cd:1d:3f:e2:63:
74:08:e0:33:71:e3:50:4c:08:80:a7:61:ff:a8:3e:65:5f:66:
24:2a:35:83:ed:41:d1:94:73:82:d5:c3:68:1e:e1:f2:91:eb:
af:d1:ad:cb:3d:da:f1:3f:1e:f6:a1:39:81:36:2c:15:d9:9e:
fd:2a:28:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:22 2023 by rpki-client on console-fra.rpki-client.org