Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/hOJtJyny-Em4xjycMUkiczm0cEY.roa
File: hOJtJyny-Em4xjycMUkiczm0cEY.roa (raw, json)
Hash identifier: hB9fjaHPVQeVn0hNFrwIxAokQiKesT8p4bFWB7ksqCQ=
Subject key identifier: 84:E2:6D:27:29:F2:F8:49:B8:C6:3C:9C:31:49:22:73:39:B4:70:46
Certificate issuer: /CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Certificate serial: 0185718C2290B7077EA3637C250F75D55D14
Authority key identifier: 1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/hOJtJyny-Em4xjycMUkiczm0cEY.roa
Signing time: Mon 02 Jan 2023 08:14:47 +0000
ROA not before: Mon 02 Jan 2023 08:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41931
IP address blocks: 77.46.32.0/19 maxlen: 19
77.46.64.0/20 maxlen: 20
77.46.80.0/20 maxlen: 20
77.46.96.0/20 maxlen: 20
195.177.196.0/23 maxlen: 23
77.46.4.0/22 maxlen: 22
77.46.8.0/21 maxlen: 21
77.46.112.0/20 maxlen: 20
77.46.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:22:90:b7:07:7e:a3:63:7c:25:0f:75:d5:5d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c8e17411e0100c914b040d514c28e1d7d36991e
Validity
Not Before: Jan 2 08:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84e26d2729f2f849b8c63c9c3149227339b47046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ec:78:4d:b7:72:7a:35:5a:2a:5b:c8:09:fc:
8a:3e:c7:51:bf:60:ad:4a:12:9b:0f:48:0b:14:7e:
d3:84:01:c4:82:32:85:80:e5:0e:9b:2f:d0:b1:fc:
64:3b:3f:5e:06:35:1e:b7:39:b2:36:8f:a6:85:60:
e2:ae:65:21:8b:02:7d:ac:0a:15:a3:f9:a2:ef:ba:
e7:52:59:9e:50:db:13:91:cc:fd:df:3b:29:b3:7f:
7c:7a:06:b2:4d:cb:1f:2e:46:94:8e:c9:31:a3:43:
c9:65:6c:ae:da:98:a3:43:89:38:b7:ec:d3:8d:8d:
25:fa:92:da:ff:8f:c7:00:80:8e:b7:84:50:ac:99:
76:4f:98:38:91:b7:b6:77:22:46:6c:2d:e5:d1:5f:
e0:2c:23:11:a3:b8:df:23:4b:1b:b8:6b:19:01:05:
07:b5:93:79:ea:cd:5a:ef:7e:c9:c3:90:17:53:0a:
09:13:12:c0:97:26:17:16:e6:85:99:1a:35:65:bb:
ca:65:1c:4f:ec:69:8a:91:d6:7f:39:58:d5:d6:0c:
2f:78:47:5d:ac:17:08:a2:ea:63:d7:e3:67:ab:70:
29:9c:c3:e6:d3:37:5c:6d:2c:aa:40:dd:6d:5f:29:
ce:7e:b1:7c:95:e3:ce:63:ef:ab:9c:d0:98:07:e6:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E2:6D:27:29:F2:F8:49:B8:C6:3C:9C:31:49:22:73:39:B4:70:46
X509v3 Authority Key Identifier:
keyid:1C:8E:17:41:1E:01:00:C9:14:B0:40:D5:14:C2:8E:1D:7D:36:99:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HI4XQR4BAMkUsEDVFMKOHX02mR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/hOJtJyny-Em4xjycMUkiczm0cEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/HI4XQR4BAMkUsEDVFMKOHX02mR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.46.4.0-77.46.127.255
195.177.196.0/23
Signature Algorithm: sha256WithRSAEncryption
87:1e:91:ba:b3:82:fc:34:24:14:6d:b7:48:ea:43:6f:5d:d4:
69:be:a8:f4:d7:b1:07:3e:08:6a:c0:49:92:e5:73:9f:8b:51:
62:18:e8:69:0d:dd:3a:8b:91:f1:29:62:fd:3e:56:98:52:f6:
34:df:b2:f3:85:57:7e:54:67:61:d0:b1:bf:34:8b:9f:04:1a:
49:3c:1e:77:df:09:c6:cb:60:a2:db:08:24:bc:f0:1e:c0:56:
16:cb:2b:e5:d1:4d:95:af:4c:d6:c0:0a:13:00:2e:48:d6:69:
36:56:1b:04:99:5b:d8:8b:3e:14:1f:a9:c2:13:cf:fb:09:55:
05:5a:57:2a:70:ca:5e:14:dd:25:b2:d3:e6:ea:65:00:82:91:
b5:3d:d2:b4:01:b5:0f:dc:08:eb:1e:4f:79:6a:a6:86:da:42:
82:ca:2d:b4:83:39:8f:3f:84:52:6a:71:b0:f4:80:f8:ca:83:
54:5c:6b:38:bc:ae:b7:88:1e:22:28:6e:93:42:d5:45:1c:65:
f0:75:e4:76:8f:a3:d1:26:fd:02:0b:2c:b6:9b:9b:4b:eb:d3:
6d:1a:af:4b:bf:1e:81:72:f2:41:3a:fd:03:c2:20:72:a6:22:
a1:ac:95:17:a4:35:1f:5b:52:ae:3c:e7:08:f4:c0:77:45:fd:
70:24:df:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:28:09 2025 by rpki-client