Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/PiySKa4-761RPxMXYknyq7xeuZA.roa
File: PiySKa4-761RPxMXYknyq7xeuZA.roa (raw, json)
Hash identifier: dyfqnuPdtXhrZtPF/a56iUBuSgQQBip/syZit2tMZAw=
Subject key identifier: 3E:2C:92:29:AE:3E:EF:AD:51:3F:13:17:62:49:F2:AB:BC:5E:B9:90
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1E66F979
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/PiySKa4-761RPxMXYknyq7xeuZA.roa
Signing time: Mon 27 Jun 2022 10:03:48 +0000
ROA not before: Mon 27 Jun 2022 10:03:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.210.0/23 maxlen: 24
77.47.212.0/23 maxlen: 24
77.47.240.0/24 maxlen: 24
77.47.244.0/22 maxlen: 22
77.47.152.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
77.47.154.0/24 maxlen: 24
77.47.153.0/24 maxlen: 24
77.47.155.0/24 maxlen: 24
195.178.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510065017 (0x1e66f979)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jun 27 10:03:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e2c9229ae3eefad513f13176249f2abbc5eb990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:74:0f:db:8c:1b:be:57:08:16:86:e5:c3:02:
4b:77:1b:52:0e:d7:88:2c:26:e5:1c:ee:e3:76:7b:
49:ed:6b:21:7e:49:4f:b9:95:5b:2e:8a:60:e1:f7:
76:ba:d8:b5:1a:61:00:0f:ef:76:0e:cd:28:82:e9:
ab:58:57:e9:dc:c4:c0:55:7b:70:14:f7:90:1f:93:
38:b6:7e:c9:e3:f3:17:eb:42:e3:97:27:31:e0:9a:
ff:18:11:c9:7f:be:15:75:d1:8b:2f:eb:e5:a4:bd:
28:c4:54:83:25:75:9a:bd:3d:1d:ae:e6:e4:4e:46:
cb:e3:27:75:4a:2c:41:7b:08:94:c8:5f:06:83:f4:
3c:ab:50:de:16:1e:12:68:2d:13:d6:75:a4:c9:68:
a2:8f:f2:00:b8:94:bb:f3:6e:ae:21:1d:04:d8:34:
9e:8c:ed:eb:92:e6:fd:78:d5:fa:6b:ea:6a:16:0d:
15:b7:09:fb:83:ae:cc:c5:34:7a:a0:46:d3:ae:8d:
14:e2:55:fb:3e:71:31:e7:10:76:b5:86:a7:cf:48:
06:00:9a:36:22:4f:4b:d0:9b:83:4d:5f:74:3e:47:
ee:7e:ae:83:19:ed:77:68:48:95:ab:aa:83:92:dc:
41:68:98:bd:36:14:6f:9a:41:8c:e2:3f:38:f0:61:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2C:92:29:AE:3E:EF:AD:51:3F:13:17:62:49:F2:AB:BC:5E:B9:90
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/PiySKa4-761RPxMXYknyq7xeuZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.152.0/22
77.47.210.0-77.47.213.255
77.47.240.0/24
77.47.244.0/22
195.178.144.0/23
195.178.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:e6:55:04:48:f8:50:c7:60:a1:97:a9:9b:50:b1:a7:7a:fe:
99:5f:d7:80:b9:86:39:63:90:e8:5d:fd:ca:da:d7:e7:0d:2e:
4c:ef:22:ca:72:4b:5d:05:68:c8:0d:6c:ff:a7:a7:68:f5:06:
be:3d:01:13:c7:ec:de:6f:8a:b9:60:cb:98:99:2e:9a:48:27:
df:13:3a:f2:20:91:75:b1:5f:fc:9d:2e:e7:74:e4:c4:e1:f5:
f9:be:e6:1e:03:e9:d4:6e:9a:b1:12:92:75:f6:4c:ce:08:a3:
43:9e:28:b1:32:b9:88:fa:13:1d:93:0a:b9:f6:ec:de:1e:ce:
ad:d7:3b:ef:dc:0a:92:4a:28:c1:3b:82:a1:4b:b6:60:33:34:
a0:97:68:df:e3:32:c3:e9:a3:f8:bd:94:b5:00:ea:d3:72:aa:
47:d3:37:f3:6f:52:57:54:4f:62:26:15:bc:80:3e:ad:5c:ed:
cb:15:69:ad:ca:d7:f1:7d:0e:21:eb:b9:a9:c1:a4:48:c1:87:
47:f8:63:be:ba:04:ec:15:9a:54:f9:46:72:46:3d:51:74:68:
39:4f:a4:96:6f:cb:b0:c6:91:38:40:f1:95:94:e8:0b:a4:0d:
c4:ef:16:28:00:ed:3b:83:00:6c:e0:06:cb:76:20:51:1f:c8:
68:dd:9a:37
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIEHmb5eTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTQyNjMyNWFjYjhjZTYwOWE2ODZmYTY1NWIwNTg5Njg4MDliMzQ2MB4XDTIyMDYy
NzEwMDM0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2UyYzkyMjlhZTNl
ZWZhZDUxM2YxMzE3NjI0OWYyYWJiYzVlYjk5MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANF0D9uMG75XCBaG5cMCS3cbUg7XiCwm5Rzu43Z7Se1rIX5J
T7mVWy6KYOH3drrYtRphAA/vdg7NKILpq1hX6dzEwFV7cBT3kB+TOLZ+yePzF+tC
45cnMeCa/xgRyX++FXXRiy/r5aS9KMRUgyV1mr09Ha7m5E5Gy+MndUosQXsIlMhf
BoP0PKtQ3hYeEmgtE9Z1pMlooo/yALiUu/NuriEdBNg0nozt65Lm/XjV+mvqahYN
FbcJ+4OuzMU0eqBG066NFOJV+z5xMecQdrWGp89IBgCaNiJPS9Cbg01fdD5H7n6u
gxntd2hIlauqg5LcQWiYvTYUb5pBjOI/OPBhkAMCAwEAAaOCAi8wggIrMB0GA1Ud
DgQWBBQ+LJIprj7vrVE/ExdiSfKrvF65kDAfBgNVHSMEGDAWgBQZQmMlrLjOYJpo
b6ZVsFiWiAmzRjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dVSmpKYXk0em1DYWFHLW1WYkJZbG9nSnMwWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvOGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8x
L1BpeVNLYTQtNzYxUlB4TVhZa255cTd4ZXVaQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
OGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8xL0dVSmpKYXk0em1D
YWFHLW1WYkJZbG9nSnMwWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBF
BggrBgEFBQcBBwEB/wQ2MDQwMgQCAAEwLAMEAk0vmDAMAwQBTS/SAwQBTS/UAwQA
TS/wAwQCTS/0AwQBw7KQAwQCw7KYMA0GCSqGSIb3DQEBCwUAA4IBAQCl5lUESPhQ
x2Chl6mbULGnev6ZX9eAuYY5Y5DoXf3K2tfnDS5M7yLKcktdBWjIDWz/p6do9Qa+
PQETx+zeb4q5YMuYmS6aSCffEzryIJF1sV/8nS7ndOTE4fX5vuYeA+nUbpqxEpJ1
9kzOCKNDniixMrmI+hMdkwq59uzeHs6t1zvv3AqSSijBO4KhS7ZgMzSgl2jf4zLD
6aP4vZS1AOrTcqpH0zfzb1JXVE9iJhW8gD6tXO3LFWmtytfxfQ4h67mpwaRIwYdH
+GO+ugTsFZpU+UZyRj1RdGg5T6SWb8uwxpE4QPGVlOgLpA3E7xYoAO07gwBs4AbL
diBRH8ho3Zo3
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org