Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/QreH_Xy8AwHxy-KlriYh1f4tJyw.roa
File: QreH_Xy8AwHxy-KlriYh1f4tJyw.roa (raw, json)
Hash identifier: Zrz8u9YBN2W0yNGC2CwWJMxxK3SNREG+kfhJUo3Euqs=
Subject key identifier: 42:B7:87:FD:7C:BC:03:01:F1:CB:E2:A5:AE:26:21:D5:FE:2D:27:2C
Certificate issuer: /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial: 0A364FEB
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/QreH_Xy8AwHxy-KlriYh1f4tJyw.roa
Signing time: Sat 01 Jan 2022 06:05:29 +0000
ROA not before: Sat 01 Jan 2022 06:05:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43391
IP address blocks: 77.223.132.0/24 maxlen: 24
77.223.128.0/19 maxlen: 24
77.223.136.0/24 maxlen: 24
77.223.135.0/24 maxlen: 24
77.223.143.0/24 maxlen: 24
93.187.200.0/21 maxlen: 21
93.187.206.0/24 maxlen: 24
93.187.205.0/24 maxlen: 24
93.187.207.0/24 maxlen: 24
195.244.32.0/19 maxlen: 24
195.244.33.0/24 maxlen: 24
77.223.148.0/23 maxlen: 23
77.223.152.0/24 maxlen: 24
77.223.158.0/24 maxlen: 24
77.223.153.0/24 maxlen: 24
77.223.156.0/24 maxlen: 24
77.223.154.0/24 maxlen: 24
91.191.160.0/20 maxlen: 24
91.191.171.0/24 maxlen: 24
91.191.170.0/24 maxlen: 24
91.191.168.0/21 maxlen: 21
78.40.224.0/21 maxlen: 21
2a0a:be80::/29 maxlen: 29
2a01:aac0::/32 maxlen: 32
2a0a:be80::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171331563 (0xa364feb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Validity
Not Before: Jan 1 06:05:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42b787fd7cbc0301f1cbe2a5ae2621d5fe2d272c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:57:6f:f4:a7:b1:8d:1d:ac:be:e2:1b:d2:
24:e2:4e:fd:d9:99:c4:e4:47:19:cf:46:93:78:16:
fe:2b:73:f4:fd:3d:bf:d0:40:af:86:55:8b:6c:66:
4a:d0:6f:72:81:4c:f6:8c:80:a6:ea:ce:71:c4:8e:
aa:cd:96:76:88:a4:9f:09:a8:d6:83:ac:a4:1e:3a:
94:6c:1d:bd:0d:51:c8:ab:00:15:93:79:c9:77:08:
15:ca:9d:90:0c:55:af:2e:e4:fb:c9:7a:d2:b5:ae:
1c:76:ba:a0:80:fe:29:7a:ed:4a:32:31:1b:cb:b1:
8a:4a:2e:f9:86:55:2f:47:fc:c4:fe:bf:9e:db:23:
17:94:34:11:1a:0e:ca:8f:b8:2b:d2:d1:2c:39:14:
91:3a:9b:f5:ee:09:de:a9:ed:4c:05:5b:12:03:27:
1d:fc:dd:a4:ca:bf:3d:18:87:b1:94:19:c0:e7:7d:
1e:29:2b:dc:ca:86:f7:73:0e:2d:f2:c2:88:06:8d:
0f:4e:46:fb:29:05:9c:42:59:21:81:1e:d1:29:e2:
7c:49:09:fd:49:0d:eb:80:df:cc:0f:bd:65:2a:d9:
a6:c4:ae:a7:d5:4f:5e:8f:49:94:c3:f9:61:33:9e:
6e:9f:d9:55:66:d4:76:16:2c:67:d7:b9:79:85:a8:
b1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B7:87:FD:7C:BC:03:01:F1:CB:E2:A5:AE:26:21:D5:FE:2D:27:2C
X509v3 Authority Key Identifier:
keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/QreH_Xy8AwHxy-KlriYh1f4tJyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.128.0/19
78.40.224.0/21
91.191.160.0/20
