Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/W89qc3GNvizxmtLKOJgk7VPdObc.roa
File: W89qc3GNvizxmtLKOJgk7VPdObc.roa (raw, json)
Hash identifier: F6gXl+Cc/cDN2JnVQiYtS1ByGVWqXF4GkKjt/a/16nk=
Subject key identifier: 5B:CF:6A:73:71:8D:BE:2C:F1:9A:D2:CA:38:98:24:ED:53:DD:39:B7
Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial: 380CD4A0
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/W89qc3GNvizxmtLKOJgk7VPdObc.roa
Signing time: Sat 01 Jan 2022 10:04:12 +0000
ROA not before: Sat 01 Jan 2022 10:04:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197889
IP address blocks: 77.221.34.0/23 maxlen: 23
77.221.32.0/20 maxlen: 20
77.221.35.0/24 maxlen: 24
77.221.32.0/22 maxlen: 22
77.221.32.0/23 maxlen: 23
77.221.32.0/24 maxlen: 24
77.221.33.0/24 maxlen: 24
77.221.34.0/24 maxlen: 24
77.221.43.0/24 maxlen: 24
77.221.44.0/23 maxlen: 23
77.221.49.0/24 maxlen: 24
77.221.46.0/23 maxlen: 23
77.221.52.0/23 maxlen: 23
77.221.56.0/23 maxlen: 23
77.221.54.0/23 maxlen: 24
77.221.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940364960 (0x380cd4a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Validity
Not Before: Jan 1 10:04:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bcf6a73718dbe2cf19ad2ca389824ed53dd39b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fa:ee:86:e9:f8:70:5e:62:36:2f:ad:dc:91:
90:a7:99:4b:ca:fd:3c:b0:12:db:4f:91:d2:9c:22:
09:76:97:a9:38:b9:97:eb:cd:bf:55:e3:0f:c6:19:
a4:10:a4:d9:3c:b8:32:2f:c0:2c:39:8e:27:27:12:
9d:6d:66:be:d0:c3:02:07:25:54:ce:af:9c:c1:68:
71:8a:59:7a:28:62:82:f3:d4:ad:93:2b:bd:e3:61:
29:a8:39:e0:35:86:01:a6:aa:e8:5d:2c:93:f2:88:
cc:ea:87:2e:fb:6e:e8:a7:8d:fd:b2:50:3a:85:7d:
a3:b9:a9:5b:51:aa:e4:af:6f:79:0c:d1:b1:6e:e3:
21:70:7d:c0:1c:cf:ca:b8:10:35:a3:c9:60:96:7a:
04:9f:70:e0:e1:5b:f9:5f:a8:c6:0e:d1:4d:29:77:
a8:79:a8:b3:76:36:f0:74:69:9e:b6:df:3c:f7:e1:
07:2e:4d:e7:30:5d:bd:5d:65:31:db:66:dd:32:6e:
75:dc:ab:96:b4:fa:85:29:9e:df:62:11:46:e5:a7:
a3:5e:d2:d3:af:2c:50:34:3b:5a:d1:ac:66:79:97:
27:81:09:86:d4:22:2a:5b:57:97:28:59:3a:16:b7:
1e:53:22:67:8a:f1:18:64:f2:15:47:6b:88:b1:c0:
e1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CF:6A:73:71:8D:BE:2C:F1:9A:D2:CA:38:98:24:ED:53:DD:39:B7
X509v3 Authority Key Identifier:
keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/W89qc3GNvizxmtLKOJgk7VPdObc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.32.0/20
77.221.49.0/24
77.221.52.0-77.221.57.255
77.221.62.0/24
Signature Algorithm: sha256WithRSAEncryption
49:79:1a:84:4c:9f:00:a4:c7:44:40:03:14:83:60:12:54:22:
f7:bd:4f:e3:85:9b:f8:e6:5a:52:f6:20:00:00:a2:e7:35:ed:
5f:45:e0:5e:3a:9a:12:66:18:66:6c:f1:24:05:2c:22:55:e2:
51:ca:e6:6d:b5:f8:cd:76:ab:e8:aa:59:36:e1:f5:c9:19:23:
42:5b:2a:b7:a5:6b:9a:7a:99:62:09:e4:8e:73:9a:e7:35:d9:
89:3f:f3:5d:37:67:dc:c5:b7:dd:bb:b8:46:17:df:30:ce:5d:
c7:d8:04:f6:49:bf:5d:d7:ab:83:bf:ca:68:42:09:96:40:b0:
7c:76:ff:0a:0e:58:c6:16:92:25:ee:c2:76:20:be:1c:a0:ab:
81:30:24:2a:8b:65:03:3f:c8:73:de:d0:70:ce:4a:37:60:99:
c1:bf:cd:01:0c:6f:fc:ee:66:3c:75:d7:8f:4e:ff:68:57:39:
bf:31:1e:bc:9a:e7:f8:21:46:95:c0:8a:9b:a4:bf:13:be:e2:
cf:8f:41:34:44:28:d7:9c:fc:11:5f:59:e7:5f:64:77:b8:0b:
af:6c:be:c7:02:a8:0e:85:4e:d7:4f:96:0e:75:5f:65:04:23:
19:c7:ef:51:d6:51:65:68:82:a5:21:8f:fa:91:52:95:33:68:
15:60:a8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:14 2023 by rpki-client on console.sobornost.net