Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/7d2vrk3CNRD7nsaU6HdTZXJLuyk.roa
File: 7d2vrk3CNRD7nsaU6HdTZXJLuyk.roa (raw, json)
Hash identifier: MwBcO+VpqWqJtYLk3N5A5Whqwj15uVEslGWt6slqLaM=
Subject key identifier: ED:DD:AF:AE:4D:C2:35:10:FB:9E:C6:94:E8:77:53:65:72:4B:BB:29
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018217942D9557AC77D6A36777EE1BC8CC92
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/7d2vrk3CNRD7nsaU6HdTZXJLuyk.roa
Signing time: Tue 19 Jul 2022 17:49:23 +0000
ROA not before: Tue 19 Jul 2022 17:49:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399587
IP address blocks: 77.47.252.0/22 maxlen: 24
77.47.248.0/22 maxlen: 24
195.178.128.0/22 maxlen: 24
185.143.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:17:94:2d:95:57:ac:77:d6:a3:67:77:ee:1b:c8:cc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 19 17:49:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edddafae4dc23510fb9ec694e8775365724bbb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:83:13:f6:04:da:b2:45:c8:6f:b5:72:22:7a:
32:8b:87:e9:2e:26:6b:56:76:f4:30:ea:c3:f2:64:
4b:8e:b7:ba:cb:c0:1e:fd:f0:4b:08:01:f1:2a:94:
2c:a8:e6:0c:5f:8d:7d:41:62:2f:15:a3:0f:e3:30:
20:37:da:84:e4:29:3d:44:6d:06:05:7d:48:5f:31:
03:6b:4d:2a:b3:3a:a6:95:c4:5c:5b:d2:7f:f8:9d:
1c:8a:c6:a6:aa:1d:e8:32:dc:77:cf:de:b4:47:85:
a7:87:c4:a4:9c:f4:fe:40:8b:39:02:b4:5a:9b:a1:
5d:f1:29:99:eb:9f:94:15:dd:e9:c2:83:dc:28:d3:
6f:fa:31:e2:dd:3c:02:78:d9:d8:62:19:4a:26:33:
02:9c:91:23:54:87:e1:cd:d4:bc:cf:f5:e9:09:0a:
8c:32:39:b5:32:e0:cb:32:69:e6:30:86:69:74:b0:
9f:d7:bf:6f:23:1a:97:7b:24:1d:66:f6:04:b4:eb:
2e:5e:88:eb:06:c8:9e:2c:28:28:15:1c:0a:7d:6d:
fc:96:c8:69:71:e7:b4:50:0f:e2:7d:f8:9b:8d:62:
cc:2b:aa:ea:af:7e:0f:be:cb:e3:98:32:cd:f7:37:
ea:b5:fe:06:ae:0a:35:af:fe:03:0b:93:6e:e3:8a:
c2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DD:AF:AE:4D:C2:35:10:FB:9E:C6:94:E8:77:53:65:72:4B:BB:29
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/7d2vrk3CNRD7nsaU6HdTZXJLuyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.248.0/21
185.143.56.0/22
195.178.128.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:d7:5a:f5:23:9f:d6:68:86:ad:d0:70:df:3e:38:1a:e4:cd:
36:f6:cb:95:18:3e:20:25:7b:c3:4e:c3:8b:b5:6f:6d:01:05:
d3:bc:ab:e8:6f:7f:9a:d0:43:3d:a4:7b:00:98:90:8a:98:49:
dc:88:2d:c1:fd:a9:63:99:2f:bf:2c:d4:37:f1:7a:41:a4:eb:
0c:7f:18:7e:a0:20:4c:d1:2e:6f:2d:62:3e:ff:da:16:48:07:
94:63:06:cb:fa:f4:0e:c6:37:0d:f1:09:5b:dc:22:a7:3a:61:
6a:c3:20:27:7a:da:5a:0d:f0:60:2d:56:db:ad:50:b2:98:7b:
e3:82:b7:e0:23:c6:f8:30:58:cb:c2:39:8b:24:34:1e:cb:3e:
8a:55:73:14:7a:d5:53:3b:9c:ac:39:ee:6a:60:ea:04:5c:de:
f1:ed:d4:27:98:74:b3:51:a3:75:3a:bc:da:76:36:41:7c:27:
06:d5:09:5f:dd:54:26:c7:f3:37:11:01:30:d4:d9:5b:a0:b0:
5e:3b:3d:50:07:cd:e7:3f:40:f5:e4:05:54:e7:77:24:18:3e:
a2:27:4c:b9:90:4c:14:95:88:3b:ef:8f:f8:c6:dc:eb:72:50:
44:0a:fa:eb:4d:e1:a1:ae:3b:ef:3f:14:98:de:e8:c9:2d:66:
cf:ee:85:54
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYIXlC2VV6x31qNnd+4byMySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjIwNzE5MTc0OTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGRkYWZhZTRkYzIzNTEwZmI5ZWM2OTRlODc3NTM2NTcyNGJiYjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIMT9gTaskXIb7VyInoyi4fpLiZr
Vnb0MOrD8mRLjre6y8Ae/fBLCAHxKpQsqOYMX419QWIvFaMP4zAgN9qE5Ck9RG0G
BX1IXzEDa00qszqmlcRcW9J/+J0cisamqh3oMtx3z960R4Wnh8SknPT+QIs5ArRa
m6Fd8SmZ65+UFd3pwoPcKNNv+jHi3TwCeNnYYhlKJjMCnJEjVIfhzdS8z/XpCQqM
Mjm1MuDLMmnmMIZpdLCf179vIxqXeyQdZvYEtOsuXojrBsieLCgoFRwKfW38lshp
cee0UA/iffibjWLMK6rqr34PvsvjmDLN9zfqtf4Grgo1r/4DC5Nu44rCGwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO3dr65NwjUQ+57GlOh3U2VyS7spMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvN2QydnJrM0NOUkQ3bnNhVTZIZFRaWEpMdXlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDTS/4AwQC
uY84AwQCw7KAMA0GCSqGSIb3DQEBCwUAA4IBAQBL11r1I5/WaIat0HDfPjga5M02
9suVGD4gJXvDTsOLtW9tAQXTvKvob3+a0EM9pHsAmJCKmEnciC3B/aljmS+/LNQ3
8XpBpOsMfxh+oCBM0S5vLWI+/9oWSAeUYwbL+vQOxjcN8Qlb3CKnOmFqwyAnetpa
DfBgLVbbrVCymHvjgrfgI8b4MFjLwjmLJDQeyz6KVXMUetVTO5ysOe5qYOoEXN7x
7dQnmHSzUaN1OrzadjZBfCcG1Qlf3VQmx/M3EQEw1NlboLBeOz1QB83nP0D15AVU
53ckGD6iJ0y5kEwUlYg774/4xtzrclBECvrrTeGhrjvvPxSY3ujJLWbP7oVU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org