93.187.200.0/21
195.244.32.0/19
IPv6:
2a01:aac0::/32
2a0a:be80::/29
Signature Algorithm: sha256WithRSAEncryption
3a:63:ca:2c:b0:ce:dd:28:09:ce:95:b1:c7:77:e5:aa:db:c9:
a6:35:3a:58:ae:7b:5a:4a:af:eb:63:81:46:18:01:80:6a:a2:
a6:40:64:f7:32:30:f6:1e:d7:b5:9f:5a:ad:a4:c8:eb:93:4e:
b3:37:90:5b:f7:66:f3:3d:da:f0:8a:d2:86:a1:4b:cf:97:08:
ff:75:82:26:dc:ee:ca:c7:ee:30:70:09:56:39:90:58:c6:3e:
e2:99:32:3c:1e:c6:a7:7e:33:80:ec:98:0e:d7:a6:4f:95:3c:
82:a9:94:e0:7a:02:4d:07:ce:3c:66:5d:b7:4d:5b:66:05:dc:
58:c4:72:aa:21:f7:4b:21:1a:2c:bf:9a:6c:19:6c:ec:f5:01:
5a:d1:a4:c3:f1:cc:23:f8:a4:f6:61:ef:d1:c7:89:00:60:24:
13:69:eb:f2:9e:22:9e:bc:de:fe:ab:d2:7f:69:c8:08:4b:36:
a0:12:2b:b5:65:36:37:56:90:4c:b7:15:70:e6:cc:00:a4:ae:
14:e3:95:94:58:e3:9a:35:dd:3f:cc:23:75:22:14:45:ee:af:
69:92:1c:e1:33:88:d0:e9:79:11:69:a4:93:31:03:0d:f9:d3:
0c:c6:27:f2:53:6c:f6:8d:b3:13:fa:b5:d2:4c:f7:5a:d9:78:
ee:c5:ad:a3
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIECjZP6zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MzAyY2RjMjlmZGNhMDllOWEwZjNmN2QyMTEzZGE4NWE3ZTFkNjU0MB4XDTIyMDEw
MTA2MDUyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDJiNzg3ZmQ3Y2Jj
MDMwMWYxY2JlMmE1YWUyNjIxZDVmZTJkMjcyYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMoyV2/0p7GNHay+4hvSJOJO/dmZxORHGc9Gk3gW/itz9P09
v9BAr4ZVi2xmStBvcoFM9oyApurOccSOqs2Wdoiknwmo1oOspB46lGwdvQ1RyKsA
FZN5yXcIFcqdkAxVry7k+8l60rWuHHa6oID+KXrtSjIxG8uxikou+YZVL0f8xP6/
ntsjF5Q0ERoOyo+4K9LRLDkUkTqb9e4J3qntTAVbEgMnHfzdpMq/PRiHsZQZwOd9
Hikr3MqG93MOLfLCiAaND05G+ykFnEJZIYEe0SnifEkJ/UkN64DfzA+9ZSrZpsSu
p9VPXo9JlMP5YTOebp/ZVWbUdhYsZ9e5eYWoscMCAwEAAaOCAjcwggIzMB0GA1Ud
DgQWBBRCt4f9fLwDAfHL4qWuJiHV/i0nLDAfBgNVHSMEGDAWgBRzAs3Cn9ygnpoP
P30hE9qFp+HWVDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2N3TE53cF9jb0o2YUR6OTlJUlBhaGFmaDFsUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTgvNzcyMTdkLTgxNGItNDg2YS04ZWYyLWZlMDMzM2VkMDA1Zi8x
L1FyZUhfWHk4QXdIeHktS2xyaVloMWY0dEp5dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgv
NzcyMTdkLTgxNGItNDg2YS04ZWYyLWZlMDMzM2VkMDA1Zi8xL2N3TE53cF9jb0o2
YUR6OTlJUlBhaGFmaDFsUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBN
BggrBgEFBQcBBwEB/wQ+MDwwJAQCAAEwHgMEBU3fgAMEA04o4AMEBFu/oAMEA127
yAMEBcP0IDAUBAIAAjAOAwUAKgGqwAMFAyoKvoAwDQYJKoZIhvcNAQELBQADggEB
ADpjyiywzt0oCc6Vscd35arbyaY1Oliue1pKr+tjgUYYAYBqoqZAZPcyMPYe17Wf
Wq2kyOuTTrM3kFv3ZvM92vCK0oahS8+XCP91gibc7srH7jBwCVY5kFjGPuKZMjwe
xqd+M4DsmA7Xpk+VPIKplOB6Ak0HzjxmXbdNW2YF3FjEcqoh90shGiy/mmwZbOz1
AVrRpMPxzCP4pPZh79HHiQBgJBNp6/KeIp683v6r0n9pyAhLNqASK7VlNjdWkEy3
FXDmzACkrhTjlZRY45o13T/MI3UiFEXur2mSHOEziNDpeRFppJMxAw350wzGJ/JT
bPaNsxP6tdJM91rZeO7FraM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-fra.rpki-client.org