Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/IZ53253cxb7W7l75Tsddo1jAk1Q.roa
File: IZ53253cxb7W7l75Tsddo1jAk1Q.roa (raw, json)
Hash identifier: G1Gcv0xHCnQw1bPWsH5LPVN0tw3O2N3y1PKeTkt5mhE=
Subject key identifier: 21:9E:77:DB:9D:DC:C5:BE:D6:EE:5E:F9:4E:C7:5D:A3:58:C0:93:54
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01847AB1363D4ED021379C6744213AC497A6
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/IZ53253cxb7W7l75Tsddo1jAk1Q.roa
Signing time: Tue 15 Nov 2022 09:49:04 +0000
ROA not before: Tue 15 Nov 2022 09:49:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204197
IP address blocks: 77.47.210.0/23 maxlen: 24
195.178.132.0/22 maxlen: 24
195.178.140.0/24 maxlen: 24
195.178.142.0/24 maxlen: 24
195.178.146.0/23 maxlen: 24
77.47.178.0/24 maxlen: 24
77.47.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7a:b1:36:3d:4e:d0:21:37:9c:67:44:21:3a:c4:97:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Nov 15 09:49:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=219e77db9ddcc5bed6ee5ef94ec75da358c09354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:64:47:b1:38:99:5e:f1:c8:2f:01:4e:54:89:
86:6c:bb:40:8c:29:78:85:31:43:fa:bd:b6:0f:66:
64:fc:a1:ca:b6:2b:b8:d3:8c:e2:88:bd:48:9a:3b:
f5:fa:ad:09:d2:d4:64:e0:a8:79:39:e2:e4:0e:e9:
0d:7f:e6:f4:b5:0c:69:8e:32:9d:a2:6f:d0:f2:b3:
7b:68:12:f6:b6:37:4a:e4:bd:29:ea:c6:0f:97:bd:
41:9f:bc:07:a0:cd:55:9e:6c:2c:31:4e:e0:f1:45:
d4:4b:93:7d:3c:04:ac:a0:7b:53:e2:16:73:ed:c7:
6e:69:e9:14:8d:bc:17:60:98:b5:a0:f3:30:92:30:
b8:62:42:ae:64:2d:94:95:80:f7:e9:f5:a2:6b:af:
ec:3c:28:fb:40:a6:07:7c:8c:27:04:cf:04:08:96:
d1:64:00:d9:5b:a6:67:04:1e:60:37:d7:60:6e:36:
fa:bf:69:ad:32:e5:cb:63:9e:85:18:29:37:08:89:
b1:7a:bb:d9:1f:cd:c4:0e:32:7f:bd:11:59:01:db:
9f:e1:9a:e9:98:6d:aa:ad:dc:4a:ba:8d:fb:52:30:
3f:8d:34:36:b3:0b:23:19:b3:6e:1d:e3:84:9d:b6:
8f:e1:7f:ed:8a:ba:8e:4a:44:a9:35:dc:0b:aa:76:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9E:77:DB:9D:DC:C5:BE:D6:EE:5E:F9:4E:C7:5D:A3:58:C0:93:54
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/IZ53253cxb7W7l75Tsddo1jAk1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.178.0/23
77.47.210.0/23
195.178.132.0/22
195.178.140.0/24
195.178.142.0/24
195.178.146.0/23
Signature Algorithm: sha256WithRSAEncryption
05:f5:7e:af:84:c6:e9:5a:59:47:ae:ce:de:2f:63:b6:b7:6c:
f8:5d:9b:d1:a3:1c:d4:4c:41:52:74:0e:27:6d:7d:ca:06:34:
9c:bf:ca:7f:9b:92:0b:40:01:be:ab:18:16:2e:c5:49:ed:14:
0a:a0:14:14:45:e6:d4:92:c0:46:22:d6:91:16:39:ec:60:33:
53:4a:db:32:50:8b:30:02:9d:bf:83:f4:ba:f9:a3:03:42:8d:
65:0f:22:50:c5:f1:f1:eb:30:e7:f7:db:e6:83:47:2e:6c:30:
22:1a:27:c8:6f:be:0c:ed:ee:eb:4e:e7:ee:5c:f0:3a:0d:bc:
91:de:23:65:03:16:31:19:a1:35:2f:86:9a:75:0f:50:2c:69:
32:00:c3:5e:4a:e2:f9:25:4a:49:a4:f3:f3:7a:ba:98:10:14:
68:7e:90:06:cd:e8:fa:73:a0:ff:04:6f:59:98:72:62:16:3a:
26:a0:f0:ea:52:3f:fd:ac:ae:53:a4:da:7d:7a:c1:7e:52:ad:
3a:e8:ba:17:dd:95:71:61:b9:9b:4f:95:cc:d2:a3:b4:5b:22:
b0:83:df:bf:f9:58:63:66:59:88:e7:2c:ec:9f:84:71:07:8f:
5f:76:05:08:f2:0b:3a:c8:91:36:e8:06:59:57:1a:65:fa:0f:
1b:18:52:3b
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYR6sTY9TtAhN5xnRCE6xJemMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjIxMTE1MDk0OTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTllNzdkYjlkZGNjNWJlZDZlZTVlZjk0ZWM3NWRhMzU4YzA5MzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGRHsTiZXvHILwFOVImGbLtAjCl4
hTFD+r22D2Zk/KHKtiu404ziiL1Imjv1+q0J0tRk4Kh5OeLkDukNf+b0tQxpjjKd
om/Q8rN7aBL2tjdK5L0p6sYPl71Bn7wHoM1VnmwsMU7g8UXUS5N9PASsoHtT4hZz
7cduaekUjbwXYJi1oPMwkjC4YkKuZC2UlYD36fWia6/sPCj7QKYHfIwnBM8ECJbR
ZADZW6ZnBB5gN9dgbjb6v2mtMuXLY56FGCk3CImxervZH83EDjJ/vRFZAduf4Zrp
mG2qrdxKuo37UjA/jTQ2swsjGbNuHeOEnbaP4X/tirqOSkSpNdwLqnYx/wIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFCGed9ud3MW+1u5e+U7HXaNYwJNUMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvSVo1MzI1M2N4YjdXN2w3NVRzZGRvMWpBazFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBTS+yAwQB
TS/SAwQCw7KEAwQAw7KMAwQAw7KOAwQBw7KSMA0GCSqGSIb3DQEBCwUAA4IBAQAF
9X6vhMbpWllHrs7eL2O2t2z4XZvRoxzUTEFSdA4nbX3KBjScv8p/m5ILQAG+qxgW
LsVJ7RQKoBQURebUksBGItaRFjnsYDNTStsyUIswAp2/g/S6+aMDQo1lDyJQxfHx
6zDn99vmg0cubDAiGifIb74M7e7rTufuXPA6DbyR3iNlAxYxGaE1L4aadQ9QLGky
AMNeSuL5JUpJpPPzerqYEBRofpAGzej6c6D/BG9ZmHJiFjomoPDqUj/9rK5TpNp9
esF+Uq066LoX3ZVxYbmbT5XM0qO0WyKwg9+/+VhjZlmI5yzsn4RxB49fdgUI8gs6
yJE26AZZVxpl+g8bGFI7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org