Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/dyGNEEZCc2ITG6F7UJhYyeJytU4.roa
File: dyGNEEZCc2ITG6F7UJhYyeJytU4.roa (raw, json)
Hash identifier: /BAbess61VIel/U0BmyOnEIVUJaVVqc72jvOpf8oB3c=
Subject key identifier: 77:21:8D:10:46:42:73:62:13:1B:A1:7B:50:98:58:C9:E2:72:B5:4E
Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial: 380BBBBC
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/dyGNEEZCc2ITG6F7UJhYyeJytU4.roa
Signing time: Sat 01 Jan 2022 10:04:11 +0000
ROA not before: Sat 01 Jan 2022 10:04:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39679
IP address blocks: 77.221.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940293052 (0x380bbbbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Validity
Not Before: Jan 1 10:04:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=77218d1046427362131ba17b509858c9e272b54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:79:ad:02:25:e3:7a:17:3d:93:64:12:ff:e0:
c7:6d:23:fe:74:24:36:70:7a:c0:67:55:1a:e3:66:
d3:24:da:bb:7f:26:1f:ed:03:c2:ea:90:e0:c1:e8:
76:f4:a0:4b:d2:b8:85:fc:53:71:0c:22:15:28:6b:
d4:ce:47:89:db:e2:68:3f:89:45:04:8e:b4:dc:4a:
ba:b8:63:38:c0:0e:41:dd:6d:8c:58:82:e7:38:fd:
44:6d:7a:24:48:dd:b0:0d:8b:51:de:88:09:de:58:
0e:e8:94:d0:ec:ef:2c:e2:ae:f3:80:59:0e:ac:59:
0f:e5:01:23:97:f2:8e:2c:f8:c1:80:d7:d0:d8:58:
f2:52:f3:ea:65:1f:60:fe:b5:26:41:f1:05:6e:f2:
35:ea:20:aa:ef:42:b3:a6:2e:b6:57:d4:29:18:62:
a9:cd:de:78:36:e2:be:7d:c4:2f:f7:da:e6:98:df:
83:21:78:22:87:8c:b7:c5:d2:47:65:06:81:be:40:
28:64:0c:fe:b3:aa:1b:84:6d:93:15:c1:94:36:16:
3f:bc:4c:e4:61:e5:60:08:63:57:9f:0a:da:d8:67:
83:01:74:87:46:e8:55:8f:36:d9:4f:05:2d:a2:93:
e8:77:93:8e:cd:6b:f7:0d:62:9b:8d:2a:3e:7a:81:
61:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:21:8D:10:46:42:73:62:13:1B:A1:7B:50:98:58:C9:E2:72:B5:4E
X509v3 Authority Key Identifier:
keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/dyGNEEZCc2ITG6F7UJhYyeJytU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.49.0/24
Signature Algorithm: sha256WithRSAEncryption
23:1f:5f:a9:32:09:c7:c2:ff:8c:59:3e:5f:5f:e1:8f:77:6b:
8b:f2:bb:bf:2e:99:f2:5c:70:ae:88:6b:36:12:88:34:ce:8e:
2c:d9:06:dd:b1:c9:1e:fd:60:0b:a1:dc:76:25:06:cd:5a:bf:
11:3d:71:1f:d4:92:87:2a:7f:a2:c3:49:05:27:95:e3:2c:90:
51:da:81:5f:08:31:08:42:4a:fd:14:02:de:bc:2f:bf:a5:b2:
40:b5:7b:52:d7:62:21:21:ba:30:a9:76:f1:a9:44:d9:04:d4:
f7:d5:70:d1:db:88:56:3b:d3:0c:3b:54:96:e3:47:0d:69:5c:
a4:91:85:7d:9b:6c:fe:27:ba:a4:e6:10:ee:06:88:06:69:8a:
ff:57:10:34:df:27:8a:67:bc:36:62:8c:d9:d3:e8:ad:75:b1:
2f:fc:9e:51:d8:ac:2b:f5:06:75:92:13:f2:01:90:62:d2:18:
6e:75:a9:8a:3a:4a:5d:d4:bf:6f:c6:9f:88:ac:bd:2e:b7:a9:
94:27:61:e0:74:4d:1f:dd:76:ba:93:4d:58:c4:e2:70:30:8a:
2a:86:34:92:aa:96:58:3f:b4:77:ee:31:3e:0f:65:4d:4e:da:
37:ff:bb:ee:fb:52:25:93:82:0d:ee:1b:31:9b:6c:d3:bf:14:
d3:d5:d2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:14 2023 by rpki-client on console.sobornost.net