Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/TJZel3NgtTHUitWC_Ua4xnC1xYg.roa
File: TJZel3NgtTHUitWC_Ua4xnC1xYg.roa (raw, json)
Hash identifier: SgUx7zVTT2lgs6ylTTwqwCyU6RNwcAPWWn0BiOIadQ4=
Subject key identifier: 4C:96:5E:97:73:60:B5:31:D4:8A:D5:82:FD:46:B8:C6:70:B5:C5:88
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1D83ECBE
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/TJZel3NgtTHUitWC_Ua4xnC1xYg.roa
Signing time: Thu 07 Apr 2022 10:45:42 +0000
ROA not before: Thu 07 Apr 2022 10:45:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.244.0/22 maxlen: 22
77.47.152.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
77.47.154.0/24 maxlen: 24
77.47.153.0/24 maxlen: 24
77.47.155.0/24 maxlen: 24
195.178.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 495185086 (0x1d83ecbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Apr 7 10:45:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c965e977360b531d48ad582fd46b8c670b5c588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:70:88:b6:55:48:59:46:14:c0:a1:f6:fb:1b:
dd:29:d5:dd:cc:99:e3:f0:4f:73:c9:21:a7:d0:10:
b6:80:e5:1c:3d:a0:7b:09:8a:76:bf:86:a6:cb:1c:
f0:7e:da:b9:bc:75:45:e5:8d:25:02:05:20:b5:88:
89:51:11:d2:49:40:fb:14:14:96:33:ac:10:43:1f:
b6:8f:49:85:c5:60:14:91:e7:7e:f6:22:d4:cd:f2:
68:26:dd:07:af:ed:a6:81:78:76:83:c0:24:b4:9e:
05:83:01:25:da:09:31:fd:eb:61:8a:96:d2:d1:ad:
f9:c3:99:4f:cc:59:8c:e9:32:a4:57:55:97:ec:90:
05:9a:ef:35:a5:a7:d6:57:ec:9a:1c:b7:35:19:5d:
3e:19:73:3b:a0:f8:03:7b:15:51:c6:e4:e2:76:94:
c0:ae:1b:82:44:3d:fb:f6:c3:48:cf:7f:69:78:22:
1f:a9:67:e1:db:18:55:56:ec:c1:e2:f2:03:0f:8f:
e2:e4:04:fa:34:1f:89:eb:f9:fe:b9:4a:e9:4a:84:
49:93:d2:90:1c:f4:a4:3c:bd:57:0d:91:63:ae:44:
61:d9:bd:b9:3f:09:cc:56:ed:69:bc:9e:78:88:c4:
e2:17:8d:c0:90:8a:0a:3b:8b:da:00:71:01:30:7d:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:96:5E:97:73:60:B5:31:D4:8A:D5:82:FD:46:B8:C6:70:B5:C5:88
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/TJZel3NgtTHUitWC_Ua4xnC1xYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.152.0/22
77.47.244.0/22
195.178.144.0/23
195.178.152.0/22
Signature Algorithm: sha256WithRSAEncryption
06:55:b2:4f:63:75:95:fa:27:9f:df:9a:dc:16:81:67:b6:04:
76:00:d5:9f:45:eb:5b:9f:7d:7f:78:e6:1c:b5:d4:6d:d0:57:
13:0a:cb:dc:75:4f:e1:54:d3:ae:e4:0b:85:5e:5b:29:b2:de:
39:5c:7d:3f:b8:81:2e:47:74:f2:1a:c1:24:20:54:fb:a1:96:
7a:35:a4:4f:6f:fa:13:79:66:6b:b7:82:5a:c0:63:49:22:58:
6d:31:87:3f:d3:7b:11:2a:be:19:fa:bd:d1:9e:c2:03:23:39:
bc:0b:ec:45:59:a7:96:b1:1f:eb:62:73:a0:0f:e4:34:96:b3:
72:2c:4c:78:e4:8b:2e:41:2a:25:11:1b:a1:98:f9:cf:cc:f8:
00:25:fd:04:d0:bf:6a:02:be:7b:5a:f4:bb:57:26:60:83:c9:
68:9e:5b:06:03:da:ea:69:94:6d:a4:cb:39:2d:60:43:9c:5c:
c9:c3:c4:5f:54:92:20:dc:c9:95:77:2d:0b:5e:04:97:0f:28:
3c:8f:0f:18:07:f6:43:57:2b:12:83:cb:52:55:b5:54:ae:cf:
34:63:d2:e9:31:36:4e:5c:aa:ca:64:5b:0b:66:43:f7:af:17:
0f:f0:a5:9b:2a:18:32:ef:72:e0:20:b4:29:25:aa:ca:4c:8d:
69:75:d6:27
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEHYPsvjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTQyNjMyNWFjYjhjZTYwOWE2ODZmYTY1NWIwNTg5Njg4MDliMzQ2MB4XDTIyMDQw
NzEwNDU0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGM5NjVlOTc3MzYw
YjUzMWQ0OGFkNTgyZmQ0NmI4YzY3MGI1YzU4ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIJwiLZVSFlGFMCh9vsb3SnV3cyZ4/BPc8khp9AQtoDlHD2g
ewmKdr+Gpssc8H7aubx1ReWNJQIFILWIiVER0klA+xQUljOsEEMfto9JhcVgFJHn
fvYi1M3yaCbdB6/tpoF4doPAJLSeBYMBJdoJMf3rYYqW0tGt+cOZT8xZjOkypFdV
l+yQBZrvNaWn1lfsmhy3NRldPhlzO6D4A3sVUcbk4naUwK4bgkQ9+/bDSM9/aXgi
H6ln4dsYVVbsweLyAw+P4uQE+jQfiev5/rlK6UqESZPSkBz0pDy9Vw2RY65EYdm9
uT8JzFbtabyeeIjE4heNwJCKCjuL2gBxATB9YrkCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBRMll6Xc2C1MdSK1YL9RrjGcLXFiDAfBgNVHSMEGDAWgBQZQmMlrLjOYJpo
b6ZVsFiWiAmzRjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dVSmpKYXk0em1DYWFHLW1WYkJZbG9nSnMwWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvOGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8x
L1RKWmVsM05ndFRIVWl0V0NfVWE0eG5DMXhZZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
OGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8xL0dVSmpKYXk0em1D
YWFHLW1WYkJZbG9nSnMwWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAk0vmAMEAk0v9AMEAcOykAMEAsOy
mDANBgkqhkiG9w0BAQsFAAOCAQEABlWyT2N1lfonn9+a3BaBZ7YEdgDVn0XrW599
f3jmHLXUbdBXEwrL3HVP4VTTruQLhV5bKbLeOVx9P7iBLkd08hrBJCBU+6GWejWk
T2/6E3lma7eCWsBjSSJYbTGHP9N7ESq+Gfq90Z7CAyM5vAvsRVmnlrEf62JzoA/k
NJazcixMeOSLLkEqJREboZj5z8z4ACX9BNC/agK+e1r0u1cmYIPJaJ5bBgPa6mmU
baTLOS1gQ5xcycPEX1SSINzJlXctC14Elw8oPI8PGAf2Q1crEoPLUlW1VK7PNGPS
6TE2TlyqymRbC2ZD968XD/ClmyoYMu9y4CC0KSWqykyNaXXWJw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org