Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/vH3FyhU7_BPZ8zMdFwc-ncjUbok.roa
File: vH3FyhU7_BPZ8zMdFwc-ncjUbok.roa (raw, json)
Hash identifier: ut1y8qSblfFBr+dJ29baGTAbtr8xbl1CaETbmUod4Zg=
Subject key identifier: BC:7D:C5:CA:15:3B:FC:13:D9:F3:33:1D:17:07:3E:9D:C8:D4:6E:89
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1D6BB389
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/vH3FyhU7_BPZ8zMdFwc-ncjUbok.roa
Signing time: Wed 30 Mar 2022 18:14:15 +0000
ROA not before: Wed 30 Mar 2022 18:14:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.111.211.0/24 maxlen: 24
77.47.210.0/23 maxlen: 24
77.47.212.0/23 maxlen: 24
212.111.216.0/23 maxlen: 24
212.111.218.0/23 maxlen: 24
77.47.240.0/23 maxlen: 24
77.47.252.0/22 maxlen: 24
77.47.248.0/22 maxlen: 24
195.178.128.0/22 maxlen: 24
195.178.142.0/23 maxlen: 24
185.143.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493597577 (0x1d6bb389)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 30 18:14:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc7dc5ca153bfc13d9f3331d17073e9dc8d46e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:ca:9b:0c:84:77:6d:80:58:c9:16:7a:cf:
6d:d1:c3:74:92:83:95:dd:6d:a5:53:3b:c9:ca:92:
a2:b4:3a:a3:28:0a:88:67:2b:4f:77:8b:20:9c:4c:
fb:71:93:40:34:36:e8:80:17:4d:71:e8:7b:44:7a:
4d:1a:df:e0:a4:5b:37:49:be:bc:f4:2c:3b:02:ee:
5a:92:18:9c:dd:ba:c6:b5:06:3e:c6:74:98:9f:ac:
2e:8b:67:7d:b1:35:88:84:50:46:d1:c8:9a:6f:cd:
6d:4b:7c:c9:e0:a1:72:8a:4b:09:93:01:63:d7:0b:
1a:d0:c0:4a:b5:f8:ff:f3:e3:5e:c7:0f:db:d6:1c:
e7:e6:f9:bf:a3:7c:a7:9a:ee:83:09:08:42:52:d1:
87:d2:fa:35:0b:d4:9d:e4:cd:a0:01:07:0a:a0:0a:
7f:37:a0:5e:07:75:77:41:a7:e0:98:1c:1e:e1:ad:
29:85:a1:78:3f:a4:27:42:0a:82:b2:21:08:cc:6b:
4f:5e:74:46:c9:2b:9e:08:60:4a:6f:d0:48:4f:91:
f9:7c:42:45:e1:52:1b:7c:fa:01:d9:8f:76:58:9d:
9b:8e:0d:55:09:c1:6f:00:48:40:c9:8d:73:03:e4:
ba:4b:03:36:f5:ef:f5:26:fa:88:b6:00:88:46:7a:
a8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7D:C5:CA:15:3B:FC:13:D9:F3:33:1D:17:07:3E:9D:C8:D4:6E:89
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/vH3FyhU7_BPZ8zMdFwc-ncjUbok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.210.0-77.47.213.255
77.47.240.0/23
77.47.248.0/21
185.143.56.0/22
195.178.128.0/22
195.178.142.0/23
212.111.211.0/24
212.111.216.0/22
Signature Algorithm: sha256WithRSAEncryption
06:a1:c8:5b:44:d6:64:73:68:a2:a4:4d:9f:17:6f:60:fb:48:
5c:58:e2:5e:cb:d3:ce:64:84:df:3e:7d:4c:d5:dd:8a:78:79:
