Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/z6qHZeFZnGpI4aWrUI6pwjrd6Qs.roa
File: z6qHZeFZnGpI4aWrUI6pwjrd6Qs.roa (raw, json)
Hash identifier: CbVafIc8k9tuK6Gl2LtdQRZNlkTG/f5v2lQSBMCf4KM=
Subject key identifier: CF:AA:87:65:E1:59:9C:6A:48:E1:A5:AB:50:8E:A9:C2:3A:DD:E9:0B
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01848099A87D21CDFB526AD983BBC90134AF
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/z6qHZeFZnGpI4aWrUI6pwjrd6Qs.roa
Signing time: Wed 16 Nov 2022 13:21:04 +0000
ROA not before: Wed 16 Nov 2022 13:21:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 212.111.215.0/24 maxlen: 24
195.178.132.0/22 maxlen: 24
77.47.152.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:80:99:a8:7d:21:cd:fb:52:6a:d9:83:bb:c9:01:34:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Nov 16 13:21:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfaa8765e1599c6a48e1a5ab508ea9c23adde90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:f5:91:97:df:e3:7b:ba:4f:53:29:d6:21:
3c:f3:88:e5:e8:85:37:4b:fe:f2:90:8a:91:e5:40:
5d:e4:05:b3:32:d6:4e:1e:39:9a:ab:08:0f:13:98:
0a:70:2e:79:7e:4e:73:e3:cc:c3:a0:ab:ad:01:b2:
e6:00:a2:7d:7b:17:90:af:94:2c:c4:53:34:6f:ec:
19:87:c8:84:74:d2:5d:7a:a1:fd:2e:b4:1b:cf:9e:
49:55:82:0a:0d:87:88:7d:9e:cd:92:4f:fc:16:be:
4a:a6:2d:67:06:13:fe:7b:9b:63:e3:60:35:11:5b:
38:3c:b6:c9:03:63:42:90:a2:4a:7b:54:89:db:db:
84:67:04:4b:c2:92:92:2a:3b:6b:30:e1:d2:a6:8e:
64:a9:ae:f0:d9:33:17:c8:43:54:77:70:a6:de:fd:
89:62:5c:04:10:11:b1:3b:15:b0:97:2a:23:6f:1e:
1e:6f:51:f1:1e:a8:a6:76:7d:70:9e:91:f6:57:84:
22:8b:77:87:a7:c5:80:91:d3:1d:4e:5f:2e:39:95:
be:ae:5d:00:48:e2:94:f9:fe:88:e6:2c:ea:77:e2:
8a:ce:d6:d8:74:a3:d8:a0:60:03:59:fe:8c:c0:ac:
11:3f:c1:f4:be:1e:e5:45:34:20:48:d1:a6:67:09:
e3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AA:87:65:E1:59:9C:6A:48:E1:A5:AB:50:8E:A9:C2:3A:DD:E9:0B
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/z6qHZeFZnGpI4aWrUI6pwjrd6Qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.152.0/22
195.178.132.0/22
212.111.215.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:a7:c2:59:1b:6b:ab:5e:0c:f9:34:62:a4:3c:b8:98:c3:f2:
44:34:95:db:49:99:4f:fc:bb:0e:82:2c:7f:2e:06:c2:f1:2f:
70:fd:d7:c5:0b:f8:d8:50:f3:d1:14:2e:42:b4:a6:02:73:46:
dd:32:a5:07:1e:1e:7f:5d:89:17:d5:13:42:74:c7:88:b6:0b:
54:24:3f:13:b6:26:9b:d2:20:99:0a:86:80:d3:5e:82:32:97:
59:b1:37:2f:b5:41:5e:e4:d0:c7:ff:b0:67:c3:f8:0e:7e:ef:
ea:37:cd:13:5c:61:6a:e7:d2:81:86:1f:c4:03:4c:c5:91:89:
43:9e:ab:03:de:b4:9e:4f:f2:fa:06:65:88:76:74:3f:57:bd:
9a:0b:a3:20:04:d4:bc:4b:de:83:ad:be:0e:d6:65:03:7d:61:
e3:15:e5:6b:81:e0:f1:4a:a0:4b:cc:3a:33:01:e3:d4:9c:e5:
0c:83:ff:73:52:03:73:c5:92:6e:f3:0a:8f:84:af:69:c8:6a:
8a:40:54:e7:a7:20:a7:f5:11:84:6a:73:b0:0a:b1:ba:99:20:
11:ad:1a:34:6c:6e:d8:a8:1f:de:09:80:de:67:d4:f3:92:a6:
b8:f7:16:cc:df:8e:41:6c:82:9e:dc:c2:69:fc:1c:44:40:f2:
6b:b1:10:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org