Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/PU2euzc7NIeyshXews8Wiav-sfk.roa
File: PU2euzc7NIeyshXews8Wiav-sfk.roa (raw, json)
Hash identifier: P5E/R22woi+EYSGw9VVFZFtzxGrLRde8JxpOHTRy+X0=
Subject key identifier: 3D:4D:9E:BB:37:3B:34:87:B2:B2:15:DE:C2:CF:16:89:AB:FE:B1:F9
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2B15E2F9
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/PU2euzc7NIeyshXews8Wiav-sfk.roa
Signing time: Sat 01 Jan 2022 13:58:10 +0000
ROA not before: Sat 01 Jan 2022 13:58:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205708
IP address blocks: 193.192.161.0/24 maxlen: 24
193.192.162.0/24 maxlen: 24
193.192.160.0/24 maxlen: 24
193.192.163.0/24 maxlen: 24
77.65.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722854649 (0x2b15e2f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:58:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d4d9ebb373b3487b2b215dec2cf1689abfeb1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e4:91:50:b2:41:d2:fe:7e:2f:75:46:b4:ec:
6c:06:d2:d5:8b:ea:6b:b3:f1:52:c7:14:24:6e:c7:
58:41:7c:4e:65:70:d0:ab:99:fc:01:e9:2c:31:b2:
b2:21:14:79:cf:e3:52:c5:26:44:c6:a5:b6:cc:48:
1c:c1:43:e9:50:8f:3c:50:eb:71:e2:0f:54:9e:c1:
12:66:84:0a:7d:16:b7:80:3d:a9:9d:d3:1c:0a:d5:
98:8b:e0:c1:ae:3e:ef:46:a1:7c:a7:4b:05:0c:43:
af:e0:d4:34:18:53:96:12:ab:fe:bf:60:9c:ff:5d:
6c:21:05:f2:b6:22:81:ca:06:2f:19:3e:3c:04:e8:
00:2d:c1:5d:1b:43:92:5f:e4:43:c9:fd:27:48:f7:
b0:28:ad:38:92:ab:c0:ea:38:1a:37:95:38:c6:03:
08:d3:e8:fe:dc:fc:be:aa:bf:90:e3:4c:b5:d3:4f:
d2:e5:eb:14:33:9c:0d:dc:59:d2:32:21:4e:b4:0a:
30:6e:22:2e:3e:f8:f1:4f:20:0d:2e:1a:55:1b:9b:
2c:d2:1e:98:15:87:0a:e3:ab:e0:00:6a:66:6b:5f:
11:1b:83:84:30:d6:af:9f:b0:33:ba:85:3a:10:b7:
17:6a:a1:21:59:de:34:86:e5:f1:26:86:e8:6e:6d:
35:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4D:9E:BB:37:3B:34:87:B2:B2:15:DE:C2:CF:16:89:AB:FE:B1:F9
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/PU2euzc7NIeyshXews8Wiav-sfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.141.0/24
193.192.160.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:f5:4e:e1:69:1f:fb:5c:bf:1e:94:cd:d7:a1:6e:a0:8e:c7:
56:f4:76:41:bf:a3:16:9f:15:05:69:41:cb:46:af:a7:b9:88:
ca:0a:45:ef:84:3c:3d:ce:80:00:fb:73:05:05:8a:8e:2f:af:
e0:ec:df:ec:1c:c1:dd:52:9b:b5:d2:f9:84:55:c9:01:d0:ac:
f3:04:24:c4:aa:0c:85:81:af:26:51:92:67:1b:e8:0c:a9:b3:
82:93:db:5f:00:b5:16:67:82:a3:04:43:bb:fb:81:e5:c3:3e:
df:1a:54:04:38:c9:04:85:3d:8f:54:cb:e7:88:a0:89:8c:66:
0f:28:7f:eb:2e:32:d6:3b:2b:6e:ff:83:22:3b:f6:0c:58:18:
19:84:31:a5:a5:73:76:12:9e:99:f7:3f:4b:4c:e8:12:39:61:
2b:24:eb:f9:70:64:cb:e3:85:da:38:f6:94:ff:53:82:8a:de:
ec:02:7a:4e:31:f7:0f:0c:1e:0f:a3:d4:43:f1:ad:df:58:a3:
c0:1f:29:c3:4d:44:ac:22:15:df:5f:17:94:ca:03:fe:ff:2a:
23:00:ec:34:12:3f:4b:60:29:a5:03:d1:70:3d:46:0e:06:1b:
77:8f:99:69:3d:1d:ed:da:ef:a8:d3:ed:63:81:b7:b2:c4:bf:
37:5f:94:7a
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEKxXi+TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
OTk1NDQ5OTk3NzI3OGE3NTU3MGIzNDAzZjRkM2FhMDBiMWIzNmU4MB4XDTIyMDEw
MTEzNTgxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2Q0ZDllYmIzNzNi
MzQ4N2IyYjIxNWRlYzJjZjE2ODlhYmZlYjFmOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALzkkVCyQdL+fi91RrTsbAbS1Yvqa7PxUscUJG7HWEF8TmVw
0KuZ/AHpLDGysiEUec/jUsUmRMaltsxIHMFD6VCPPFDrceIPVJ7BEmaECn0Wt4A9
qZ3THArVmIvgwa4+70ahfKdLBQxDr+DUNBhTlhKr/r9gnP9dbCEF8rYigcoGLxk+
PAToAC3BXRtDkl/kQ8n9J0j3sCitOJKrwOo4GjeVOMYDCNPo/tz8vqq/kONMtdNP
0uXrFDOcDdxZ0jIhTrQKMG4iLj748U8gDS4aVRubLNIemBWHCuOr4ABqZmtfERuD
hDDWr5+wM7qFOhC3F2qhIVneNIbl8SaG6G5tNYECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQ9TZ67Nzs0h7KyFd7CzxaJq/6x+TAfBgNVHSMEGDAWgBS5lUSZl3J4p1Vw
s0A/TTqgCxs26DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VaVkVtWmR5ZUtkVmNMTkFQMDA2b0FzYk51Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDcvNzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0Ny8x
L1BVMmV1emM3TklleXNoWGV3czhXaWF2LXNmay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcv
Nzg4ODAzLWJlMTItNDMzZi1hOGQwLTAyNGIxNjU1YzI0Ny8xL3VaVkVtWmR5ZUtk
VmNMTkFQMDA2b0FzYk51Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAE1BjQMEAsHAoDANBgkqhkiG9w0B
AQsFAAOCAQEADfVO4Wkf+1y/HpTN16FuoI7HVvR2Qb+jFp8VBWlBy0avp7mIygpF
74Q8Pc6AAPtzBQWKji+v4Ozf7BzB3VKbtdL5hFXJAdCs8wQkxKoMhYGvJlGSZxvo
DKmzgpPbXwC1FmeCowRDu/uB5cM+3xpUBDjJBIU9j1TL54igiYxmDyh/6y4y1jsr
bv+DIjv2DFgYGYQxpaVzdhKemfc/S0zoEjlhKyTr+XBky+OF2jj2lP9Tgore7AJ6
TjH3DwweD6PUQ/Gt31ijwB8pw01ErCIV318XlMoD/v8qIwDsNBI/S2AppQPRcD1G
DgYbd4+ZaT0d7drvqNPtY4G3ssS/N1+Ueg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org