Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Io7P-C_pUbMunB2BHuQYkB8rFHs.roa
File: Io7P-C_pUbMunB2BHuQYkB8rFHs.roa (raw, json)
Hash identifier: Dd59GadvEWy1hamju6td9+w15+UBZakw56AZfLGmu1I=
Subject key identifier: 22:8E:CF:F8:2F:E9:51:B3:2E:9C:1D:81:1E:E4:18:90:1F:2B:14:7B
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1DFFB55D
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Io7P-C_pUbMunB2BHuQYkB8rFHs.roa
Signing time: Fri 20 May 2022 16:13:29 +0000
ROA not before: Fri 20 May 2022 16:13:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 195.178.140.0/24 maxlen: 24
195.178.141.0/24 maxlen: 24
77.47.180.0/24 maxlen: 24
77.47.181.0/24 maxlen: 24
77.47.182.0/24 maxlen: 24
77.47.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503297373 (0x1dffb55d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: May 20 16:13:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=228ecff82fe951b32e9c1d811ee418901f2b147b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:c6:ab:4b:7a:47:57:df:e6:aa:12:51:74:
29:0c:98:f5:95:ec:5d:37:96:7d:ce:03:ef:6b:82:
9f:d4:10:87:be:3f:24:98:57:59:37:6f:bf:7b:62:
67:1e:00:36:43:03:90:5d:88:2b:b8:81:5e:92:74:
5b:ed:b0:b5:69:52:eb:a4:f5:12:f2:79:79:96:b5:
e2:d4:e3:69:cc:d3:3a:cc:84:32:bc:f1:bf:c9:14:
f4:c3:07:81:29:06:10:6b:2c:d7:9f:0f:1f:74:9b:
c3:1c:d2:1f:d3:30:ce:31:45:a6:60:2f:84:42:82:
63:57:54:34:41:39:a1:c7:5a:4b:6d:d8:c6:b6:53:
64:68:9f:3f:f9:ef:32:d2:9e:08:e2:ec:a4:f5:24:
72:17:d8:e7:a3:73:d6:5f:07:d7:10:00:14:80:ff:
28:b3:03:db:fa:54:fb:c0:df:92:cd:29:48:01:f2:
d4:34:88:52:47:2a:a6:2d:12:79:63:41:4c:11:df:
6e:64:fd:e0:ef:67:2f:54:c5:d5:c7:ef:77:16:89:
88:f6:96:39:5c:27:c5:fc:ac:e7:3d:34:19:b1:bc:
99:ab:c1:04:70:2a:b4:d0:f7:27:27:c6:d1:3a:f6:
61:f9:dd:62:8f:2c:90:c2:b8:ca:a2:43:eb:37:04:
d4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8E:CF:F8:2F:E9:51:B3:2E:9C:1D:81:1E:E4:18:90:1F:2B:14:7B
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/Io7P-C_pUbMunB2BHuQYkB8rFHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.180.0/22
195.178.140.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:a4:0c:39:d0:93:c9:a6:3f:d4:9c:ec:c3:34:31:6b:07:39:
c4:05:03:59:ed:e8:f6:eb:23:d2:f1:6f:d4:da:74:86:b4:3d:
44:89:39:95:86:ba:a2:d9:f5:65:8b:60:89:69:6b:90:9b:67:
8a:7a:47:fd:22:4c:d8:7c:4a:2a:0e:46:72:45:6d:5e:2f:02:
92:b4:16:15:02:75:b8:0a:cd:95:3c:9a:b0:38:ec:8e:4c:6b:
30:cd:15:f9:7b:d5:3c:54:72:b6:70:9f:11:21:e0:38:f8:0d:
f3:c1:8c:8d:1d:e6:f4:67:75:3a:43:fc:76:43:ff:58:3a:54:
b7:9b:32:f0:4d:a6:80:a6:0d:83:61:d1:d1:d6:a3:78:7b:89:
09:bb:5f:2c:0b:d3:0f:37:43:fe:df:54:d6:db:02:80:2c:9a:
63:7b:ce:96:91:38:2d:9e:bb:45:33:fd:dc:7d:a5:df:6c:3e:
99:a9:30:e8:d6:db:24:67:51:6d:3f:c3:dd:24:73:06:89:8a:
6a:ac:fa:5a:66:5f:e6:34:a1:9a:30:56:bc:7e:7b:65:73:a3:
91:14:f5:0a:da:18:fa:c7:33:13:5b:63:a5:e7:20:9c:b1:84:
7d:4a:79:5b:c5:fe:36:1d:48:70:a5:f7:20:d7:99:52:01:ab:
61:66:ac:1c
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEHf+1XTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTQyNjMyNWFjYjhjZTYwOWE2ODZmYTY1NWIwNTg5Njg4MDliMzQ2MB4XDTIyMDUy
MDE2MTMyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjI4ZWNmZjgyZmU5
NTFiMzJlOWMxZDgxMWVlNDE4OTAxZjJiMTQ3YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJrOxqtLekdX3+aqElF0KQyY9ZXsXTeWfc4D72uCn9QQh74/
JJhXWTdvv3tiZx4ANkMDkF2IK7iBXpJ0W+2wtWlS66T1EvJ5eZa14tTjaczTOsyE
Mrzxv8kU9MMHgSkGEGss158PH3SbwxzSH9MwzjFFpmAvhEKCY1dUNEE5ocdaS23Y
xrZTZGifP/nvMtKeCOLspPUkchfY56Nz1l8H1xAAFID/KLMD2/pU+8Dfks0pSAHy
1DSIUkcqpi0SeWNBTBHfbmT94O9nL1TF1cfvdxaJiPaWOVwnxfys5z00GbG8mavB
BHAqtND3JyfG0Tr2YfndYo8skMK4yqJD6zcE1OUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQijs/4L+lRsy6cHYEe5BiQHysUezAfBgNVHSMEGDAWgBQZQmMlrLjOYJpo
b6ZVsFiWiAmzRjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dVSmpKYXk0em1DYWFHLW1WYkJZbG9nSnMwWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvOGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8x
L0lvN1AtQ19wVWJNdW5CMkJIdVFZa0I4ckZIcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
OGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8xL0dVSmpKYXk0em1D
YWFHLW1WYkJZbG9nSnMwWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAk0vtAMEAcOyjDANBgkqhkiG9w0B
AQsFAAOCAQEAvKQMOdCTyaY/1JzswzQxawc5xAUDWe3o9usj0vFv1Np0hrQ9RIk5
lYa6otn1ZYtgiWlrkJtninpH/SJM2HxKKg5GckVtXi8CkrQWFQJ1uArNlTyasDjs
jkxrMM0V+XvVPFRytnCfESHgOPgN88GMjR3m9Gd1OkP8dkP/WDpUt5sy8E2mgKYN
g2HR0dajeHuJCbtfLAvTDzdD/t9U1tsCgCyaY3vOlpE4LZ67RTP93H2l32w+makw
6NbbJGdRbT/D3SRzBomKaqz6WmZf5jShmjBWvH57ZXOjkRT1CtoY+sczE1tjpecg
nLGEfUp5W8X+Nh1IcKX3INeZUgGrYWasHA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org