Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/otu-jo_oc-muHbfScMolk-NU8Jk.roa
File: otu-jo_oc-muHbfScMolk-NU8Jk.roa (raw, json)
Hash identifier: KxnlNfWh6Vn3qxe/5In5/qI3WdaY67Y35lnc7AJog9E=
Subject key identifier: A2:DB:BE:8E:8F:E8:73:E9:AE:1D:B7:D2:70:CA:25:93:E3:54:F0:99
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0182B20348CA38D28FC00FFBB72428A76197
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/otu-jo_oc-muHbfScMolk-NU8Jk.roa
Signing time: Thu 18 Aug 2022 17:32:15 +0000
ROA not before: Thu 18 Aug 2022 17:32:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 77.47.240.0/24 maxlen: 24
77.47.142.0/24 maxlen: 24
195.178.132.0/22 maxlen: 24
195.178.143.0/24 maxlen: 24
77.47.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b2:03:48:ca:38:d2:8f:c0:0f:fb:b7:24:28:a7:61:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 18 17:32:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2dbbe8e8fe873e9ae1db7d270ca2593e354f099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b3:3d:7e:c7:12:1c:61:5e:b2:09:9a:34:4b:
2d:9b:36:8a:d6:d6:77:e7:f1:9d:8f:16:73:64:49:
c1:7d:08:fa:6a:f4:dd:ef:74:de:df:73:ac:46:30:
28:51:5c:8e:82:d7:8e:87:fe:da:c5:61:94:e7:73:
81:35:21:26:9f:9d:d1:ae:0a:3f:69:26:56:b9:fe:
5b:aa:df:45:06:a1:4c:07:ff:3e:91:f6:bc:f6:36:
88:89:94:c3:1a:59:26:52:fd:00:af:71:aa:22:0f:
4e:4a:50:7e:11:4f:46:bd:07:70:8a:28:e0:d9:3b:
9d:13:3f:85:6c:3f:08:01:bb:9a:77:62:d9:f8:3c:
45:4b:27:54:45:a1:b8:65:75:38:2b:dd:f2:cf:72:
26:2c:cb:79:0e:84:ae:60:a5:06:82:fa:33:d1:54:
57:bc:0c:91:56:e0:17:f6:91:9f:d9:54:6e:7a:87:
8c:3b:7e:e1:1f:8f:4b:20:89:51:52:d2:27:f4:da:
ba:cb:30:d3:8b:23:6f:cc:07:01:f6:f8:af:a8:5d:
2b:61:e9:d7:4e:57:8a:3c:c8:0c:6f:37:fe:7e:7b:
30:ff:57:a0:d2:9e:f5:b2:f2:ca:d6:ab:fa:91:66:
ea:cb:b2:16:5c:ae:e6:54:8d:94:03:2c:21:e3:e1:
2d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DB:BE:8E:8F:E8:73:E9:AE:1D:B7:D2:70:CA:25:93:E3:54:F0:99
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/otu-jo_oc-muHbfScMolk-NU8Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
77.47.156.0/24
77.47.240.0/24
195.178.132.0/22
195.178.143.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:dd:87:8e:e6:c2:bb:77:2a:e5:44:ee:80:27:7e:bb:35:7d:
e1:1e:5f:ce:6f:0b:ad:2e:86:06:8b:24:28:02:ec:c2:1e:11:
51:0f:29:3f:7c:a0:34:17:e7:34:17:56:7f:73:09:01:80:4a:
69:80:80:c6:03:b3:15:9c:68:b9:e1:2f:2e:fc:4a:b0:59:f9:
b6:de:13:0d:9e:00:2a:ea:ad:03:f9:9c:bb:41:17:dc:f6:dd:
7e:49:4f:6e:ec:89:09:e5:56:21:26:7f:49:2d:d3:60:d4:ba:
b8:c5:3d:d6:36:ab:20:78:9b:25:48:b7:84:e0:1b:f4:32:20:
15:9a:32:c6:66:f1:9c:b9:a2:01:81:6f:1a:c0:33:fe:57:76:
a2:fe:af:35:7c:c3:1c:7e:02:eb:87:19:a1:e2:7a:46:82:28:
95:ba:a6:47:26:a1:f4:64:18:cb:49:8b:ef:d6:c2:dc:64:e6:
49:84:64:a6:a9:4d:26:24:07:ee:4d:9b:be:5e:66:fd:af:fe:
89:7c:1d:06:01:0c:e4:de:da:df:dc:aa:5b:33:4e:cd:ea:8d:
a9:7d:f9:c8:4d:ad:89:1f:e6:54:aa:6d:73:7c:5b:02:84:61:
38:ff:9d:b6:a1:a6:7a:b0:0c:f3:3c:f7:8b:09:64:d8:14:5b:
d1:68:e7:a0
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYKyA0jKONKPwA/7tyQop2GXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjIwODE4MTczMjE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmRiYmU4ZThmZTg3M2U5YWUxZGI3ZDI3MGNhMjU5M2UzNTRmMDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbM9fscSHGFesgmaNEstmzaK1tZ3
5/GdjxZzZEnBfQj6avTd73Te33OsRjAoUVyOgteOh/7axWGU53OBNSEmn53Rrgo/
aSZWuf5bqt9FBqFMB/8+kfa89jaIiZTDGlkmUv0Ar3GqIg9OSlB+EU9GvQdwiijg
2TudEz+FbD8IAbuad2LZ+DxFSydURaG4ZXU4K93yz3ImLMt5DoSuYKUGgvoz0VRX
vAyRVuAX9pGf2VRueoeMO37hH49LIIlRUtIn9Nq6yzDTiyNvzAcB9vivqF0rYenX
TleKPMgMbzf+fnsw/1eg0p71svLK1qv6kWbqy7IWXK7mVI2UAywh4+Et7QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKLbvo6P6HPprh230nDKJZPjVPCZMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvb3R1LWpvX29jLW11SGJmU2NNb2xrLU5VOEprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATS+OAwQA
TS+cAwQATS/wAwQCw7KEAwQAw7KPMA0GCSqGSIb3DQEBCwUAA4IBAQAe3YeO5sK7
dyrlRO6AJ367NX3hHl/ObwutLoYGiyQoAuzCHhFRDyk/fKA0F+c0F1Z/cwkBgEpp
gIDGA7MVnGi54S8u/EqwWfm23hMNngAq6q0D+Zy7QRfc9t1+SU9u7IkJ5VYhJn9J
LdNg1Lq4xT3WNqsgeJslSLeE4Bv0MiAVmjLGZvGcuaIBgW8awDP+V3ai/q81fMMc
fgLrhxmh4npGgiiVuqZHJqH0ZBjLSYvv1sLcZOZJhGSmqU0mJAfuTZu+Xmb9r/6J
fB0GAQzk3trf3KpbM07N6o2pffnITa2JH+ZUqm1zfFsChGE4/522oaZ6sAzzPPeL
CWTYFFvRaOeg
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org