Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/xNHg9dFCXoTdN8tS3_1IExp2j0I.roa
File: xNHg9dFCXoTdN8tS3_1IExp2j0I.roa (raw, json)
Hash identifier: 3knEs5xNPmXr1L6atDy6Nt+OdKIT5t71QoKC0fuGsCg=
Subject key identifier: C4:D1:E0:F5:D1:42:5E:84:DD:37:CB:52:DF:FD:48:13:1A:76:8F:42
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1D8BF071
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/xNHg9dFCXoTdN8tS3_1IExp2j0I.roa
Signing time: Fri 08 Apr 2022 20:06:56 +0000
ROA not before: Fri 08 Apr 2022 20:06:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 212.111.211.0/24 maxlen: 24
77.47.210.0/23 maxlen: 24
77.47.212.0/23 maxlen: 24
212.111.216.0/23 maxlen: 24
212.111.218.0/23 maxlen: 24
77.47.252.0/22 maxlen: 24
77.47.248.0/22 maxlen: 24
195.178.128.0/22 maxlen: 24
195.178.142.0/23 maxlen: 24
185.143.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495710321 (0x1d8bf071)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Apr 8 20:06:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4d1e0f5d1425e84dd37cb52dffd48131a768f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:72:cc:46:9f:97:d5:1a:75:3b:22:af:ab:b0:
ad:28:3d:44:50:b1:76:2b:59:ca:c2:dc:8f:8e:d8:
bb:e7:a1:20:68:4c:21:67:87:2f:f5:f6:28:35:52:
65:09:62:9c:59:f9:21:23:82:92:17:3a:34:4f:87:
b9:42:a4:bc:a5:5f:7b:6a:a7:2b:81:2c:ef:66:e3:
4a:04:3c:f7:b7:d3:41:68:df:08:18:b8:38:7f:69:
3e:47:02:ca:a4:b3:97:ab:4b:a1:b7:bd:bb:97:71:
54:0f:92:04:f9:da:29:b7:97:08:b5:59:b2:31:07:
fe:dd:26:0b:14:d6:ac:7b:55:41:68:82:bd:9a:db:
15:c0:6a:2e:64:77:d4:dd:b0:bb:4e:b8:45:99:90:
99:af:33:be:a9:25:2c:99:b9:a2:99:d6:23:67:e6:
a1:14:1c:66:91:45:07:86:b7:f7:50:53:9d:97:86:
16:ea:c9:b0:7b:68:55:64:71:5d:30:61:0c:8c:e1:
76:8d:0a:e5:5b:de:cb:4b:67:47:43:e4:47:bf:31:
b7:ac:30:5d:fa:a6:db:91:9d:3b:50:2a:5e:e2:fa:
17:64:dc:39:18:7b:53:ad:70:04:d2:92:fe:95:63:
46:81:e5:32:cc:d1:b7:da:a7:95:fe:4d:06:4f:09:
89:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D1:E0:F5:D1:42:5E:84:DD:37:CB:52:DF:FD:48:13:1A:76:8F:42
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/xNHg9dFCXoTdN8tS3_1IExp2j0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.210.0-77.47.213.255
77.47.248.0/21
185.143.56.0/22
195.178.128.0/22
195.178.142.0/23
212.111.211.0/24
212.111.216.0/22
Signature Algorithm: sha256WithRSAEncryption
46:2f:1d:90:0c:60:85:e9:c5:ad:00:e7:77:a2:69:00:d7:df:
e6:f9:a3:93:a7:e3:fd:67:e5:68:95:29:bc:2a:4c:8f:a8:51:
19:37:45:a7:20:93:1c:17:6b:a0:19:b9:dd:1e:5b:e2:65:11:
0b:17:39:53:8c:65:8d:9c:96:35:e7:44:73:8f:64:ab:5b:bd:
88:3d:69:da:3d:ce:f2:71:1c:49:fa:0f:84:68:32:93:9f:9a:
53:a4:2c:b4:53:cf:0b:3b:46:6d:1f:4a:b2:d0:3e:26:cb:34:
a4:08:e6:b8:4f:49:5a:d3:36:06:cc:ee:15:87:60:d8:38:04:
41:f9:4e:93:fd:44:d2:64:d5:f1:3a:5d:23:d8:eb:82:92:67:
33:60:fb:d2:3a:41:39:b5:97:48:4e:b8:19:15:10:14:98:c2:
32:ae:bb:7f:31:5d:13:0f:dd:fb:bf:85:04:ab:52:b9:19:4a:
83:0f:30:2f:5d:e7:63:39:76:b6:6b:a7:db:f2:e6:cd:f9:9b:
70:8a:2b:5f:19:ec:b2:8a:09:08:a3:c7:18:32:7b:d0:28:df:
5c:13:99:4b:e4:a9:e4:17:93:a9:0b:a5:77:54:c9:6b:07:10:
f1:37:9b:a2:e2:eb:57:f2:de:89:00:ff:42:f4:ff:d5:64:5b:
ff:fc:42:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org