Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/7lzL4GM6Vddq3ejbGMHMnmy-tgY.roa
File: 7lzL4GM6Vddq3ejbGMHMnmy-tgY.roa (raw, json)
Hash identifier: 6a08DV/wcDYmy4QnAPE2JbgM8cJRYwRJ7c4kWJ2nMOA=
Subject key identifier: EE:5C:CB:E0:63:3A:55:D7:6A:DD:E8:DB:18:C1:CC:9E:6C:BE:B6:06
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01821200ABD5BF7D8AF55255AE10EF76CCF4
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/7lzL4GM6Vddq3ejbGMHMnmy-tgY.roa
Signing time: Mon 18 Jul 2022 15:50:10 +0000
ROA not before: Mon 18 Jul 2022 15:50:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25500
IP address blocks: 77.47.128.0/17 maxlen: 17
77.47.130.0/24 maxlen: 24
77.47.128.0/24 maxlen: 24
77.47.137.0/24 maxlen: 24
77.47.135.0/24 maxlen: 24
77.47.202.0/23 maxlen: 23
77.47.201.0/24 maxlen: 24
77.47.206.0/24 maxlen: 24
77.47.204.0/23 maxlen: 23
77.47.200.0/24 maxlen: 24
77.47.209.0/24 maxlen: 24
77.47.207.0/24 maxlen: 24
77.47.208.0/24 maxlen: 24
77.47.216.0/24 maxlen: 24
77.47.217.0/24 maxlen: 24
77.47.214.0/24 maxlen: 24
77.47.215.0/24 maxlen: 24
77.47.218.0/24 maxlen: 24
77.47.223.0/24 maxlen: 24
77.47.224.0/24 maxlen: 24
77.47.222.0/24 maxlen: 24
77.47.225.0/24 maxlen: 24
77.47.226.0/24 maxlen: 24
77.47.227.0/24 maxlen: 24
77.47.235.0/24 maxlen: 24
77.47.236.0/24 maxlen: 24
77.47.234.0/24 maxlen: 24
77.47.161.0/24 maxlen: 24
77.47.160.0/24 maxlen: 24
77.47.164.0/24 maxlen: 24
77.47.165.0/24 maxlen: 24
77.47.162.0/24 maxlen: 24
77.47.163.0/24 maxlen: 24
77.47.166.0/24 maxlen: 24
77.47.168.0/24 maxlen: 24
77.47.171.0/24 maxlen: 24
77.47.172.0/24 maxlen: 24
77.47.169.0/24 maxlen: 24
77.47.170.0/24 maxlen: 24
77.47.174.0/24 maxlen: 24
77.47.175.0/24 maxlen: 24
77.47.173.0/24 maxlen: 24
77.47.186.0/23 maxlen: 23
77.47.184.0/23 maxlen: 23
77.47.192.0/23 maxlen: 24
77.47.190.0/24 maxlen: 24
77.47.196.0/23 maxlen: 23
77.47.194.0/24 maxlen: 24
77.47.199.0/24 maxlen: 24
77.47.198.0/24 maxlen: 24
2a02:db0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:12:00:ab:d5:bf:7d:8a:f5:52:55:ae:10:ef:76:cc:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jul 18 15:50:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee5ccbe0633a55d76adde8db18c1cc9e6cbeb606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:1d:88:55:8d:fb:fb:2d:93:aa:a0:bc:26:
3d:7e:fd:3c:86:6f:da:05:e0:dc:5b:9a:fa:af:db:
03:78:a9:df:6d:df:48:39:e4:e3:29:cb:e4:97:6b:
0f:e8:ec:dc:54:06:41:66:18:fc:b5:cf:63:2a:85:
a4:d3:78:80:9f:89:51:ed:e1:5a:d7:8f:40:c4:f4:
88:f6:4e:5d:c2:50:a3:32:ab:02:13:d1:65:3f:2a:
80:47:27:d5:23:3a:20:85:73:8a:6f:f6:c6:1b:b7:
8e:97:83:3b:e4:38:26:6a:f5:21:29:9a:09:fc:e6:
3b:c4:71:4a:71:3c:ec:4e:5a:15:e3:ca:92:da:ea:
9c:65:d0:09:69:38:39:32:1c:80:d4:7d:f9:3b:7e:
b8:3d:b3:78:dd:2f:77:65:da:d2:58:28:26:2d:68:
69:f4:45:37:ff:54:b8:da:78:52:57:4d:71:3c:aa:
3d:7c:a2:1e:1e:97:a0:95:49:80:99:55:29:4e:6f:
81:7c:22:2e:64:17:54:0a:d7:47:2f:f7:ef:5c:f4:
6b:86:d8:c7:99:5b:1c:bc:31:cf:d2:2a:29:19:ec:
8d:74:c0:69:b5:f4:4a:24:dc:ac:1e:0b:ec:62:69:
e0:c7:6e:70:80:16:6e:3a:ad:ce:8b:a5:88:70:de:
98:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5C:CB:E0:63:3A:55:D7:6A:DD:E8:DB:18:C1:CC:9E:6C:BE:B6:06
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/7lzL4GM6Vddq3ejbGMHMnmy-tgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.128.0/17
IPv6:
2a02:db0::/32
Signature Algorithm: sha256WithRSAEncryption
ca:eb:4d:11:47:3c:8f:77:31:dc:8d:19:e1:84:6e:92:ab:d3:
f5:8d:d8:56:ce:76:e7:e6:c0:bb:17:ec:38:86:38:ec:de:ca:
c5:0d:c0:bc:a3:80:d5:c5:f2:f9:5f:e6:d9:55:d0:25:d1:f7:
98:47:a8:2d:6c:23:19:81:32:e8:de:0a:ab:ed:d9:f8:94:d6:
89:68:66:3d:dc:7e:48:ce:32:4a:60:db:d2:7e:5b:2e:b8:34:
d9:24:20:f5:77:27:c8:c0:69:71:44:b2:5a:94:c6:86:d4:91:
32:70:1b:bd:f4:fe:4c:71:8f:58:c5:f6:fc:11:57:69:82:c9:
ed:66:87:6a:77:13:e5:62:f3:0d:cd:43:17:b6:91:67:af:92:
90:82:b2:b6:fb:e5:cb:28:ce:00:30:88:93:98:cb:3a:ca:01:
e5:91:38:bb:02:07:69:3d:dc:d9:96:43:e4:11:3a:26:cd:0f:
61:04:fe:a1:70:65:74:d2:e0:21:d0:2b:0c:3a:43:d9:0b:d3:
70:35:6b:67:17:a2:07:d9:25:ec:61:b8:d7:3d:64:3e:fe:7b:
54:1c:78:88:a3:03:53:1d:3e:90:7a:98:6f:f1:50:03:50:17:
fe:f2:a7:d4:a9:45:bc:ee:f8:e9:7c:fb:89:d7:d5:35:ae:27:
24:a4:54:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org