Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/PZxn8SClZ0YE25ZKt7l-yRkWOx4.roa
File: PZxn8SClZ0YE25ZKt7l-yRkWOx4.roa (raw, json)
Hash identifier: eKsYIhkRUZxYb99EYaCB7gvMyVntOYX5CJ+jBhDY7yE=
Subject key identifier: 3D:9C:67:F1:20:A5:67:46:04:DB:96:4A:B7:B9:7E:C9:19:16:3B:1E
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1CDE713F
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/PZxn8SClZ0YE25ZKt7l-yRkWOx4.roa
Signing time: Mon 21 Feb 2022 13:54:42 +0000
ROA not before: Mon 21 Feb 2022 13:54:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208747
IP address blocks: 77.47.143.0/24 maxlen: 24
77.47.178.0/24 maxlen: 24
77.47.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484340031 (0x1cde713f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 21 13:54:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d9c67f120a5674604db964ab7b97ec919163b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:38:2b:65:4e:ea:12:42:db:12:cc:f0:86:
50:99:8d:fc:17:79:40:50:3c:9e:96:23:f9:96:72:
b5:54:7f:b3:3c:5c:f6:b2:57:d6:12:22:ea:b6:5a:
67:af:77:79:ab:b0:28:2e:f0:6f:b2:0d:f0:70:ab:
b2:65:88:34:30:41:40:8d:9e:4b:a9:b8:fc:8a:5e:
15:59:12:6a:08:49:7a:39:5f:66:96:22:40:d9:16:
ac:81:1f:14:18:af:cd:75:3d:06:3b:ec:48:30:1d:
6e:5a:21:40:b3:68:74:1b:86:f6:3f:ae:3c:ac:f6:
15:31:90:e3:0e:b7:d3:24:39:8f:ba:d9:98:15:e0:
f3:67:c9:8b:5b:9f:54:ee:4f:39:c1:26:fe:a2:f2:
c5:0c:a9:33:c8:5a:fa:fc:f0:85:53:36:60:16:e6:
6e:88:9c:8c:93:d5:65:8a:ac:d8:f2:77:90:cb:ed:
16:90:19:3b:bb:80:26:f0:b6:c2:b1:7f:45:3e:69:
c3:b3:9a:fa:21:aa:41:41:a1:97:9b:98:1d:a1:66:
1b:89:69:1c:2a:2f:64:7c:7f:2b:51:d5:0c:3f:e9:
dc:73:84:d1:6b:2a:cb:e0:b1:24:52:b9:d7:cc:2b:
2f:86:53:8d:47:26:3d:75:28:aa:d5:05:80:89:50:
18:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9C:67:F1:20:A5:67:46:04:DB:96:4A:B7:B9:7E:C9:19:16:3B:1E
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/PZxn8SClZ0YE25ZKt7l-yRkWOx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.143.0/24
77.47.178.0/23
Signature Algorithm: sha256WithRSAEncryption
20:13:2d:84:24:ea:9d:52:06:69:aa:4f:00:33:25:3d:92:a6:
60:81:75:2c:ec:84:d6:33:a3:a0:4e:b2:f7:6b:6d:fd:2c:4f:
64:5b:95:9a:6b:97:35:43:a1:cd:34:21:87:6e:bb:64:a1:bb:
df:01:87:e7:d4:7d:fe:71:1b:d1:7b:25:11:2b:7e:de:9e:9f:
c1:dd:9e:2d:c6:06:e9:5e:de:a0:1f:f9:48:1a:36:4c:06:6e:
ec:84:ce:f5:a6:f0:e4:fc:7b:c6:50:a4:4e:64:23:c3:6b:81:
d6:ce:06:5f:da:a9:ff:ac:b0:6c:48:c0:7d:54:a2:1a:bb:fc:
53:37:91:54:62:fa:3d:8d:b2:02:fd:6a:fa:a9:61:29:d6:09:
c0:e1:99:ea:65:33:a9:ae:bf:19:0d:35:00:64:bc:23:19:be:
78:45:2a:dd:1d:89:17:b4:2f:66:99:b9:00:95:81:e2:62:6f:
b2:86:e7:39:8a:61:13:cd:5b:86:a9:51:ce:ab:65:d5:24:88:
22:a1:71:11:1f:3a:d5:47:e8:27:15:40:b0:44:d9:67:ac:65:
f8:3b:af:e3:55:fc:a8:71:2f:a8:4f:f0:8f:e2:81:b5:f7:ed:
8e:71:d6:26:51:c3:45:aa:29:7b:ad:a8:d4:f1:f5:51:05:9f:
b7:d6:4b:1d
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEHN5xPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTQyNjMyNWFjYjhjZTYwOWE2ODZmYTY1NWIwNTg5Njg4MDliMzQ2MB4XDTIyMDIy
MTEzNTQ0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2Q5YzY3ZjEyMGE1
Njc0NjA0ZGI5NjRhYjdiOTdlYzkxOTE2M2IxZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALPFOCtlTuoSQtsSzPCGUJmN/Bd5QFA8npYj+ZZytVR/szxc
9rJX1hIi6rZaZ693eauwKC7wb7IN8HCrsmWINDBBQI2eS6m4/IpeFVkSaghJejlf
ZpYiQNkWrIEfFBivzXU9BjvsSDAdblohQLNodBuG9j+uPKz2FTGQ4w630yQ5j7rZ
mBXg82fJi1ufVO5POcEm/qLyxQypM8ha+vzwhVM2YBbmboicjJPVZYqs2PJ3kMvt
FpAZO7uAJvC2wrF/RT5pw7Oa+iGqQUGhl5uYHaFmG4lpHCovZHx/K1HVDD/p3HOE
0Wsqy+CxJFK518wrL4ZTjUcmPXUoqtUFgIlQGDkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQ9nGfxIKVnRgTblkq3uX7JGRY7HjAfBgNVHSMEGDAWgBQZQmMlrLjOYJpo
b6ZVsFiWiAmzRjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dVSmpKYXk0em1DYWFHLW1WYkJZbG9nSnMwWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvOGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8x
L1BaeG44U0NsWjBZRTI1Wkt0N2wteVJrV094NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
OGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8xL0dVSmpKYXk0em1D
YWFHLW1WYkJZbG9nSnMwWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAE0vjwMEAU0vsjANBgkqhkiG9w0B
AQsFAAOCAQEAIBMthCTqnVIGaapPADMlPZKmYIF1LOyE1jOjoE6y92tt/SxPZFuV
mmuXNUOhzTQhh267ZKG73wGH59R9/nEb0XslESt+3p6fwd2eLcYG6V7eoB/5SBo2
TAZu7ITO9abw5Px7xlCkTmQjw2uB1s4GX9qp/6ywbEjAfVSiGrv8UzeRVGL6PY2y
Av1q+qlhKdYJwOGZ6mUzqa6/GQ01AGS8Ixm+eEUq3R2JF7QvZpm5AJWB4mJvsobn
OYphE81bhqlRzqtl1SSIIqFxER861UfoJxVAsETZZ6xl+Duv41X8qHEvqE/wj+KB
tfftjnHWJlHDRaope62o1PH1UQWft9ZLHQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org