Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/DihfrQGfGogy3vcxe84jQq5IbPQ.roa
File: DihfrQGfGogy3vcxe84jQq5IbPQ.roa (raw, json)
Hash identifier: FwEONsjgDmwMJ5WLv4vZ4lDESliTenIjs9KHoZDnApo=
Subject key identifier: 0E:28:5F:AD:01:9F:1A:88:32:DE:F7:31:7B:CE:23:42:AE:48:6C:F4
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1E337BD5
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/DihfrQGfGogy3vcxe84jQq5IbPQ.roa
Signing time: Tue 07 Jun 2022 08:57:20 +0000
ROA not before: Tue 07 Jun 2022 08:57:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.241.0/24 maxlen: 24
77.47.244.0/22 maxlen: 22
77.47.143.0/24 maxlen: 24
77.47.152.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
77.47.154.0/24 maxlen: 24
77.47.153.0/24 maxlen: 24
77.47.155.0/24 maxlen: 24
195.178.146.0/24 maxlen: 24
195.178.152.0/22 maxlen: 22
77.47.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506690517 (0x1e337bd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jun 7 08:57:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e285fad019f1a8832def7317bce2342ae486cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8a:8d:40:fc:c2:88:52:7c:f9:8d:0f:cf:32:
ff:69:60:ef:d0:e3:40:ef:21:5c:d8:b6:3d:6a:7a:
f7:0d:b7:a8:eb:25:6f:24:22:e6:20:01:49:b1:f1:
0b:d4:c3:62:98:69:c5:e7:1b:60:68:f4:c7:ab:6e:
da:03:96:e1:20:6c:29:d4:b1:f8:85:42:0f:4e:fd:
48:3f:88:69:c2:c7:2b:c0:f8:1c:c2:9c:47:05:8b:
0d:c3:ce:c0:84:16:6d:1e:70:26:7d:ff:bc:ff:30:
b9:b1:cd:b5:26:67:00:5e:33:2f:71:b8:c9:82:d5:
63:4c:3e:2c:46:85:11:eb:a4:2e:4c:ec:81:60:51:
fc:a9:be:88:f6:46:fb:38:eb:89:a8:9f:f6:e5:ce:
a2:4c:98:40:6a:da:c2:ab:27:eb:8a:cd:83:cc:e9:
78:db:53:b2:be:17:c2:5b:c4:c3:31:ce:e7:bd:78:
08:42:54:81:5b:6f:eb:8c:ea:f5:b7:6c:46:3a:1d:
31:10:0f:ac:27:33:0e:67:ab:fe:15:e7:90:cf:45:
b4:a9:86:9d:19:50:78:27:c8:ba:cb:83:59:24:ad:
85:28:63:90:0c:62:dc:79:c6:c3:28:36:76:32:91:
db:c3:b9:c0:df:39:61:a5:08:c3:ec:db:74:77:17:
1a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:28:5F:AD:01:9F:1A:88:32:DE:F7:31:7B:CE:23:42:AE:48:6C:F4
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/DihfrQGfGogy3vcxe84jQq5IbPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.152.0/22
77.47.180.0/22
77.47.241.0/24
77.47.244.0/22
195.178.144.0-195.178.146.255
195.178.152.0/22
Signature Algorithm: sha256WithRSAEncryption
39:34:81:fe:ff:41:17:f2:31:3d:70:13:95:fb:f9:8c:48:50:
71:9f:1d:84:7a:70:75:56:8c:88:0e:d7:43:7a:bd:d4:23:b0:
d4:ec:7d:b5:d1:02:ae:ad:01:56:4b:76:07:48:12:96:c1:e3:
39:59:9a:1e:f3:25:63:b4:49:20:41:89:ac:24:3e:b7:68:26:
84:fa:41:07:20:32:9a:00:b0:16:c2:a0:0c:55:bb:f3:df:d1:
37:29:d7:ed:bd:21:c8:60:bb:eb:4b:c3:17:18:9a:1a:e4:7d:
b8:dc:c8:c7:67:28:d5:65:93:9a:68:49:38:e7:a1:7d:23:23:
89:75:1a:83:b5:da:06:65:90:70:f7:a5:e5:5b:37:f1:62:2f:
31:f5:36:15:79:97:e4:f6:98:7b:fa:ab:f0:18:b0:8f:0a:ea:
9c:73:a4:b1:35:78:25:18:82:38:45:40:a9:78:98:3b:0d:4c:
9d:d8:2a:55:ff:b9:f7:d9:6b:75:29:3b:ec:69:da:cf:0b:1f:
d7:20:da:d6:f3:e3:77:b7:a4:28:03:18:af:26:94:69:88:89:
49:09:38:8a:7c:74:64:2a:06:e9:fb:0b:7e:28:dc:0a:23:80:
d9:bc:e2:25:8a:ad:e4:81:57:c6:11:0e:e0:75:89:f1:27:b3:
82:1c:53:bc
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgIEHjN71TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTQyNjMyNWFjYjhjZTYwOWE2ODZmYTY1NWIwNTg5Njg4MDliMzQ2MB4XDTIyMDYw
NzA4NTcyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGUyODVmYWQwMTlm
MWE4ODMyZGVmNzMxN2JjZTIzNDJhZTQ4NmNmNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJqKjUD8wohSfPmND88y/2lg79DjQO8hXNi2PWp69w23qOsl
byQi5iABSbHxC9TDYphpxecbYGj0x6tu2gOW4SBsKdSx+IVCD079SD+IacLHK8D4
HMKcRwWLDcPOwIQWbR5wJn3/vP8wubHNtSZnAF4zL3G4yYLVY0w+LEaFEeukLkzs
gWBR/Km+iPZG+zjriaif9uXOokyYQGrawqsn64rNg8zpeNtTsr4XwlvEwzHO5714
CEJUgVtv64zq9bdsRjodMRAPrCczDmer/hXnkM9FtKmGnRlQeCfIusuDWSSthShj
kAxi3HnGwyg2djKR28O5wN85YaUIw+zbdHcXGqkCAwEAAaOCAjUwggIxMB0GA1Ud
DgQWBBQOKF+tAZ8aiDLe9zF7ziNCrkhs9DAfBgNVHSMEGDAWgBQZQmMlrLjOYJpo
b6ZVsFiWiAmzRjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dVSmpKYXk0em1DYWFHLW1WYkJZbG9nSnMwWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvOGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8x
L0RpaGZyUUdmR29neTN2Y3hlODRqUXE1SWJQUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
OGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8xL0dVSmpKYXk0em1D
YWFHLW1WYkJZbG9nSnMwWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBL
BggrBgEFBQcBBwEB/wQ8MDowOAQCAAEwMgMEAE0vjwMEAk0vmAMEAk0vtAMEAE0v
8QMEAk0v9DAMAwQEw7KQAwQAw7KSAwQCw7KYMA0GCSqGSIb3DQEBCwUAA4IBAQA5
NIH+/0EX8jE9cBOV+/mMSFBxnx2EenB1VoyIDtdDer3UI7DU7H210QKurQFWS3YH
SBKWweM5WZoe8yVjtEkgQYmsJD63aCaE+kEHIDKaALAWwqAMVbvz39E3KdftvSHI
YLvrS8MXGJoa5H243MjHZyjVZZOaaEk456F9IyOJdRqDtdoGZZBw96XlWzfxYi8x
9TYVeZfk9ph7+qvwGLCPCuqcc6SxNXglGII4RUCpeJg7DUyd2CpV/7n32Wt1KTvs
adrPCx/XINrW8+N3t6QoAxivJpRpiIlJCTiKfHRkKgbp+wt+KNwKI4DZvOIliq3k
gVfGEQ7gdYnxJ7OCHFO8
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org