Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/RNLWRECKT07ngfv3TH-IBm8oROI.roa
File: RNLWRECKT07ngfv3TH-IBm8oROI.roa (raw, json)
Hash identifier: MiMZttLQTCgL8x967SUDMH3dS4X6mvSqBPzb5+iVFEc=
Subject key identifier: 44:D2:D6:44:40:8A:4F:4E:E7:81:FB:F7:4C:7F:88:06:6F:28:44:E2
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1C96E5EB
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/RNLWRECKT07ngfv3TH-IBm8oROI.roa
Signing time: Fri 28 Jan 2022 18:04:41 +0000
ROA not before: Fri 28 Jan 2022 18:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.244.0/22 maxlen: 22
77.47.152.0/24 maxlen: 24
195.178.144.0/21 maxlen: 21
195.178.144.0/20 maxlen: 20
77.47.154.0/24 maxlen: 24
77.47.153.0/24 maxlen: 24
77.47.155.0/24 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479651307 (0x1c96e5eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 28 18:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44d2d644408a4f4ee781fbf74c7f88066f2844e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:93:c0:99:ec:24:23:1d:59:23:57:c4:f2:
af:e1:d0:59:58:38:37:24:b0:a8:c9:27:4c:c4:7e:
4f:b2:fc:90:96:54:16:cb:63:82:b9:fd:e7:95:2b:
2b:97:8e:34:14:dd:5a:8c:9e:55:36:60:fc:44:5e:
50:26:3f:de:ba:41:af:7c:25:8e:36:0c:2a:1f:eb:
27:a2:33:43:27:52:a0:01:d5:3c:aa:b7:c3:f6:95:
30:65:95:88:49:a5:ca:d2:80:65:53:a9:17:7c:34:
ee:04:0a:91:d4:39:a0:ae:a0:2a:8f:b3:19:2d:f1:
22:69:70:94:29:02:f4:72:b5:ba:66:df:49:5b:66:
ed:52:0b:35:79:ad:6e:01:41:c9:e2:f1:21:d2:4b:
f7:1b:20:af:57:f4:6f:ab:29:a9:72:23:12:b3:fd:
fd:73:cb:0c:35:7d:bb:06:85:57:63:db:0d:d1:48:
ba:bc:55:36:fc:9b:ba:1a:b1:40:18:3d:57:51:07:
94:a3:a9:af:f6:07:28:de:6f:43:02:1e:9c:b0:32:
53:d8:39:e8:1e:3e:ca:fe:1a:ac:59:3f:42:c0:25:
a6:77:ef:52:47:fe:ca:b6:1d:69:97:75:55:7d:2d:
6e:b4:61:29:1f:7b:c6:e7:fd:ee:f7:53:bc:0c:ae:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D2:D6:44:40:8A:4F:4E:E7:81:FB:F7:4C:7F:88:06:6F:28:44:E2
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/RNLWRECKT07ngfv3TH-IBm8oROI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.152.0/22
77.47.244.0/22
185.143.56.0/22
195.178.144.0/20
Signature Algorithm: sha256WithRSAEncryption
bf:d8:23:8b:34:e1:8a:1a:d1:51:32:2f:c9:89:29:35:74:6c:
12:a8:63:85:51:8c:79:3a:a2:d5:b7:15:b8:b0:dc:20:fd:5b:
0b:12:5b:c8:17:f7:e0:6e:57:20:e9:df:f6:27:c5:70:dc:45:
8e:c2:61:db:09:2e:db:47:2d:30:82:bc:c6:d1:04:d5:b9:92:
30:bf:ea:a6:f0:a6:cc:23:da:85:08:d3:92:52:9d:3e:17:6e:
6a:34:3c:0b:20:8d:3d:60:c7:3d:b0:8c:e4:f6:a0:4b:f4:a6:
d4:e7:1f:5b:d9:77:60:75:c7:a4:c8:32:50:77:dc:b0:3d:ce:
19:5e:0a:73:bc:4a:7f:90:9f:29:52:72:76:77:22:b3:94:49:
18:75:a3:a5:8b:b6:ff:f4:4b:22:af:ee:99:29:20:b0:57:02:
79:d2:8a:17:5b:3d:e9:99:4b:70:7a:ed:c2:5d:ad:f8:6c:d6:
47:e6:fe:2f:4c:56:08:d6:93:ab:ba:1b:e6:00:e9:fc:64:1d:
dc:e2:9a:4f:cc:2f:96:da:84:fb:19:93:46:ab:66:35:a9:a8:
5f:4d:cb:e1:2a:44:bd:e7:f2:aa:0d:73:5a:85:29:a1:4e:1c:
96:91:2d:41:61:ab:70:aa:38:94:ba:e3:7c:63:17:41:35:b7:
b8:66:97:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org