Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/hP51VFuHUPyY79GrvGPBlTAlF_w.roa
File: hP51VFuHUPyY79GrvGPBlTAlF_w.roa (raw, json)
Hash identifier: 2fyYhZQMAB1DcskfF8Z+MnpFBHLDcou9NZHWmc4AbVM=
Subject key identifier: 84:FE:75:54:5B:87:50:FC:98:EF:D1:AB:BC:63:C1:95:30:25:17:FC
Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial: 38A585B7
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/hP51VFuHUPyY79GrvGPBlTAlF_w.roa
Signing time: Sun 13 Mar 2022 09:05:24 +0000
ROA not before: Sun 13 Mar 2022 09:05:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200964
IP address blocks: 77.221.36.0/24 maxlen: 24
77.221.37.0/24 maxlen: 24
77.221.38.0/24 maxlen: 24
77.221.42.0/24 maxlen: 24
77.221.39.0/24 maxlen: 24
77.221.40.0/24 maxlen: 24
77.221.41.0/24 maxlen: 24
77.221.50.0/24 maxlen: 24
2a10:4941:10::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 950371767 (0x38a585b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Validity
Not Before: Mar 13 09:05:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84fe75545b8750fc98efd1abbc63c195302517fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:d6:a8:7c:72:f2:c3:57:e6:3d:36:49:f1:
8d:95:bb:fe:f9:18:3d:28:bd:69:92:2b:08:72:dc:
56:5f:9c:e5:c6:37:95:cd:bd:b0:36:fd:0f:79:2c:
a4:1d:7d:ab:38:32:c4:f0:b9:3e:48:28:f8:22:d9:
b1:9e:0c:00:9c:22:7d:2d:10:4c:7e:a9:c3:7f:d4:
14:bd:08:35:1d:77:bf:49:04:e2:2d:ac:f4:82:e6:
4e:c7:18:f2:67:e6:c4:c1:2c:e8:9a:4b:7b:ea:1d:
3e:1c:f1:7c:30:ed:2e:96:d4:65:db:52:a5:33:49:
1f:00:db:9c:a2:6b:52:6f:45:88:c2:27:fa:da:6d:
34:03:b2:ba:cc:91:9c:42:99:d6:72:4d:1d:3d:e4:
ca:a0:9c:11:83:18:c5:5c:b5:9b:5c:8e:04:a7:c3:
a2:c4:16:44:c4:2c:4e:c7:10:29:e9:56:41:b1:65:
d5:c7:48:55:93:df:a5:d9:1b:ba:37:52:9f:32:20:
75:a8:39:fd:e9:01:73:da:5f:53:5e:74:f7:85:2d:
72:89:05:08:a6:64:5f:2a:b3:2d:1a:c0:9b:68:9c:
7b:00:5e:d6:2f:cd:e3:c7:08:bc:6e:bf:f9:28:7a:
15:5a:9a:dc:2b:ce:ba:ae:2f:f3:af:38:ab:3c:76:
fe:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FE:75:54:5B:87:50:FC:98:EF:D1:AB:BC:63:C1:95:30:25:17:FC
X509v3 Authority Key Identifier:
keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/hP51VFuHUPyY79GrvGPBlTAlF_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.36.0-77.221.42.255
77.221.50.0/24
IPv6:
2a10:4941:10::/44
Signature Algorithm: sha256WithRSAEncryption
8f:f6:1e:40:e4:19:ce:6c:03:88:98:7a:53:c5:7d:ba:44:64:
a9:30:a4:5f:6d:6c:21:e5:21:69:c9:92:71:e6:e1:16:1e:d6:
78:58:57:e7:90:f4:01:db:c4:b4:84:24:ee:c7:30:71:1c:ef:
