Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/tq3k5Fftg-WismIN1IAFnsmiMxQ.roa
File: tq3k5Fftg-WismIN1IAFnsmiMxQ.roa (raw, json)
Hash identifier: hMPTrMr2akZcJyE7BrNkDtbPRQa15ZQT5Fq1PBvNJMs=
Subject key identifier: B6:AD:E4:E4:57:ED:83:E5:A2:B2:62:0D:D4:80:05:9E:C9:A2:33:14
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1DA0F4B9
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/tq3k5Fftg-WismIN1IAFnsmiMxQ.roa
Signing time: Thu 14 Apr 2022 11:24:04 +0000
ROA not before: Thu 14 Apr 2022 11:24:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 18046
IP address blocks: 77.47.148.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 497087673 (0x1da0f4b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Apr 14 11:24:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6ade4e457ed83e5a2b2620dd480059ec9a23314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:3c:9a:89:64:27:78:b4:b3:ca:cd:9f:33:
7c:94:84:72:57:77:ef:b8:2e:33:07:0b:8b:8f:fd:
ea:37:6f:5b:77:77:d0:3a:18:43:75:62:b9:7c:24:
a2:c6:86:a7:fe:48:88:30:fc:65:a1:8c:33:15:1b:
61:64:0b:0a:29:de:45:e4:8b:96:20:9b:8c:a2:b7:
97:ef:94:c3:50:72:08:7d:66:6b:03:4e:90:c8:79:
9f:2b:49:af:24:17:da:15:8e:f2:8f:7b:a9:2c:ea:
44:54:29:dc:f8:b6:bf:69:e4:fd:e2:13:2f:6b:4d:
59:24:53:c3:98:9b:5f:0e:22:dc:eb:09:e0:32:8c:
16:37:09:c2:dd:91:cb:ba:f3:54:f7:47:25:0f:36:
1a:07:9d:2e:38:bb:de:fa:67:fe:9e:47:20:9d:04:
71:25:a2:1d:64:3c:76:df:70:fd:8c:2b:3c:4d:51:
fb:8b:31:fb:ab:32:53:1b:d4:d8:50:80:1d:8f:36:
41:17:21:c8:ad:8a:9b:4f:19:46:48:1a:85:87:f6:
a6:e2:fd:f4:9c:28:91:d1:6c:dd:bf:bf:55:2e:34:
49:7a:c6:e3:61:df:e3:6a:19:2b:37:b3:0f:02:89:
64:1c:a6:ae:9c:ea:64:67:da:eb:da:21:2f:37:4d:
3d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AD:E4:E4:57:ED:83:E5:A2:B2:62:0D:D4:80:05:9E:C9:A2:33:14
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/tq3k5Fftg-WismIN1IAFnsmiMxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.148.0/22
Signature Algorithm: sha256WithRSAEncryption
75:d5:16:ff:fb:90:7c:fa:d3:da:f2:6f:65:db:df:b4:23:da:
77:7c:9b:c0:eb:46:aa:56:84:04:b6:0e:ff:c6:29:1c:ea:83:
9d:79:3b:9a:31:9b:b9:c8:8a:c9:3a:35:ea:8c:91:f2:11:61:
f5:a1:1b:ce:25:46:50:ed:d6:74:a4:22:e3:b0:e7:3a:c0:55:
25:cf:8a:9d:e6:01:be:f2:59:16:33:3c:56:6e:42:1a:b3:3d:
3b:a8:70:c1:0e:bd:96:d2:5c:fb:2d:e3:8e:d4:ed:46:84:d5:
33:5d:53:d2:24:c0:64:9b:2e:0e:ed:36:98:e5:89:6c:92:22:
5b:66:b9:87:50:1d:63:68:61:8a:b2:ff:3c:07:c3:5d:01:67:
24:90:9a:28:fc:ba:c1:ff:14:e8:68:e7:0c:ab:61:eb:93:11:
03:77:79:f1:07:61:8e:32:1f:4d:8d:3c:d4:1d:2d:f7:e7:0a:
88:19:be:43:54:c5:26:85:7c:75:73:1f:4b:2a:b7:31:64:a0:
4d:55:57:50:b8:bf:65:a9:bd:de:15:a8:10:c5:c5:c5:ee:36:
c5:95:22:a7:6b:3e:33:05:b8:20:f5:03:c8:e6:45:f7:4a:0e:
64:b8:3b:9f:ee:72:0d:f5:54:61:e7:57:1e:69:ae:9a:ab:fe:
90:ed:9e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org