Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/zApv6xxn1EH6zGJuwH5zPiEVXnk.roa
File: zApv6xxn1EH6zGJuwH5zPiEVXnk.roa (raw, json)
Hash identifier: UOH2T21MAlycRhphXxO16jAPTWMFfo7alcfO3TQEKjo=
Subject key identifier: CC:0A:6F:EB:1C:67:D4:41:FA:CC:62:6E:C0:7E:73:3E:21:15:5E:79
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 1CA2F6D6
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/zApv6xxn1EH6zGJuwH5zPiEVXnk.roa
Signing time: Tue 01 Feb 2022 07:43:31 +0000
ROA not before: Tue 01 Feb 2022 07:43:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.244.0/22 maxlen: 22
77.47.152.0/24 maxlen: 24
195.178.144.0/21 maxlen: 21
77.47.154.0/24 maxlen: 24
77.47.153.0/24 maxlen: 24
77.47.155.0/24 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480442070 (0x1ca2f6d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 1 07:43:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc0a6feb1c67d441facc626ec07e733e21155e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:c7:a8:2a:3f:f3:26:5e:85:3a:90:41:26:
f9:af:80:31:a5:a7:95:f4:f4:35:e9:72:c1:f8:53:
0f:42:5a:39:ce:b4:87:ef:fc:22:5f:47:c6:73:af:
18:f0:1c:36:b8:17:b6:15:e9:d2:c1:64:a7:63:da:
e1:c1:02:f5:fe:4d:2a:18:dc:ed:8d:03:b3:01:a1:
10:eb:21:f8:d0:e9:30:b2:43:07:ec:fc:50:a5:52:
13:6b:8b:50:39:6f:f8:d8:4a:de:ca:be:bb:45:c0:
21:bf:32:d0:6c:a2:3a:69:96:ec:f4:aa:d4:09:cf:
59:68:c1:5e:75:6c:0b:68:9f:30:55:c9:fe:0c:ac:
5c:97:1c:12:66:55:90:6f:7b:b8:c6:33:dc:3e:5e:
96:ed:62:71:20:15:17:93:38:f1:4f:77:99:55:46:
0c:ff:a0:ca:ea:fb:43:d1:14:25:da:be:6f:76:73:
0e:46:1b:66:3c:17:cb:94:62:70:f9:6c:90:b9:a6:
e4:d1:34:a6:d9:29:f6:ac:7b:cc:e0:6e:78:62:09:
c4:fd:03:89:0a:aa:db:96:9a:3d:c8:32:1e:28:07:
32:d9:d1:56:a0:fb:26:92:0e:db:e0:fb:f8:76:22:
6f:43:7f:0c:86:36:1f:c9:e5:18:f9:f7:77:6e:74:
90:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0A:6F:EB:1C:67:D4:41:FA:CC:62:6E:C0:7E:73:3E:21:15:5E:79
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/zApv6xxn1EH6zGJuwH5zPiEVXnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.152.0/22
77.47.244.0/22
185.143.56.0/22
195.178.144.0-195.178.155.255
Signature Algorithm: sha256WithRSAEncryption
b6:8b:89:92:23:a9:08:ce:24:ae:a6:2d:3f:3b:31:c4:ad:93:
d0:b7:31:55:01:bf:f4:ef:90:5c:e3:a5:0a:ea:dd:83:56:f5:
2c:df:5d:0d:11:93:54:38:0b:a6:f1:58:d7:77:a8:33:92:36:
a2:56:d6:ea:0c:09:f1:24:df:24:fb:e3:50:81:63:9c:db:91:
a6:a6:b3:54:b3:5f:f5:7e:70:ac:a0:a9:96:12:56:4e:86:ab:
8e:3c:9a:84:27:ab:9c:10:85:a5:79:f6:4a:3d:dd:db:8e:68:
50:64:c5:e0:13:f1:20:81:ee:b4:06:ff:3a:1b:ae:81:10:80:
a0:83:e4:69:a1:6e:2f:0f:79:f8:d9:79:bf:83:b3:a9:4e:19:
fa:85:82:82:56:6b:65:b5:5a:64:c9:39:46:71:5d:83:00:6a:
e1:6f:8a:5d:27:de:1e:19:df:c9:46:b0:a6:d0:c3:08:f4:fb:
c7:05:ff:52:f0:43:1c:7b:39:11:13:0e:88:4c:07:00:2c:5c:
5c:fa:a3:aa:d8:55:2e:5b:2c:f8:55:19:d0:5f:84:fe:bd:1c:
e5:8d:9c:77:fc:dc:6b:57:a6:fe:77:3d:e6:f7:6f:ab:88:0f:
7b:a3:3f:9b:60:b5:8b:cd:3c:28:44:4a:3b:d5:81:e5:46:8b:
d4:8c:ed:40
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIEHKL21jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
OTQyNjMyNWFjYjhjZTYwOWE2ODZmYTY1NWIwNTg5Njg4MDliMzQ2MB4XDTIyMDIw
MTA3NDMzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2MwYTZmZWIxYzY3
ZDQ0MWZhY2M2MjZlYzA3ZTczM2UyMTE1NWU3OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKVkx6gqP/MmXoU6kEEm+a+AMaWnlfT0NelywfhTD0JaOc60
h+/8Il9HxnOvGPAcNrgXthXp0sFkp2Pa4cEC9f5NKhjc7Y0DswGhEOsh+NDpMLJD
B+z8UKVSE2uLUDlv+NhK3sq+u0XAIb8y0GyiOmmW7PSq1AnPWWjBXnVsC2ifMFXJ
/gysXJccEmZVkG97uMYz3D5elu1icSAVF5M48U93mVVGDP+gyur7Q9EUJdq+b3Zz
DkYbZjwXy5RicPlskLmm5NE0ptkp9qx7zOBueGIJxP0DiQqq25aaPcgyHigHMtnR
VqD7JpIO2+D7+HYib0N/DIY2H8nlGPn3d250kAsCAwEAAaOCAiMwggIfMB0GA1Ud
DgQWBBTMCm/rHGfUQfrMYm7AfnM+IRVeeTAfBgNVHSMEGDAWgBQZQmMlrLjOYJpo
b6ZVsFiWiAmzRjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dVSmpKYXk0em1DYWFHLW1WYkJZbG9nSnMwWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvOGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8x
L3pBcHY2eHhuMUVINnpHSnV3SDV6UGlFVlhuay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
OGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2MzNC8xL0dVSmpKYXk0em1D
YWFHLW1WYkJZbG9nSnMwWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5
BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEAk0vmAMEAk0v9AMEArmPODAMAwQE
w7KQAwQCw7KYMA0GCSqGSIb3DQEBCwUAA4IBAQC2i4mSI6kIziSupi0/OzHErZPQ
tzFVAb/075Bc46UK6t2DVvUs310NEZNUOAum8VjXd6gzkjaiVtbqDAnxJN8k++NQ
gWOc25GmprNUs1/1fnCsoKmWElZOhquOPJqEJ6ucEIWlefZKPd3bjmhQZMXgE/Eg
ge60Bv86G66BEICgg+RpoW4vD3n42Xm/g7OpThn6hYKCVmtltVpkyTlGcV2DAGrh
b4pdJ94eGd/JRrCm0MMI9PvHBf9S8EMcezkREw6ITAcALFxc+qOq2FUuWyz4VRnQ
X4T+vRzljZx3/NxrV6b+dz3m92+riA97oz+bYLWLzTwoREo71YHlRovUjO1A
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org