e2:6b:3b:fd:6d:5f:1b:76:7d:f2:b3:43:db:55:7c:db:d5:df:
28:22:37:4a:60:ac:98:13:a7:7f:6d:db:12:53:4d:04:00:df:
7c:fd:59:89:94:f4:1c:5c:ad:ac:de:27:b0:e8:b5:58:d4:76:
0e:48:8f:61:e9:ef:48:4f:c7:29:6b:64:7d:d9:57:33:48:db:
62:62:46:bd:39:2e:3d:27:99:b9:a1:33:f2:7e:ee:94:bb:1c:
aa:05:8c:1e:f1:2f:79:db:55:32:7a:ef:47:b3:ef:8b:78:f6:
d4:a6:84:82:90:ac:e1:e6:bd:18:0b:88:a6:56:0b:cb:0c:66:
c9:36:8f:e7:30:8c:c4:12:1f:13:b3:b5:25:6f:ab:07:53:33:
ee:62:17:f4:42:03:d0:5d:06:74:04:2d:bb:46:e0:96:54:0a:
49:8b:7f:aa:61:97:6d:e3:54:35:73:10:ea:fa:1c:ff:cf:f9:
e7:86:c9:d4:a3:e7:49:f3:2c:6c:68:67:0e:69:3b:41:16:d8:
29:ff:3c:0a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIEOKWFtzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NzAzNjQyMDc2ZDI3ZTI1MmZhOTBiZjFhNDI5NmY4YmNkOWQwY2YxMB4XDTIyMDMx
MzA5MDUyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODRmZTc1NTQ1Yjg3
NTBmYzk4ZWZkMWFiYmM2M2MxOTUzMDI1MTdmYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK4B1qh8cvLDV+Y9NknxjZW7/vkYPSi9aZIrCHLcVl+c5cY3
lc29sDb9D3kspB19qzgyxPC5Pkgo+CLZsZ4MAJwifS0QTH6pw3/UFL0INR13v0kE
4i2s9ILmTscY8mfmxMEs6JpLe+odPhzxfDDtLpbUZdtSpTNJHwDbnKJrUm9FiMIn
+tptNAOyusyRnEKZ1nJNHT3kyqCcEYMYxVy1m1yOBKfDosQWRMQsTscQKelWQbFl
1cdIVZPfpdkbujdSnzIgdag5/ekBc9pfU15094UtcokFCKZkXyqzLRrAm2icewBe
1i/N48cIvG6/+Sh6FVqa3CvOuq4v8684qzx2/lkCAwEAAaOCAigwggIkMB0GA1Ud
DgQWBBSE/nVUW4dQ/Jjv0au8Y8GVMCUX/DAfBgNVHSMEGDAWgBTXA2QgdtJ+JS+p
C/GkKW+LzZ0M8TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzF3TmtJSGJTZmlVdnFRdnhwQ2x2aTgyZERQRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWEvMzgxMzZjLWRiNTEtNGY3MC1hZDhiLTY1NDUwNWEyZDA0NS8x
L2hQNTFWRnVIVVB5WTc5R3J2R1BCbFRBbEZfdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEv
MzgxMzZjLWRiNTEtNGY3MC1hZDhiLTY1NDUwNWEyZDA0NS8xLzF3TmtJSGJTZmlV
dnFRdnhwQ2x2aTgyZERQRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA+
BggrBgEFBQcBBwEB/wQvMC0wGgQCAAEwFDAMAwQCTd0kAwQATd0qAwQATd0yMA8E
AgACMAkDBwQqEElBABAwDQYJKoZIhvcNAQELBQADggEBAI/2HkDkGc5sA4iYelPF
fbpEZKkwpF9tbCHlIWnJknHm4RYe1nhYV+eQ9AHbxLSEJO7HMHEc7+JrO/1tXxt2
ffKzQ9tVfNvV3ygiN0pgrJgTp39t2xJTTQQA33z9WYmU9BxcrazeJ7DotVjUdg5I
j2Hp70hPxylrZH3ZVzNI22JiRr05Lj0nmbmhM/J+7pS7HKoFjB7xL3nbVTJ670ez
74t49tSmhIKQrOHmvRgLiKZWC8sMZsk2j+cwjMQSHxOztSVvqwdTM+5iF/RCA9Bd
BnQELbtG4JZUCkmLf6phl23jVDVzEOr6HP/P+eeGydSj50nzLGxoZw5pO0EW2Cn/
PAo=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:14 2023 by rpki-client on console.sobornost.net