Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/CLUWs8DInf_Qmn_qUXhkY8Hvvjg.roa
File: CLUWs8DInf_Qmn_qUXhkY8Hvvjg.roa (raw, json)
Hash identifier: Rpa8wjARXOLRMK24nKpnrjDCIDW8QvI/IiZTfhmIfeQ=
Subject key identifier: 08:B5:16:B3:C0:C8:9D:FF:D0:9A:7F:EA:51:78:64:63:C1:EF:BE:38
Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial: 380E5756
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/CLUWs8DInf_Qmn_qUXhkY8Hvvjg.roa
Signing time: Sat 01 Jan 2022 10:04:12 +0000
ROA not before: Sat 01 Jan 2022 10:04:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200964
IP address blocks: 77.221.36.0/24 maxlen: 24
77.221.37.0/24 maxlen: 24
77.221.38.0/24 maxlen: 24
77.221.42.0/24 maxlen: 24
77.221.39.0/24 maxlen: 24
77.221.40.0/24 maxlen: 24
77.221.41.0/24 maxlen: 24
77.221.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940463958 (0x380e5756)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Validity
Not Before: Jan 1 10:04:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08b516b3c0c89dffd09a7fea51786463c1efbe38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:61:26:84:18:fd:5d:1a:2b:3b:92:31:85:a5:
f5:13:ec:24:67:6d:4d:90:c9:3a:bd:6b:21:4c:96:
81:cb:a8:79:75:d4:1f:10:a8:16:a4:31:bd:dd:76:
7c:74:a9:d6:78:22:9a:77:d7:60:9b:38:14:fc:bf:
aa:bf:6b:08:13:07:83:73:3c:ee:92:6d:07:bc:8b:
df:28:bc:bc:96:58:a7:41:69:1a:67:0f:5e:a2:9f:
dc:5c:4f:5b:68:e2:09:45:3c:cc:5a:47:61:e0:06:
5f:f9:c2:52:43:55:5d:dc:46:c5:b4:81:6a:80:9d:
2a:07:69:4e:d2:31:19:27:d5:43:41:b7:d3:24:0b:
8a:ae:62:71:78:ee:99:b7:04:eb:d3:16:2c:cd:1b:
19:27:b8:62:45:25:cc:94:1c:a6:cb:be:2f:f7:57:
cc:a4:20:8d:19:67:27:c9:d2:d0:bd:8c:86:d0:b4:
ac:91:dd:52:0a:0b:f9:12:cf:6e:09:56:24:c3:a3:
4a:33:19:74:dc:8b:f1:49:da:96:d6:78:01:14:bd:
ad:40:3d:5a:13:8e:f2:88:be:c5:0d:58:59:48:b0:
02:71:e6:e8:2c:1c:38:48:7c:c7:53:58:98:55:66:
29:af:29:83:50:35:67:df:62:cd:dd:21:50:8e:c1:
20:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B5:16:B3:C0:C8:9D:FF:D0:9A:7F:EA:51:78:64:63:C1:EF:BE:38
X509v3 Authority Key Identifier:
keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/CLUWs8DInf_Qmn_qUXhkY8Hvvjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.36.0-77.221.42.255
77.221.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:eb:95:22:8f:d0:05:cd:fc:8a:87:81:ce:90:93:62:15:2b:
b0:33:fe:79:63:eb:cd:07:5d:8f:99:3c:80:66:5e:b5:5b:79:
ac:d6:54:7b:34:36:db:7e:d6:e5:c1:6d:ac:7f:10:d2:19:b4:
ac:e4:e1:5a:94:29:cc:ae:d5:e6:87:a0:96:be:86:44:92:d4:
c7:88:1b:10:a2:72:62:da:86:51:58:ca:0f:86:2e:bf:29:a6:
68:6a:31:e7:83:6b:05:f2:9a:4b:9b:cf:b2:85:88:f2:70:9c:
e9:98:70:14:89:fa:ff:86:bc:a2:9d:25:86:cc:e8:7a:10:f5:
9a:a4:ae:d5:34:b5:43:81:7d:55:c2:fe:5e:12:92:89:0a:f7:
98:c4:31:08:c7:22:7a:21:18:ea:36:28:c7:fe:81:76:9c:b9:
62:39:1e:e0:4f:f8:df:cf:98:15:03:4d:bb:c2:7c:62:49:e2:
f1:bb:d7:f0:1d:5b:62:ea:5d:9d:05:be:2d:d1:6b:f9:a4:0a:
95:15:a9:c6:7e:e9:a3:b6:68:1e:70:bf:b5:17:35:2d:b0:c2:
04:c7:80:84:5d:57:e9:06:1f:6d:26:0d:15:c5:fc:bd:35:d7:
17:04:08:7e:6e:e1:17:e2:5b:a1:cf:2a:40:54:d3:6c:53:fe:
cf:da:77:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:14 2023 by rpki-client on console.sobornost.net