Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/quKordt5fbvqtxNiLVF4RiG9t_U.roa
File: quKordt5fbvqtxNiLVF4RiG9t_U.roa (raw, json)
Hash identifier: hns7skE7j+Oq1Yul+WwGOBGP6RXMo7iBdzXeF/rpJVo=
Subject key identifier: AA:E2:A8:AD:DB:79:7D:BB:EA:B7:13:62:2D:51:78:46:21:BD:B7:F5
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1CE1295E
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/quKordt5fbvqtxNiLVF4RiG9t_U.roa
Signing time: Mon 21 Feb 2022 13:59:06 +0000
ROA not before: Mon 21 Feb 2022 13:59:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3319
IP address blocks: 195.178.144.0/21 maxlen: 21
185.143.56.0/22 maxlen: 24
195.178.152.0/22 maxlen: 22
77.47.244.0/22 maxlen: 22
77.47.248.0/22 maxlen: 24
195.178.128.0/22 maxlen: 24
77.47.252.0/22 maxlen: 24
77.47.148.0/22 maxlen: 24
77.47.152.0/24 maxlen: 24
77.47.154.0/24 maxlen: 24
77.47.153.0/24 maxlen: 24
77.47.155.0/24 maxlen: 24
77.47.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484518238 (0x1ce1295e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 21 13:59:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aae2a8addb797dbbeab713622d51784621bdb7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8e:59:99:85:50:f4:6f:1c:c9:3e:9a:75:48:
dc:88:29:f3:da:b2:c4:80:bb:8a:ac:96:22:b9:84:
0c:5f:86:61:23:e7:90:91:fb:ee:3b:c0:d5:23:6e:
7a:a8:d6:12:17:90:6f:99:cb:e7:15:fb:72:43:d4:
e0:5d:86:5a:6f:31:a9:39:ce:2d:a3:73:78:6a:20:
f6:db:8e:2d:3c:16:77:92:d1:bf:c8:b5:b7:7c:89:
61:46:d7:54:8e:0d:fd:0b:68:b1:80:21:cd:2b:9d:
81:5e:c7:79:1b:a8:3e:e3:f1:eb:7d:34:21:a9:aa:
45:7f:1e:a8:ed:66:fb:08:1f:b6:76:ad:a8:84:27:
60:b8:67:9e:d6:4c:d8:2f:dd:78:69:bc:58:52:b3:
e2:60:2b:74:09:88:0d:8f:96:d3:88:6f:69:81:b2:
0f:b1:67:ad:23:82:cf:fd:98:7c:9f:35:cd:0a:3d:
3f:c7:e3:97:2b:a9:d8:b0:53:59:ea:01:11:ba:37:
d5:c4:a5:0b:09:28:e2:0f:87:49:27:93:8a:41:90:
be:8e:e1:35:71:4b:9d:20:d7:e1:2f:11:d4:4a:7c:
b5:72:14:69:25:10:db:23:45:1f:ec:ac:24:2f:0f:
cc:d8:19:c2:3c:77:e4:9e:2a:b9:dd:40:26:c6:22:
5b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E2:A8:AD:DB:79:7D:BB:EA:B7:13:62:2D:51:78:46:21:BD:B7:F5
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/quKordt5fbvqtxNiLVF4RiG9t_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.148.0-77.47.159.255
77.47.244.0-77.47.255.255
185.143.56.0/22
195.178.128.0/22
195.178.144.0-195.178.155.255
Signature Algorithm: sha256WithRSAEncryption
49:5b:b3:02:d3:7c:5c:ff:21:f6:35:b3:f3:f5:a5:83:26:88:
87:9b:59:53:a0:fb:91:49:24:7e:43:b9:d4:87:1a:07:e6:37:
66:f0:be:f8:49:a5:46:45:e9:f2:c3:c3:06:ed:8a:9c:eb:73:
10:0f:fe:f4:2b:5c:93:fa:c7:44:08:60:b5:16:cd:df:54:f5:
5d:7c:c7:e8:ee:c2:b4:a0:7e:e1:c7:fe:6d:e3:c9:a9:78:61:
50:be:ff:f6:ad:d8:b3:5e:19:6c:03:fd:8b:47:f8:d3:42:7b:
f9:10:5e:24:91:2b:60:b2:a9:42:7f:ad:54:43:e0:c6:15:18:
f2:ad:db:cc:db:d6:85:e6:81:e1:d8:22:eb:9f:df:92:da:57:
3a:4f:5a:54:2a:1f:ed:67:bd:21:62:b6:84:2a:66:ef:b7:9a:
85:c7:10:0e:3c:9f:9a:a1:98:e5:b3:a8:7c:18:23:a8:e3:07:
cd:7e:0e:43:f5:a1:c9:b2:fa:a4:eb:81:ff:ff:6d:9f:a3:55:
f1:a5:11:c8:43:9d:ed:25:83:22:30:b8:c4:e0:25:f3:db:cd:
4e:f7:73:1d:40:bf:18:ca:97:4d:51:8e:b9:b6:af:8c:09:df:
96:e5:08:b1:f2:4a:55:08:d7:fb:36:e4:7e:d2:3c:8b:50:a1:
38:54:3c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org