Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/8HgQc44fehyRop0OA_LWtRWtRFo.roa
File: 8HgQc44fehyRop0OA_LWtRWtRFo.roa (raw, json)
Hash identifier: ngTLfgaL7mFC63+KmJW7DlPBKF2i+wZBHJwct/vVHog=
Subject key identifier: F0:78:10:73:8E:1F:7A:1C:91:A2:9D:0E:03:F2:D6:B5:15:AD:44:5A
Certificate issuer: /CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Certificate serial: 052EB315
Authority key identifier: 1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/8HgQc44fehyRop0OA_LWtRWtRFo.roa
Signing time: Tue 28 Jun 2022 10:20:03 +0000
ROA not before: Tue 28 Jun 2022 10:20:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41931
IP address blocks: 77.46.32.0/19 maxlen: 19
77.46.64.0/20 maxlen: 20
77.46.80.0/20 maxlen: 20
77.46.96.0/20 maxlen: 20
195.177.196.0/23 maxlen: 23
77.46.4.0/22 maxlen: 22
77.46.8.0/21 maxlen: 21
77.46.112.0/20 maxlen: 20
77.46.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86946581 (0x52eb315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Validity
Not Before: Jun 28 10:20:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f07810738e1f7a1c91a29d0e03f2d6b515ad445a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:5d:90:ae:6b:a2:47:36:d1:77:39:fc:dd:
29:05:b6:6a:00:0b:46:7f:e8:8e:2e:b1:2d:be:70:
c3:3d:27:f1:21:59:53:38:e6:1a:58:73:22:8e:23:
c0:09:b8:05:76:e7:ce:2f:ee:99:15:c4:ef:2b:13:
71:c7:26:b9:cb:b7:a5:37:e9:ed:8e:39:4a:b9:b9:
2e:3d:fa:a2:bd:07:1c:23:4b:f0:6c:e9:b4:90:54:
f6:d0:ef:ef:76:32:99:d4:2e:d0:71:94:e3:34:3c:
d9:e5:f1:bf:ed:4d:7f:4b:d3:69:37:a5:26:9f:7d:
1f:c6:38:41:39:22:74:ed:e6:17:7f:d0:48:a2:ec:
f4:72:92:dd:81:0e:a0:ed:da:39:1d:30:f0:f3:5a:
f3:2b:40:03:f9:a0:0b:3f:b3:e9:f6:66:11:58:cf:
57:7d:4e:b7:c8:7e:bc:0f:28:e6:4a:32:42:21:32:
fd:84:35:8a:49:7a:db:41:c6:9b:f0:d2:80:12:3e:
6a:cc:b0:c0:2e:24:f3:dc:ac:a2:68:29:18:4a:3a:
1b:1e:d1:ff:14:f0:96:81:c9:e1:97:a5:a0:2a:e6:
a3:1e:e1:b1:9c:1c:96:fa:9f:77:38:27:12:5a:5f:
7a:58:1a:80:f9:bf:47:72:e1:46:56:a6:6b:a0:4f:
27:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:78:10:73:8E:1F:7A:1C:91:A2:9D:0E:03:F2:D6:B5:15:AD:44:5A
X509v3 Authority Key Identifier:
keyid:1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/8HgQc44fehyRop0OA_LWtRWtRFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.46.4.0-77.46.127.255
195.177.196.0/23
Signature Algorithm: sha256WithRSAEncryption
50:09:6b:72:1f:9f:cf:b6:fe:3e:91:84:b0:64:84:b6:21:92:
8c:0d:b7:06:63:36:fd:cc:9f:ae:61:9e:40:f2:0b:a7:51:82:
5b:68:74:ea:e1:b6:b9:f8:44:66:0a:ce:f5:ee:56:c7:8c:37:
12:9b:59:61:d6:4d:30:7a:6c:16:87:e6:67:95:3f:53:2b:b9:
63:ce:e6:aa:4c:33:44:d5:69:72:c3:b9:16:d9:41:41:b6:a4:
a2:6a:41:fd:13:c4:b5:59:6d:41:48:2e:5c:13:f5:b9:35:d6:
38:9f:16:a3:3b:d2:f9:f7:de:67:ab:70:8c:28:05:07:a9:31:
2d:76:55:d4:92:e7:d1:cb:40:bd:38:b4:4c:50:cb:af:2c:70:
ed:58:35:cf:ab:a4:93:42:ed:bd:a0:86:99:2c:be:b3:57:c6:
34:52:35:8c:ce:a1:e7:0a:d7:10:70:43:fa:88:8d:f7:ae:2a:
6a:f7:9b:07:62:42:ab:aa:a3:a1:39:96:9f:b8:af:70:b5:fb:
38:55:c2:b8:75:8e:cc:8d:ac:95:cb:cd:9f:48:d0:d0:20:00:
e0:40:47:76:d7:b7:ea:e5:b6:14:43:43:8a:db:aa:93:9a:ef:
82:b8:b7:98:f5:39:8b:09:b7:e5:d7:11:28:06:76:a1:b4:c8:
a0:5f:66:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:11 2024 by rpki-client on console-ams.rpki-client.org