Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/rOrp6G-O7Uc9Dl3JsiBdFSlX42s.roa
File: rOrp6G-O7Uc9Dl3JsiBdFSlX42s.roa (raw, json)
Hash identifier: b2UCh073+9gyG0V97ILb6IPZvDcMbEgxBzbCHRzV46A=
Subject key identifier: AC:EA:E9:E8:6F:8E:ED:47:3D:0E:5D:C9:B2:20:5D:15:29:57:E3:6B
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018225964CC8C78A5798C1C4C6A5C271E27B
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/rOrp6G-O7Uc9Dl3JsiBdFSlX42s.roa
Signing time: Fri 22 Jul 2022 11:06:23 +0000
ROA not before: Fri 22 Jul 2022 11:06:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207083
IP address blocks: 77.47.212.0/23 maxlen: 24
77.47.240.0/23 maxlen: 24
195.178.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:25:96:4c:c8:c7:8a:57:98:c1:c4:c6:a5:c2:71:e2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 22 11:06:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aceae9e86f8eed473d0e5dc9b2205d152957e36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6d:cd:3a:88:a6:db:ce:60:c3:86:a8:7f:fd:
9a:92:a7:d7:a7:05:f9:84:29:72:fd:e3:1f:75:80:
48:f2:3f:50:49:45:8c:1d:08:57:ed:1e:eb:71:e3:
5a:ae:5e:61:a3:06:ae:5d:a9:70:f9:0f:db:9c:ef:
85:0e:99:72:f7:c9:3b:70:71:fc:9e:c1:14:dd:89:
0e:b3:43:e9:72:78:77:cb:ce:93:98:81:f4:6e:d0:
ed:2e:76:59:63:b4:1d:ef:12:97:7e:76:df:b7:77:
21:c5:f1:ae:1a:c2:54:65:fc:2c:9c:5f:ea:00:ed:
91:57:5d:6a:0c:aa:1f:1d:ab:50:0c:b0:f0:54:05:
c2:ab:08:46:34:b2:a6:d3:01:b0:10:3e:44:d3:95:
0d:e8:8a:ce:b3:89:79:46:8b:91:28:cf:72:cf:11:
6e:fa:b1:90:f8:dd:1d:4f:9c:ba:4f:cc:1a:38:00:
a2:45:1b:b5:9d:da:61:8e:72:45:cc:45:4d:a4:56:
9a:8a:b9:c4:a0:e6:fd:b2:ae:5c:19:50:d7:e2:01:
7c:dd:52:a6:43:80:94:18:77:a9:54:da:f4:ec:e8:
93:86:8e:2a:c3:1f:ab:96:86:ac:a4:8d:d1:62:26:
c8:3d:61:be:d0:63:d8:df:73:eb:f4:c7:bc:19:5c:
0a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EA:E9:E8:6F:8E:ED:47:3D:0E:5D:C9:B2:20:5D:15:29:57:E3:6B
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/rOrp6G-O7Uc9Dl3JsiBdFSlX42s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.212.0/23
77.47.240.0/23
195.178.142.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:77:30:af:39:99:40:59:44:8d:87:5f:16:ae:3c:9e:0d:fb:
78:a1:48:7e:0e:4e:5d:d3:99:cb:3b:60:81:cc:1b:19:7f:a7:
cb:c8:8f:f5:2d:98:f3:9b:14:59:88:8f:fa:66:09:f6:ac:f1:
5f:12:57:40:6f:ba:36:11:f6:83:b7:53:e8:83:d5:6d:2a:74:
0c:b4:1f:e7:86:a3:7e:bb:c7:b3:2a:cc:33:ae:55:bd:73:6f:
1a:eb:e2:03:dd:ad:b3:0a:2d:20:c2:23:f6:d7:a7:f2:83:65:
50:17:e6:63:df:57:16:37:f0:7e:6d:9d:f6:e7:00:98:ef:d3:
7f:a5:98:4a:39:51:14:9d:4a:bc:d0:7a:e1:41:b4:82:f6:6b:
3a:7f:fb:85:27:56:ff:bd:6b:6e:00:d4:b2:ae:00:b0:21:d4:
d3:c8:d8:f2:12:61:68:16:e1:d0:ba:92:c1:c1:a9:8e:bf:f6:
c2:6b:e4:0c:00:7c:d3:55:ca:de:09:d5:de:f2:65:ba:eb:e0:
2c:5f:67:88:2b:a0:b1:44:c2:bc:ff:92:73:e0:c7:19:30:91:
9e:78:4d:c1:ff:48:c1:57:3f:37:59:bd:60:b2:8c:5a:8b:57:
c1:84:25:56:6b:d8:98:2f:a2:85:a5:d6:b6:d2:08:d7:e3:5a:
ef:81:83:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org