59:b7:c8:de:a6:1b:ef:e6:37:73:9f:30:24:4d:00:30:7f:9a:
65:37:54:1a:57:1a:51:e3:36:c2:7a:7a:bd:c4:9f:6e:95:bb:
a7:da:a3:46:e4:50:5d:ec:36:67:46:d8:18:45:fc:d3:31:37:
3c:d9:08:ff:68:e4:7b:21:7d:15:98:30:c0:44:71:42:bf:2c:
bd:19:7a:44:4d:e5:f3:fb:cc:4f:4a:26:82:cc:6f:ad:7d:ab:
0b:b1:85:61:99:9b:1a:12:0a:cd:46:2c:f8:a2:b2:b4:7b:b6:
4c:25:6b:a9:1f:7b:0d:20:6c:1c:29:29:4c:58:42:c2:f5:12:
36:53:14:5e:ea:ce:32:5b:3d:01:79:c1:73:2d:ff:38:29:a3:
cc:d8:2e:cd:00:91:74:2a:c2:0e:a0:32:44:f8:c4:e8:59:2b:
d0:08:d4:66:95:95:3c:c6:65:d1:e9:1a:0d:7a:10:ee:8f:da:
16:aa:81:e0:0d:c7:e8:3e:ea:91:a8:83:b7:30:10:10:69:c7:
8e:2a:28:db:fe:4c:b2:81:8b:e4:6b:28:8a:60:0a:6e:b5:9d:
a5:78:ae:8a
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIEHWuziTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTQyNjMyNWFjYjhjZTYwOWE2ODZmYTY1NWIwNTg5Njg4MDliMzQ2MB4XDTIyMDMz
MDE4MTQxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmM3ZGM1Y2ExNTNi
ZmMxM2Q5ZjMzMzFkMTcwNzNlOWRjOGQ0NmU4OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALYyypsMhHdtgFjJFnrPbdHDdJKDld1tpVM7ycqSorQ6oygK
iGcrT3eLIJxM+3GTQDQ26IAXTXHoe0R6TRrf4KRbN0m+vPQsOwLuWpIYnN26xrUG
PsZ0mJ+sLotnfbE1iIRQRtHImm/NbUt8yeChcopLCZMBY9cLGtDASrX4//PjXscP
29Yc5+b5v6N8p5rugwkIQlLRh9L6NQvUneTNoAEHCqAKfzegXgd1d0Gn4JgcHuGt
KYWheD+kJ0IKgrIhCMxrT150RskrnghgSm/QSE+R+XxCReFSG3z6AdmPdlidm44N
VQnBbwBIQMmNcwPkuksDNvXv9Sb6iLYAiEZ6qPkCAwEAAaOCAjswggI3MB0GA1Ud
DgQWBBS8fcXKFTv8E9nzMx0XBz6dyNRuiTAfBgNVHSMEGDAWgBQZQmMlrLjOYJpo
b6ZVsFiWiAmzRjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dVSmpKYXk0em1DYWFHLW1WYkJZbG9nSnMwWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvOGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8x
L3ZIM0Z5aFU3X0JQWjh6TWRGd2MtbmNqVWJvay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
OGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8xL0dVSmpKYXk0em1D
YWFHLW1WYkJZbG9nSnMwWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBR
BggrBgEFBQcBBwEB/wRCMEAwPgQCAAEwODAMAwQBTS/SAwQBTS/UAwQBTS/wAwQD
TS/4AwQCuY84AwQCw7KAAwQBw7KOAwQA1G/TAwQC1G/YMA0GCSqGSIb3DQEBCwUA
A4IBAQAGochbRNZkc2iipE2fF29g+0hcWOJey9POZITfPn1M1d2KeHlZt8jephvv
5jdznzAkTQAwf5plN1QaVxpR4zbCenq9xJ9ulbun2qNG5FBd7DZnRtgYRfzTMTc8
2Qj/aOR7IX0VmDDARHFCvyy9GXpETeXz+8xPSiaCzG+tfasLsYVhmZsaEgrNRiz4
orK0e7ZMJWupH3sNIGwcKSlMWELC9RI2UxRe6s4yWz0BecFzLf84KaPM2C7NAJF0
KsIOoDJE+MToWSvQCNRmlZU8xmXR6RoNehDuj9oWqoHgDcfoPuqRqIO3MBAQaceO
Kijb/kyygYvkayiKYAputZ2leK6K
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org