Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/4p5xc8Xr7VfXQ7FkvvEH9X0jYN0.roa
File: 4p5xc8Xr7VfXQ7FkvvEH9X0jYN0.roa (raw, json)
Hash identifier: 0QuA4QdRvsh27iGHzZFvNQsiUQmbmyIqZHROtWZJLg4=
Subject key identifier: E2:9E:71:73:C5:EB:ED:57:D7:43:B1:64:BE:F1:07:F5:7D:23:60:DD
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0183DCBD9919232372751430D65F078E0B78
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/4p5xc8Xr7VfXQ7FkvvEH9X0jYN0.roa
Signing time: Sat 15 Oct 2022 17:42:36 +0000
ROA not before: Sat 15 Oct 2022 17:42:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 195.178.132.0/22 maxlen: 24
77.47.152.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:dc:bd:99:19:23:23:72:75:14:30:d6:5f:07:8e:0b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Oct 15 17:42:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e29e7173c5ebed57d743b164bef107f57d2360dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e8:7d:0c:69:70:c0:78:bd:7c:04:e4:84:ac:
1a:68:fe:8e:1f:fd:40:e7:ce:29:90:af:76:b5:b5:
c0:b4:c8:f2:8a:c3:75:ac:71:92:82:c1:7c:b4:dc:
16:40:9b:2e:01:95:df:17:91:d2:59:15:0b:18:e4:
0a:93:4b:ac:ab:e4:2d:f1:eb:aa:2b:11:1b:4a:72:
bb:22:c6:91:1a:8e:50:53:48:9c:0d:72:f8:d1:b2:
16:e2:30:6b:84:20:51:6a:f2:45:50:3f:f1:ad:d4:
02:83:73:51:ad:6e:96:1b:90:80:b4:68:87:b3:2b:
62:a5:66:1d:68:2e:0e:5e:77:7f:55:1f:5d:8c:02:
18:87:e4:38:33:be:73:a5:e5:de:29:ac:4d:b3:a1:
48:76:19:ab:69:28:2b:76:df:d2:4c:77:07:46:41:
38:aa:18:c9:67:fb:a4:be:23:72:65:d5:f9:f1:24:
ac:c9:7f:14:28:4e:d2:79:8f:24:a1:94:ec:5f:f0:
3b:62:47:21:f9:e8:26:3d:cf:fc:69:96:dc:6d:e4:
76:68:38:b1:2c:72:f5:b9:bd:3a:ae:02:02:13:ac:
71:46:49:85:40:1e:b4:2c:64:d7:4e:77:40:9f:7b:
a8:42:b4:0f:79:60:76:cb:8e:67:ca:3c:b2:6b:01:
66:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9E:71:73:C5:EB:ED:57:D7:43:B1:64:BE:F1:07:F5:7D:23:60:DD
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/4p5xc8Xr7VfXQ7FkvvEH9X0jYN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.152.0/22
195.178.132.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:1e:27:08:35:90:88:4d:5a:d5:25:a3:36:c0:32:6a:67:77:
a5:7d:33:19:cf:d1:a7:36:5c:51:74:68:17:29:fc:fa:b6:4d:
59:e2:89:1b:c3:0b:e7:90:fe:b3:96:98:f5:26:3b:df:1d:52:
1a:53:a8:61:b3:16:2b:6a:34:2c:c9:c2:fc:56:ab:31:5e:1f:
53:fc:d6:cd:ea:fc:e2:40:02:70:fc:7d:c3:33:1e:ad:35:59:
33:7f:a0:a3:8c:d2:1d:40:33:fc:38:49:d6:28:27:57:15:56:
f9:b9:cf:63:4b:d8:d4:38:ea:ef:b2:99:19:83:59:f7:a7:eb:
8a:73:45:e5:8f:5d:ec:86:77:14:45:14:53:95:17:42:6e:f0:
87:14:30:22:83:19:d9:72:76:19:3b:a3:78:06:0a:3c:73:b1:
73:52:0a:62:d3:45:1f:c5:e5:1c:05:6a:46:12:65:cc:80:4c:
4f:db:28:d1:8c:85:19:85:aa:14:97:51:2b:2a:af:d5:b3:0c:
20:3e:e3:9f:cc:8e:86:62:ae:04:6c:88:ce:b7:ab:b0:94:4a:
9e:d2:ab:8b:cd:5c:0b:22:0d:a1:70:be:1e:37:fd:d0:6d:b7:
b5:85:b7:b7:a1:6d:43:dd:97:46:00:17:d0:0a:d9:06:39:11:
44:0f:fa:b2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYPcvZkZIyNydRQw1l8Hjgt4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjIxMDE1MTc0MjM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjllNzE3M2M1ZWJlZDU3ZDc0M2IxNjRiZWYxMDdmNTdkMjM2MGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieh9DGlwwHi9fATkhKwaaP6OH/1A
584pkK92tbXAtMjyisN1rHGSgsF8tNwWQJsuAZXfF5HSWRULGOQKk0usq+Qt8euq
KxEbSnK7IsaRGo5QU0icDXL40bIW4jBrhCBRavJFUD/xrdQCg3NRrW6WG5CAtGiH
sytipWYdaC4OXnd/VR9djAIYh+Q4M75zpeXeKaxNs6FIdhmraSgrdt/STHcHRkE4
qhjJZ/ukviNyZdX58SSsyX8UKE7SeY8koZTsX/A7Ykch+egmPc/8aZbcbeR2aDix
LHL1ub06rgICE6xxRkmFQB60LGTXTndAn3uoQrQPeWB2y45nyjyyawFm5QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOKecXPF6+1X10OxZL7xB/V9I2DdMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvNHA1eGM4WHI3VmZYUTdGa3Z2RUg5WDBqWU4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCTS+YAwQC
w7KEMA0GCSqGSIb3DQEBCwUAA4IBAQCjHicINZCITVrVJaM2wDJqZ3elfTMZz9Gn
NlxRdGgXKfz6tk1Z4okbwwvnkP6zlpj1JjvfHVIaU6hhsxYrajQsycL8VqsxXh9T
/NbN6vziQAJw/H3DMx6tNVkzf6CjjNIdQDP8OEnWKCdXFVb5uc9jS9jUOOrvspkZ
g1n3p+uKc0Xlj13shncURRRTlRdCbvCHFDAigxnZcnYZO6N4Bgo8c7FzUgpi00Uf
xeUcBWpGEmXMgExP2yjRjIUZhaoUl1ErKq/VswwgPuOfzI6GYq4EbIjOt6uwlEqe
0quLzVwLIg2hcL4eN/3Qbbe1hbe3oW1D3ZdGABfQCtkGORFED/qy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org