Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/qfWBEOq5lWeBFWr4rz-9OgR8v4E.roa
File: qfWBEOq5lWeBFWr4rz-9OgR8v4E.roa (raw, json)
Hash identifier: YXPxYHUrkkpKiy5HkI8Ufpt7kKFGJBumsPoowPAVYt4=
Subject key identifier: A9:F5:81:10:EA:B9:95:67:81:15:6A:F8:AF:3F:BD:3A:04:7C:BF:81
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1D18E2C8
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/qfWBEOq5lWeBFWr4rz-9OgR8v4E.roa
Signing time: Wed 16 Mar 2022 09:56:48 +0000
ROA not before: Wed 16 Mar 2022 09:56:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3319
IP address blocks: 195.178.144.0/21 maxlen: 21
185.143.56.0/22 maxlen: 24
195.178.152.0/22 maxlen: 22
77.47.210.0/23 maxlen: 24
77.47.212.0/23 maxlen: 24
77.47.240.0/23 maxlen: 24
77.47.244.0/22 maxlen: 22
77.47.248.0/22 maxlen: 24
195.178.128.0/22 maxlen: 24
77.47.252.0/22 maxlen: 24
77.47.148.0/22 maxlen: 24
77.47.152.0/24 maxlen: 24
77.47.154.0/24 maxlen: 24
77.47.153.0/24 maxlen: 24
77.47.155.0/24 maxlen: 24
77.47.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488170184 (0x1d18e2c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 16 09:56:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9f58110eab9956781156af8af3fbd3a047cbf81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:e3:99:24:96:da:a8:55:ee:1b:04:44:34:
2d:66:18:f6:1b:53:27:93:b7:bd:df:30:4c:d9:47:
5f:17:0b:09:96:8b:a7:4e:a1:7c:98:7f:a8:15:f7:
c1:34:f5:1b:0d:2b:07:ec:94:b8:21:0c:04:91:03:
ac:80:ba:ff:56:e4:82:3e:03:2e:53:ff:77:ca:b8:
78:55:38:5f:f7:fc:bc:0b:9e:5a:26:f1:9a:40:0f:
fc:83:7a:a5:a6:02:2f:e3:d9:96:6e:ed:35:21:2a:
ce:ee:87:ce:fb:0d:cc:34:12:0a:4d:90:d8:2d:ae:
79:0e:cd:90:22:03:09:91:c2:8a:df:08:da:f7:2a:
79:25:7e:29:13:ea:f9:cf:d2:46:8f:01:79:8b:a7:
b8:e6:29:9e:42:e7:8b:45:ea:c3:82:5b:3e:79:02:
ad:62:12:df:1e:77:44:6c:b5:d0:47:09:67:8e:fc:
e8:0d:b9:fe:9f:83:9e:e2:94:02:18:50:45:d6:f1:
95:e9:4f:38:c4:69:f6:5e:48:b1:c0:fc:c4:3d:61:
c0:48:7f:21:62:86:c5:14:96:f6:ee:80:d9:9f:3c:
32:fa:68:8b:6d:d7:bf:7a:21:49:ae:06:aa:7b:ae:
be:55:b5:03:7f:e1:e8:3f:97:83:48:82:9f:e3:a9:
a3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F5:81:10:EA:B9:95:67:81:15:6A:F8:AF:3F:BD:3A:04:7C:BF:81
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/qfWBEOq5lWeBFWr4rz-9OgR8v4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.148.0-77.47.159.255
77.47.210.0-77.47.213.255
77.47.240.0/23
77.47.244.0-77.47.255.255
185.143.56.0/22
195.178.128.0/22
195.178.144.0-195.178.155.255
Signature Algorithm: sha256WithRSAEncryption
26:c6:7f:0a:4f:7d:45:1a:28:4b:b4:9a:d9:6b:12:23:b0:4c:
48:20:4f:bf:18:b0:79:21:83:dd:f3:9d:86:a0:d0:9d:54:94:
5a:28:2f:7d:08:6c:99:a5:54:db:26:21:b9:2f:7d:02:6c:57:
9a:52:98:11:7a:36:c5:f6:de:aa:1f:0f:ba:6d:46:7d:65:88:
4c:36:0e:4f:7f:34:62:ad:a5:8a:e2:3b:bb:bd:f7:a8:62:bd:
f7:a1:c0:5f:b4:41:90:21:ea:aa:54:b0:a7:78:66:74:bb:12:
0b:31:86:c1:71:21:07:16:23:8d:88:aa:73:95:2c:b3:57:fa:
8d:6a:c4:03:3d:f4:6f:a4:f7:5d:cf:71:75:ed:09:4a:06:a2:
8e:01:f8:d1:cc:53:4c:30:05:a9:2b:62:d8:00:51:98:12:4a:
93:b0:c1:bf:e5:71:a6:92:b5:b1:80:64:21:14:fe:d4:7b:af:
72:b6:54:dc:28:85:a3:5f:6f:20:6d:e0:1e:80:68:b9:6a:1f:
ca:6e:d0:a7:18:db:e5:a9:31:2d:59:8d:81:d2:97:e1:b8:1b:
35:38:b8:58:df:07:ec:35:a3:2e:81:cf:9a:84:fc:df:85:58:
c6:2b:e9:84:20:ef:d3:fa:25:07:b7:0f:01:3d:36:99:db:7a:
e1:70:71:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org