Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/pfno2jWHeTsidOUY7QFRuMDZHyE.roa
File: pfno2jWHeTsidOUY7QFRuMDZHyE.roa (raw, json)
Hash identifier: hrYeY77/FtfqnclZbu93M4sQ5Y/6z8KgZl49j4vvIsA=
Subject key identifier: A5:F9:E8:DA:35:87:79:3B:22:74:E5:18:ED:01:51:B8:C0:D9:1F:21
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1D235EFF
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/pfno2jWHeTsidOUY7QFRuMDZHyE.roa
Signing time: Sun 20 Mar 2022 20:13:59 +0000
ROA not before: Sun 20 Mar 2022 20:13:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3319
IP address blocks: 195.178.144.0/21 maxlen: 21
185.143.56.0/22 maxlen: 24
195.178.152.0/22 maxlen: 22
77.47.210.0/23 maxlen: 24
77.47.212.0/23 maxlen: 24
77.47.240.0/23 maxlen: 24
77.47.244.0/22 maxlen: 22
77.47.248.0/22 maxlen: 24
77.47.252.0/22 maxlen: 24
77.47.148.0/22 maxlen: 24
77.47.152.0/24 maxlen: 24
77.47.154.0/24 maxlen: 24
77.47.153.0/24 maxlen: 24
77.47.155.0/24 maxlen: 24
77.47.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488857343 (0x1d235eff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 20 20:13:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5f9e8da3587793b2274e518ed0151b8c0d91f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:84:ac:3e:90:99:70:c1:51:a9:95:4b:14:
05:2a:49:9f:29:97:25:50:db:6c:63:0f:8a:43:68:
40:89:e7:ea:a3:ad:50:66:cf:7e:67:56:e0:81:59:
57:30:b9:87:10:08:5b:42:24:b5:9c:a3:aa:2a:96:
8d:53:37:de:0c:71:5c:5f:63:1b:09:9b:ab:bb:c7:
de:8e:c2:46:47:82:b5:fc:5f:25:1a:c8:63:74:1f:
f7:fe:3f:50:85:8b:6e:42:eb:98:7d:90:65:a0:78:
03:12:20:d0:8d:5f:a7:d2:76:f9:58:39:c0:62:30:
3f:c0:f6:6e:9a:e2:70:53:f8:bd:62:b4:cc:1b:ac:
ea:ab:9c:99:b4:d5:30:cc:e4:95:60:89:95:fb:68:
5e:df:11:54:11:01:f2:fe:d5:71:27:ac:57:ce:71:
ea:5f:99:9a:ea:dd:da:d2:6d:76:76:d9:54:af:ec:
85:f4:27:3a:f7:6d:34:95:bd:79:4a:c3:a8:1b:fc:
56:f2:4c:26:2d:0a:6a:b7:8d:75:23:53:72:fc:86:
fb:dd:ca:98:4c:04:9d:61:9b:0d:db:af:37:fa:49:
4e:4c:3a:d8:77:24:7a:89:a8:ee:0c:f5:11:a3:9b:
b0:31:64:9c:d8:00:dc:67:1c:58:ab:de:a0:c9:15:
c2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F9:E8:DA:35:87:79:3B:22:74:E5:18:ED:01:51:B8:C0:D9:1F:21
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/pfno2jWHeTsidOUY7QFRuMDZHyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.148.0-77.47.159.255
77.47.210.0-77.47.213.255
77.47.240.0/23
77.47.244.0-77.47.255.255
185.143.56.0/22
195.178.144.0-195.178.155.255
Signature Algorithm: sha256WithRSAEncryption
b5:09:0d:df:bb:57:52:83:01:38:f0:37:31:bc:89:2c:1f:d5:
