Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/tIYrritwl4Cz_EsVCqexOIn_vQU.roa
File: tIYrritwl4Cz_EsVCqexOIn_vQU.roa (raw, json)
Hash identifier: AN+5gk1hGii77j8vLWG7hpvL0pZXVfFDCaLtXT4bRX8=
Subject key identifier: B4:86:2B:AE:2B:70:97:80:B3:FC:4B:15:0A:A7:B1:38:89:FF:BD:05
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01828DD1A16C6B44385690CC1C02DA03952B
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/tIYrritwl4Cz_EsVCqexOIn_vQU.roa
Signing time: Thu 11 Aug 2022 16:51:41 +0000
ROA not before: Thu 11 Aug 2022 16:51:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 77.47.240.0/24 maxlen: 24
77.47.241.0/24 maxlen: 24
77.47.142.0/24 maxlen: 24
195.178.143.0/24 maxlen: 24
77.47.156.0/24 maxlen: 24
195.178.146.0/24 maxlen: 24
195.178.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8d:d1:a1:6c:6b:44:38:56:90:cc:1c:02:da:03:95:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 11 16:51:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4862bae2b709780b3fc4b150aa7b13889ffbd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:7f:b6:be:2a:16:81:69:14:f0:15:67:41:
b4:6b:ba:49:c2:60:19:f4:75:72:f1:85:5b:4e:fe:
aa:c2:48:cb:dd:24:89:7c:72:40:2e:2d:7f:b8:58:
e4:6e:11:e3:2f:1c:a9:4f:cf:2b:76:ff:6c:51:4a:
44:05:f4:31:7f:6a:be:ff:c2:45:d1:45:68:6c:23:
ba:81:94:3a:e1:c6:03:bc:b3:f2:d9:bc:93:00:58:
cf:71:0b:f4:b6:1d:49:4c:83:c6:82:b5:0b:cc:83:
da:7a:29:bb:0b:94:11:6f:6d:0f:76:96:69:82:b4:
79:e9:60:22:f9:3f:f8:ae:91:8d:b0:2c:6a:f4:81:
2d:d9:22:1a:4c:eb:95:67:8d:4c:74:31:74:eb:56:
09:e5:e8:48:bf:ff:fd:b9:dd:dc:dc:fe:bb:f5:30:
62:62:29:03:e3:5c:17:ab:1a:12:b1:65:0c:c5:03:
c6:26:56:8c:82:85:13:1e:0c:ce:4b:a0:45:8d:7c:
93:f2:93:57:fe:29:96:90:38:66:87:46:aa:7e:8e:
78:41:7e:4b:ed:b2:be:fc:d9:d6:4e:88:7f:85:4f:
a1:78:4b:4e:9f:5c:20:25:23:06:87:4e:ce:07:54:
bc:1e:69:85:4a:f4:4e:0b:99:90:8f:f7:f6:b1:d9:
06:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:86:2B:AE:2B:70:97:80:B3:FC:4B:15:0A:A7:B1:38:89:FF:BD:05
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/tIYrritwl4Cz_EsVCqexOIn_vQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
77.47.156.0/24
77.47.240.0/23
195.178.143.0/24
195.178.146.0/23
Signature Algorithm: sha256WithRSAEncryption
75:ba:fd:68:a2:4a:69:00:7c:fc:34:1a:df:30:45:b5:da:af:
e5:ac:47:cc:b6:25:58:54:f5:29:64:d1:d0:03:9c:eb:9d:71:
73:59:50:06:c0:d9:00:04:5d:3d:70:14:c5:ad:d0:51:f3:45:
c4:6e:2e:46:43:d0:5d:c0:b0:b2:bf:79:a6:f8:9b:10:93:ca:
02:f8:70:6e:d9:b8:a4:2b:d1:1d:47:d8:49:63:81:0a:c5:fe:
23:8b:de:07:4b:eb:d3:d3:15:5c:6b:f8:99:36:f9:4c:21:aa:
7a:f6:91:ce:93:d3:b1:ec:d5:79:0d:f2:c9:d3:f4:ac:ac:f9:
e3:58:fb:46:c8:49:60:6c:1f:59:27:d8:77:2a:8b:bc:f4:cd:
3b:37:c8:e4:1f:ea:4e:b1:ed:f4:84:95:d7:c9:d6:7b:93:85:
54:c2:d3:fa:59:7b:6e:84:1a:57:a7:f7:e4:5d:c5:bf:9e:9a:
32:62:3b:5a:90:7e:12:4d:71:fb:e4:ed:52:5b:17:e6:2c:13:
e0:58:1d:38:7c:ef:42:b7:8b:d8:e9:a0:cc:4d:39:6f:c8:ec:
14:f2:87:cb:5a:02:a3:05:03:eb:8d:2a:53:91:9a:d1:e2:4a:
1c:d0:58:b1:81:69:97:99:35:93:48:47:5d:a8:b4:19:34:c0:
94:dc:d0:8e
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYKN0aFsa0Q4VpDMHALaA5UrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjIwODExMTY1MTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDg2MmJhZTJiNzA5NzgwYjNmYzRiMTUwYWE3YjEzODg5ZmZiZDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY1/tr4qFoFpFPAVZ0G0a7pJwmAZ
9HVy8YVbTv6qwkjL3SSJfHJALi1/uFjkbhHjLxypT88rdv9sUUpEBfQxf2q+/8JF
0UVobCO6gZQ64cYDvLPy2byTAFjPcQv0th1JTIPGgrULzIPaeim7C5QRb20PdpZp
grR56WAi+T/4rpGNsCxq9IEt2SIaTOuVZ41MdDF061YJ5ehIv//9ud3c3P679TBi
YikD41wXqxoSsWUMxQPGJlaMgoUTHgzOS6BFjXyT8pNX/imWkDhmh0aqfo54QX5L
7bK+/NnWToh/hU+heEtOn1wgJSMGh07OB1S8HmmFSvROC5mQj/f2sdkGaQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFLSGK64rcJeAs/xLFQqnsTiJ/70FMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvdElZcnJpdHdsNEN6X0VzVkNxZXhPSW5fdlFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATS+OAwQA
TS+cAwQBTS/wAwQAw7KPAwQBw7KSMA0GCSqGSIb3DQEBCwUAA4IBAQB1uv1ookpp
AHz8NBrfMEW12q/lrEfMtiVYVPUpZNHQA5zrnXFzWVAGwNkABF09cBTFrdBR80XE
bi5GQ9BdwLCyv3mm+JsQk8oC+HBu2bikK9EdR9hJY4EKxf4ji94HS+vT0xVca/iZ
NvlMIap69pHOk9Ox7NV5DfLJ0/SsrPnjWPtGyElgbB9ZJ9h3Kou89M07N8jkH+pO
se30hJXXydZ7k4VUwtP6WXtuhBpXp/fkXcW/npoyYjtakH4STXH75O1SWxfmLBPg
WB04fO9Ct4vY6aDMTTlvyOwU8ofLWgKjBQPrjSpTkZrR4koc0FixgWmXmTWTSEdd
qLQZNMCU3NCO
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:38 2024 by rpki-client on console-ams.rpki-client.org