Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/sXZTHlU_uPaiTeVjLD1_FLGe8K4.roa
File: sXZTHlU_uPaiTeVjLD1_FLGe8K4.roa (raw, json)
Hash identifier: vAHR4KbLnnw5zwz94yOFPGSmETwgA3sp0HEpd2E+Mdg=
Subject key identifier: B1:76:53:1E:55:3F:B8:F6:A2:4D:E5:63:2C:3D:7F:14:B1:9E:F0:AE
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1E1518AD
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/sXZTHlU_uPaiTeVjLD1_FLGe8K4.roa
Signing time: Fri 27 May 2022 14:01:13 +0000
ROA not before: Fri 27 May 2022 14:01:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212953
IP address blocks: 212.111.207.0/24 maxlen: 24
77.47.158.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504699053 (0x1e1518ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: May 27 14:01:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b176531e553fb8f6a24de5632c3d7f14b19ef0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:61:85:8f:2f:dd:23:be:c8:62:8a:4d:95:
66:0b:74:b4:b4:a4:36:d2:84:ed:16:d1:1a:6e:25:
bb:3a:b8:0d:61:2e:68:e1:d8:b1:66:13:93:3a:9a:
6a:dd:4c:ca:97:b5:1f:82:1c:2a:84:ce:4b:54:27:
93:d6:e7:5c:91:28:c3:c0:04:1d:0e:6b:96:fa:dc:
87:f3:04:33:aa:84:e2:1b:26:6b:9c:11:76:13:52:
81:fb:26:02:e7:85:c2:7e:66:1f:34:32:d0:f3:43:
bf:aa:dd:55:01:fa:71:70:43:df:34:9f:8c:74:68:
08:bc:85:72:c0:5a:d9:2d:2e:ae:8c:85:c6:78:92:
5c:a4:ae:51:8c:53:59:1d:6a:0f:82:90:00:ba:73:
6c:51:cd:16:4f:f8:c7:7d:9a:61:b6:e6:ec:e4:9b:
a7:1f:dd:8a:d3:f1:86:33:9b:d5:60:7d:96:fb:8d:
b3:99:17:ab:c5:cb:17:4c:c2:8c:14:cf:13:23:81:
da:46:8e:f3:46:42:90:9a:07:d1:07:18:6f:40:ee:
b2:8d:25:50:fc:75:e8:a1:a3:20:10:fd:64:1b:24:
d0:8a:fe:a5:5c:d1:2b:86:d7:e6:3b:01:53:32:ba:
82:44:c9:d2:41:69:6f:41:f0:7e:01:8c:81:50:b8:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:76:53:1E:55:3F:B8:F6:A2:4D:E5:63:2C:3D:7F:14:B1:9E:F0:AE
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/sXZTHlU_uPaiTeVjLD1_FLGe8K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.158.0/23
212.111.207.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:99:72:d4:bb:8d:16:4d:d3:e5:c3:38:91:32:03:5a:ee:c6:
46:a9:5a:30:c1:41:17:dd:2a:80:df:6d:50:d1:b3:5b:3e:d8:
ba:50:4a:98:82:21:7f:b4:aa:cb:e1:74:da:f8:05:38:41:00:
b6:0b:a8:b7:4a:8c:94:1a:6c:32:54:91:24:c6:c7:ba:4e:c5:
6d:44:b9:96:b9:b1:27:be:00:ed:f3:44:12:26:30:f4:1c:ec:
4f:fa:9d:56:4c:aa:68:86:f5:b0:22:24:b0:55:91:38:58:5c:
30:55:db:b0:42:49:c2:74:e9:5a:a6:85:83:dc:ed:ff:6e:b7:
e5:da:ed:5e:e1:36:b5:ad:21:f7:31:8b:ee:61:0e:01:24:93:
68:d2:d8:bd:db:e6:69:51:05:21:85:b7:ee:80:55:7f:9c:7d:
49:a0:37:d8:74:7a:c3:3c:ce:20:20:fc:d9:76:4f:95:b0:63:
4b:9a:1e:ee:e2:84:c9:88:56:26:4f:0c:78:10:74:7f:b4:98:
b1:44:80:a9:50:0c:47:7e:08:48:e8:24:1f:b7:50:02:72:11:
7d:bf:dd:ea:c0:77:55:25:3e:1f:ae:86:52:a2:03:11:75:e5:
75:87:43:04:86:e8:8b:cd:32:2a:46:65:61:96:76:32:0b:31:
d5:b4:c5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org