Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/vadJGNhQZZ6dWbMQXDkM0EoXIxE.roa
File: vadJGNhQZZ6dWbMQXDkM0EoXIxE.roa (raw, json)
Hash identifier: J9QjAlaOI2r0thFwUeREoXC3+NQCftYh20knDUANysw=
Subject key identifier: BD:A7:49:18:D8:50:65:9E:9D:59:B3:10:5C:39:0C:D0:4A:17:23:11
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1D3A1A5B
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/vadJGNhQZZ6dWbMQXDkM0EoXIxE.roa
Signing time: Thu 24 Mar 2022 20:11:17 +0000
ROA not before: Thu 24 Mar 2022 20:11:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 77.47.212.0/24 maxlen: 24
77.47.210.0/24 maxlen: 24
77.47.211.0/24 maxlen: 24
77.47.213.0/24 maxlen: 24
77.47.240.0/24 maxlen: 24
77.47.241.0/24 maxlen: 24
195.178.140.0/24 maxlen: 24
195.178.141.0/24 maxlen: 24
195.178.146.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490347099 (0x1d3a1a5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 24 20:11:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bda74918d850659e9d59b3105c390cd04a172311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:f7:49:a7:4a:c1:73:08:5e:b0:82:38:08:
c1:18:03:30:0e:a0:15:5c:1e:7f:86:55:9b:95:39:
1e:2a:88:67:7e:1e:2b:2e:cf:6c:57:a0:bb:c8:9b:
72:45:a7:53:25:20:74:93:c2:3b:7b:3d:13:fc:04:
08:4f:2b:a0:16:c5:b1:de:86:7c:a8:08:5b:5b:c3:
3c:4e:b2:8f:a0:63:3d:27:41:e8:7e:5b:07:94:a1:
c3:ee:57:fc:77:f4:a1:f6:fa:27:35:f7:29:a6:53:
f0:41:69:41:cd:c2:db:52:bf:fe:c5:44:49:df:6d:
f3:81:3a:f9:bf:89:28:5e:be:07:e2:92:e1:0d:29:
63:e3:50:9a:b5:e3:66:23:3c:91:d4:cf:15:bb:b9:
8a:7a:1f:b1:6a:eb:84:5e:a3:03:e9:0d:9b:b7:6f:
cf:d5:13:57:e1:58:e5:36:ee:68:c4:f4:16:d4:4f:
a0:ac:da:61:04:95:65:21:75:86:23:c9:2f:56:33:
53:5e:7a:a7:82:dd:29:af:08:14:b9:c1:33:4b:38:
aa:bb:88:ad:d7:ca:13:43:a6:8e:77:cf:7f:30:65:
1b:96:11:87:19:dd:bf:ae:d5:81:e1:7a:07:1b:05:
06:11:71:24:d1:ed:7f:3e:2b:6a:52:4b:d6:2b:aa:
8a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A7:49:18:D8:50:65:9E:9D:59:B3:10:5C:39:0C:D0:4A:17:23:11
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/vadJGNhQZZ6dWbMQXDkM0EoXIxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.210.0-77.47.213.255
77.47.240.0/23
195.178.140.0/23
195.178.146.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:bd:6c:8b:e8:6f:88:ff:8c:87:99:e5:74:89:43:95:79:33:
0c:fc:d7:e3:4a:61:3d:73:b7:17:9f:4f:61:2d:0a:2a:56:8e:
52:24:f2:f1:f9:db:c2:c1:f6:b0:fb:d5:58:65:ee:dc:d5:45:
ef:7e:63:9e:32:1f:1a:7c:4e:f6:20:76:30:5c:c5:6e:32:8a:
ef:7a:81:3d:86:26:ed:eb:ac:73:75:d1:71:cb:6d:2b:71:45:
f2:49:01:e6:96:40:8e:e9:f0:5a:af:93:a3:f6:53:55:23:1d:
3e:f9:37:3d:ff:7d:e9:fb:81:6b:63:c9:ac:51:65:68:60:c5:
8e:8b:b1:ff:b8:93:13:19:93:41:16:db:17:b7:15:f9:78:30:
e7:91:85:f2:50:80:9a:d0:5a:a0:0f:cc:90:6d:e2:b0:2d:c8:
df:c2:b4:d3:ae:6f:bf:71:15:29:58:e6:42:4a:a0:a6:23:89:
49:9d:25:b3:87:55:8e:c0:10:a1:37:49:ad:d1:cd:85:6d:f1:
cc:df:32:b5:59:11:b8:c5:6c:a6:33:d8:0d:26:0c:4e:1e:df:
53:fa:99:5f:4d:a4:24:c8:0a:2a:a8:ee:c1:b4:80:1f:e8:95:
9b:5f:38:f9:1f:0a:ba:4e:31:49:85:b1:f6:36:2c:87:66:e0:
d3:a1:0b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org