Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/s79-kxvoA5CoYDq9BQc5yh8bXH8.roa
File: s79-kxvoA5CoYDq9BQc5yh8bXH8.roa (raw, json)
Hash identifier: 4ej7eDKMB0eY5A2YTm78i9dveh9b6cv0uxpOmg+yJ/E=
Subject key identifier: B3:BF:7E:93:1B:E8:03:90:A8:60:3A:BD:05:07:39:CA:1F:1B:5C:7F
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01847AB1348C971438D9D25BB879469ED631
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/s79-kxvoA5CoYDq9BQc5yh8bXH8.roa
Signing time: Tue 15 Nov 2022 09:49:04 +0000
ROA not before: Tue 15 Nov 2022 09:49:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 77.47.152.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7a:b1:34:8c:97:14:38:d9:d2:5b:b8:79:46:9e:d6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Nov 15 09:49:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3bf7e931be80390a8603abd050739ca1f1b5c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:61:c8:0f:6c:cc:4e:12:fe:17:74:5b:43:a6:
a2:44:fb:03:e7:70:e6:5e:0b:9e:17:d7:f7:92:f9:
e5:5e:24:82:b6:01:0c:aa:9b:29:f6:ea:69:07:f8:
c4:4d:3a:e9:e1:b8:83:12:07:d4:de:ec:ff:3e:08:
7e:f1:6d:b8:0f:ca:5b:02:a8:f1:e3:d9:d7:5a:b6:
e0:22:79:62:39:e2:12:53:78:b2:ca:8e:04:c9:34:
ca:90:b8:6e:0c:c3:f6:be:70:d1:1e:cc:bd:89:18:
3f:31:dc:20:43:aa:54:5e:37:25:64:3e:1a:5b:d1:
1e:29:e5:13:d3:34:a9:4b:4e:ba:7e:d4:1a:2f:51:
03:ae:17:e4:1c:b9:64:96:b0:a8:76:87:f5:6e:7d:
85:fa:e4:d3:6c:88:08:5f:be:c8:07:65:e3:b2:cf:
7d:a0:e7:dd:eb:b4:c5:71:5b:12:42:9c:1a:81:32:
ca:10:70:c3:11:62:f0:2d:dc:d7:75:1b:02:93:8f:
82:4e:69:83:a6:07:49:b1:f8:70:03:1c:3b:df:70:
d1:9b:18:61:b9:f5:63:22:7e:0a:58:9b:78:de:02:
90:bd:76:fb:4c:7a:80:77:8a:2a:d0:ba:60:e6:11:
6e:64:f2:ce:3e:66:29:23:0c:68:da:b1:b5:75:5b:
7e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BF:7E:93:1B:E8:03:90:A8:60:3A:BD:05:07:39:CA:1F:1B:5C:7F
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/s79-kxvoA5CoYDq9BQc5yh8bXH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.152.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:fc:ea:e7:3d:21:ff:4e:77:b4:14:b5:6f:2d:c1:bb:dd:b9:
04:6b:b3:1a:52:22:bf:bd:25:af:be:de:dd:5f:69:78:92:63:
59:e3:7e:18:e7:70:5c:9e:f7:c0:b5:4a:6c:0b:75:1f:59:ac:
73:76:ba:ca:49:2c:75:0c:a2:5d:f3:b2:c2:e4:1d:e2:02:e3:
c3:92:1c:b8:05:d5:cd:35:8b:5a:41:75:59:bc:85:8b:9e:68:
02:e1:d9:96:da:11:51:74:78:65:6b:d0:d0:bd:59:8c:c6:87:
46:e7:22:3e:3b:bb:a1:c9:09:11:c4:b3:04:63:6e:66:ed:13:
23:74:8b:48:ba:11:6d:15:33:38:d0:0a:97:5b:4d:6c:eb:17:
e9:61:c8:6b:1c:75:f1:fe:53:78:82:0e:08:9b:72:9c:9a:15:
64:aa:60:f6:e5:c8:84:20:18:7c:f2:fd:16:e5:d9:b1:13:32:
23:86:e9:ef:87:d8:ef:42:7d:d7:76:88:4f:66:05:6f:e2:67:
a1:fd:a9:42:ad:93:33:1b:b0:ea:18:14:3c:07:05:a9:1e:cf:
04:ae:8d:d6:8f:ed:9d:5b:ff:8f:d5:5b:81:4f:fb:62:3d:0b:
75:6f:f9:51:13:29:e5:51:46:e9:8e:8a:58:a1:0c:cf:bd:e3:
1d:fc:c6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org