Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/6CLc6ktHE8peR5TywCRx0WxKk74.roa
File: 6CLc6ktHE8peR5TywCRx0WxKk74.roa (raw, json)
Hash identifier: aImZhScK+TZpfkGYuPtzi8jd8pxugA3GRMucaIVmIDo=
Subject key identifier: E8:22:DC:EA:4B:47:13:CA:5E:47:94:F2:C0:24:71:D1:6C:4A:93:BE
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1CC2E16C
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/6CLc6ktHE8peR5TywCRx0WxKk74.roa
Signing time: Fri 11 Feb 2022 14:03:08 +0000
ROA not before: Fri 11 Feb 2022 14:03:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.244.0/22 maxlen: 22
195.178.128.0/22 maxlen: 24
77.47.152.0/24 maxlen: 24
195.178.144.0/21 maxlen: 21
77.47.154.0/24 maxlen: 24
77.47.153.0/24 maxlen: 24
77.47.155.0/24 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482533740 (0x1cc2e16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 11 14:03:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e822dcea4b4713ca5e4794f2c02471d16c4a93be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2a:84:34:67:d0:86:83:18:a4:b6:6a:c8:dc:
89:4a:e8:68:f0:31:ad:db:99:bf:44:7b:ca:70:60:
25:e2:95:b5:20:1b:bd:bd:03:39:b8:6a:1a:75:cb:
3a:70:a6:0b:f1:f5:24:80:89:6a:34:85:12:52:0a:
66:61:dc:e5:6c:8c:d1:fd:e8:a8:5c:1b:b8:a4:17:
47:05:6a:66:87:1a:33:36:f3:31:a3:0f:0e:b2:fc:
a2:e7:e3:b9:01:56:34:04:c1:f5:d8:75:7d:a9:7f:
23:bb:f7:bd:ae:d8:29:64:76:c0:01:4e:3b:75:ff:
7b:e8:e4:df:6b:38:22:08:eb:1b:29:14:cc:97:7a:
4b:32:54:b4:84:64:02:1e:b2:4a:ad:d7:1d:cd:87:
63:1c:15:79:3e:7d:ae:10:18:c2:9c:ad:b9:51:9e:
7a:1a:8e:ab:9e:c3:cc:f3:42:97:a0:99:42:2f:8c:
e9:bc:51:82:f1:d5:c3:93:a2:5b:85:39:65:c2:d4:
61:77:85:b8:fa:35:40:80:87:43:75:c3:a6:4f:04:
17:d2:18:a5:a0:08:3d:ee:eb:2d:de:cc:b6:23:cb:
f0:30:44:f8:c1:f0:ca:c8:b8:37:0f:b6:60:b0:5a:
f1:1e:ee:77:b2:06:81:3d:7f:f2:7c:11:73:24:37:
71:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:22:DC:EA:4B:47:13:CA:5E:47:94:F2:C0:24:71:D1:6C:4A:93:BE
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/6CLc6ktHE8peR5TywCRx0WxKk74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.152.0/22
77.47.244.0/22
185.143.56.0/22
195.178.128.0/22
195.178.144.0-195.178.155.255
Signature Algorithm: sha256WithRSAEncryption
91:00:29:f6:07:01:e8:b4:df:07:76:5c:ef:7e:5a:ba:dc:ff:
93:66:2d:cc:6c:6b:43:d6:ee:4c:01:75:3a:58:01:e6:3b:03:
a4:91:88:3b:65:35:6a:d4:05:22:93:18:01:58:c1:be:60:dc:
3a:f1:09:e1:5e:c4:e6:7c:96:77:40:2d:e7:29:91:a5:7d:cb:
b2:8b:3d:46:bb:42:5e:0c:24:83:f4:ff:49:eb:af:e0:ad:b0:
dd:5f:6e:d8:1a:dd:1f:81:85:fc:a4:3f:62:10:a4:64:0a:29:
78:21:0f:b4:8d:a2:72:7f:08:63:b3:6e:2b:74:d5:9d:34:d6:
44:27:cf:a0:6c:c3:95:ec:ec:2e:86:2b:b4:98:bf:19:e9:ce:
7a:10:f4:c2:61:29:59:7c:be:5c:a6:7a:8b:df:ad:6a:35:f7:
20:6d:33:3a:58:e5:60:80:45:72:06:6e:1b:1a:bf:23:1c:94:
89:ef:0f:4f:a0:e5:cc:a1:0b:23:07:c6:60:b1:d0:d7:a3:5a:
10:ad:51:ac:8d:47:89:99:1b:da:77:e1:ba:c7:35:7b:ba:d3:
fa:a4:cc:76:34:57:2e:9e:6d:e0:0e:fb:f1:c2:ca:12:e7:5b:
de:c4:a1:61:87:e1:80:09:80:5f:85:0f:7d:a9:8b:66:20:99:
51:c0:19:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org