Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/4nGhV2OCExMMn_d07PEgvfHRwAc.roa
File: 4nGhV2OCExMMn_d07PEgvfHRwAc.roa (raw, json)
Hash identifier: /Mo/4d6GEc8uGUiZ4Hf7JlrCaq+2KvvWy/B+RWnwXWU=
Subject key identifier: E2:71:A1:57:63:82:13:13:0C:9F:F7:74:EC:F1:20:BD:F1:D1:C0:07
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1D366CED
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/4nGhV2OCExMMn_d07PEgvfHRwAc.roa
Signing time: Thu 24 Mar 2022 09:22:50 +0000
ROA not before: Thu 24 Mar 2022 09:22:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.244.0/22 maxlen: 22
77.47.248.0/22 maxlen: 24
77.47.252.0/22 maxlen: 24
77.47.148.0/22 maxlen: 24
77.47.152.0/24 maxlen: 24
195.178.144.0/21 maxlen: 21
77.47.154.0/24 maxlen: 24
77.47.153.0/24 maxlen: 24
77.47.155.0/24 maxlen: 24
77.47.156.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490106093 (0x1d366ced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 24 09:22:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e271a157638213130c9ff774ecf120bdf1d1c007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:7e:57:f7:cf:25:5a:15:ea:ca:8e:c2:c3:
d5:8e:27:4a:70:40:14:7c:59:24:5d:4f:64:fb:78:
47:b2:6c:17:51:ed:6b:b9:86:f2:61:bb:8d:29:c8:
2b:c6:ec:0c:b6:13:1c:f1:d2:a4:ef:ae:e4:43:c4:
a7:66:1c:a8:1f:fd:58:b2:63:6c:94:e4:00:80:62:
a4:27:54:f5:eb:85:f1:38:a0:00:13:77:b7:20:fb:
56:16:cc:8c:22:33:20:0f:0a:4d:4a:8f:81:c8:29:
41:4a:92:c0:e9:28:ad:f2:ae:b7:1b:c1:ae:79:37:
4d:89:eb:ee:09:1e:88:82:b6:c6:ce:7f:ce:e3:3d:
c4:0b:5b:bb:31:97:3b:fc:c0:56:75:bf:b9:dd:ae:
be:2f:3b:b1:f9:a4:33:61:bc:7b:24:29:ab:f1:f7:
7f:6e:9b:4e:66:e2:1b:f3:21:da:2b:fb:77:6d:8d:
8b:69:f7:fa:a1:d0:31:25:6f:7c:4e:e9:1f:ab:91:
5c:06:0e:2d:a8:cd:fe:bd:ae:23:93:7f:47:5b:f0:
fd:f1:7a:2a:10:45:32:50:87:22:a2:63:a4:60:68:
93:68:ef:c8:93:0b:a8:64:72:47:b3:b8:6e:36:32:
61:3d:6e:47:d4:44:3b:39:14:2a:24:86:ae:3f:25:
03:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:71:A1:57:63:82:13:13:0C:9F:F7:74:EC:F1:20:BD:F1:D1:C0:07
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/4nGhV2OCExMMn_d07PEgvfHRwAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.148.0-77.47.159.255
77.47.244.0-77.47.255.255
185.143.56.0/22
195.178.144.0-195.178.155.255
Signature Algorithm: sha256WithRSAEncryption
9a:74:4c:1a:f4:43:5d:e0:31:9c:c3:fe:68:d5:fc:24:9a:9c:
55:da:d8:18:f1:b3:84:ab:2f:0f:47:c7:6e:f8:6c:47:fc:80:
04:7b:ca:97:4f:c0:50:e4:4e:e4:2c:26:99:b1:9f:c4:f2:59:
af:c3:5d:fb:72:42:62:68:85:ff:46:11:81:5c:55:f7:b7:66:
e0:32:a7:be:fe:b7:4b:7f:82:e9:76:30:ab:43:12:7a:be:bc:
e4:58:f2:b0:64:e8:c3:23:78:a2:a7:79:c1:fb:85:f6:fa:c3:
05:1e:5b:dd:24:98:1f:6d:26:ba:e5:31:a1:1c:6f:23:94:46:
74:c2:94:06:48:d5:ca:2b:ae:3a:78:4b:7e:b3:cd:e4:08:e8:
72:54:a4:28:4c:50:10:ff:88:aa:a0:9b:a0:95:21:41:9a:ee:
f7:00:d3:34:7f:c0:93:f8:87:66:d3:ac:d2:af:31:e0:b8:96:
b2:1d:2c:0e:ad:33:aa:e8:bd:d2:db:ed:bc:84:ed:5e:e1:2d:
ea:b4:b6:f6:b1:00:7a:ef:e1:08:70:73:fa:d0:f3:62:e6:56:
8f:ce:a6:76:9a:9b:48:33:8d:00:02:0c:9d:d9:48:76:a3:24:
ab:40:1d:18:2b:7b:0b:28:17:fd:01:76:f0:cb:a2:06:13:56:
ac:ef:d6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org