7e:ae:74:96:2b:27:32:09:28:6e:37:7d:04:0a:d5:42:08:3c:
cf:a2:02:8b:fc:65:83:e6:a5:99:67:5b:83:05:61:e4:2a:90:
e3:82:b8:8c:0b:49:92:35:fb:af:57:ce:88:f5:25:b7:e3:9a:
f8:b4:9b:25:eb:38:93:d2:2d:70:1d:a0:83:41:1f:e3:83:5e:
0a:40:56:07:80:86:3b:16:3d:d8:cc:41:0b:13:51:ad:95:00:
66:63:a8:54:cd:37:37:ae:9e:20:92:85:fb:42:be:a4:8a:39:
42:57:72:ef:d8:e8:63:13:f8:3e:b7:5d:0c:a7:84:e2:98:7d:
33:a0:47:23:88:fb:c1:f1:03:c9:6a:5a:bb:bc:79:92:98:96:
a0:28:ef:03:1b:cb:b6:2e:ce:9c:71:32:d6:44:c1:26:b6:23:
6d:ed:9d:a9:85:19:0c:7a:28:8a:e8:29:ee:d2:01:e6:70:3c:
ac:09:84:1c:ac:6b:1a:f7:1c:0f:23:65:a3:7e:9d:ba:0a:9c:
af:eb:89:e5:0e:29:8c:31:12:94:41:6e:93:45:7f:9c:4f:10:
da:e4:3e:5a:56:80:8c:65:b0:64:ef:54:dd:f1:38:45:ff:4d:
7f:3b:b4:d7
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIEHSNe/zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTQyNjMyNWFjYjhjZTYwOWE2ODZmYTY1NWIwNTg5Njg4MDliMzQ2MB4XDTIyMDMy
MDIwMTM1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTVmOWU4ZGEzNTg3
NzkzYjIyNzRlNTE4ZWQwMTUxYjhjMGQ5MWYyMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKs+hKw+kJlwwVGplUsUBSpJnymXJVDbbGMPikNoQInn6qOt
UGbPfmdW4IFZVzC5hxAIW0IktZyjqiqWjVM33gxxXF9jGwmbq7vH3o7CRkeCtfxf
JRrIY3Qf9/4/UIWLbkLrmH2QZaB4AxIg0I1fp9J2+Vg5wGIwP8D2bpricFP4vWK0
zBus6qucmbTVMMzklWCJlftoXt8RVBEB8v7VcSesV85x6l+Zmurd2tJtdnbZVK/s
hfQnOvdtNJW9eUrDqBv8VvJMJi0KareNdSNTcvyG+93KmEwEnWGbDduvN/pJTkw6
2Hckeomo7gz1EaObsDFknNgA3GccWKveoMkVwocCAwEAAaOCAkYwggJCMB0GA1Ud
DgQWBBSl+ejaNYd5OyJ05RjtAVG4wNkfITAfBgNVHSMEGDAWgBQZQmMlrLjOYJpo
b6ZVsFiWiAmzRjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dVSmpKYXk0em1DYWFHLW1WYkJZbG9nSnMwWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvOGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8x
L3Bmbm8yaldIZVRzaWRPVVk3UUZSdU1EWkh5RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
OGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8xL0dVSmpKYXk0em1D
YWFHLW1WYkJZbG9nSnMwWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBc
BggrBgEFBQcBBwEB/wRNMEswSQQCAAEwQzAMAwQCTS+UAwQFTS+AMAwDBAFNL9ID
BAFNL9QDBAFNL/AwCwMEAk0v9AMDBE0gAwQCuY84MAwDBATDspADBALDspgwDQYJ
KoZIhvcNAQELBQADggEBALUJDd+7V1KDATjwNzG8iSwf1X6udJYrJzIJKG43fQQK
1UIIPM+iAov8ZYPmpZlnW4MFYeQqkOOCuIwLSZI1+69Xzoj1Jbfjmvi0myXrOJPS
LXAdoINBH+ODXgpAVgeAhjsWPdjMQQsTUa2VAGZjqFTNNzeuniCShftCvqSKOUJX
cu/Y6GMT+D63XQynhOKYfTOgRyOI+8HxA8lqWru8eZKYlqAo7wMby7YuzpxxMtZE
wSa2I23tnamFGQx6KIroKe7SAeZwPKwJhBysaxr3HA8jZaN+nboKnK/rieUOKYwx
EpRBbpNFf5xPENrkPlpWgIxlsGTvVN3xOEX/TX87tNc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org