Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/yfhqBaL4kQq_O1yzJZGEMdBXZIc.roa
File: yfhqBaL4kQq_O1yzJZGEMdBXZIc.roa (raw, json)
Hash identifier: CT/w0VbeXgH9sX7NiOzM7BQlpvYNFa0+DNnP4nTP594=
Subject key identifier: C9:F8:6A:05:A2:F8:91:0A:BF:3B:5C:B3:25:91:84:31:D0:57:64:87
Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial: 380B6E6C
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/yfhqBaL4kQq_O1yzJZGEMdBXZIc.roa
Signing time: Sat 01 Jan 2022 10:04:09 +0000
ROA not before: Sat 01 Jan 2022 10:04:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30836
IP address blocks: 77.221.58.0/23 maxlen: 23
77.221.60.0/23 maxlen: 23
77.221.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940273260 (0x380b6e6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Validity
Not Before: Jan 1 10:04:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9f86a05a2f8910abf3b5cb325918431d0576487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:75:6a:52:57:05:b4:56:75:4b:fe:47:e9:
6d:96:40:a1:3d:38:3f:58:24:e9:62:33:1d:97:64:
0d:76:af:a9:24:e3:ce:8a:6d:53:c1:d7:5d:c8:18:
21:bf:e5:13:cb:44:66:22:4f:4d:c5:c7:bb:ab:07:
35:6a:d8:2a:4f:3f:a0:98:73:ba:37:51:90:28:da:
5f:b9:d8:2a:bf:19:31:1c:40:e3:08:5a:02:e9:e0:
b0:2f:45:59:57:61:96:20:b2:d5:c4:e6:91:1d:ea:
81:50:ec:02:82:36:bb:87:9f:d2:c8:e7:1d:23:18:
4a:16:43:f9:01:c8:9a:71:39:e8:4f:07:b4:93:5e:
04:e1:3e:4e:75:72:4e:7c:ee:cf:85:78:5c:8f:7d:
ea:97:1b:0d:2e:90:be:d6:06:40:8a:92:9b:c8:17:
f8:bb:d8:3b:a2:3f:80:84:69:ce:11:31:ca:5c:58:
dc:3d:fb:b4:84:d1:f0:e9:1c:7a:8b:33:27:c6:a0:
8c:46:2f:13:1d:e4:47:03:ff:5f:d9:4b:a2:7f:d9:
d9:b1:8a:14:a8:7e:f0:29:45:14:86:16:15:9f:fb:
54:69:d4:b5:ac:6c:3a:d4:cd:54:32:40:11:61:5d:
5d:fb:f0:df:d5:02:38:d4:f5:ed:9e:bb:6a:b1:27:
e9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F8:6A:05:A2:F8:91:0A:BF:3B:5C:B3:25:91:84:31:D0:57:64:87
X509v3 Authority Key Identifier:
keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/yfhqBaL4kQq_O1yzJZGEMdBXZIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.221.58.0-77.221.61.255
77.221.63.0/24
Signature Algorithm: sha256WithRSAEncryption
15:a1:aa:96:70:e4:27:e2:ae:4b:8f:9a:c2:b6:fa:43:31:c9:
4b:75:c6:f4:fc:1f:e1:49:57:e7:e9:14:c6:bb:34:ea:a6:5b:
9a:bb:29:db:83:31:55:f7:6c:10:2a:49:d7:ff:85:c8:45:c1:
b1:2f:9e:06:33:6d:63:f7:88:f6:38:57:77:b7:8f:29:ce:66:
3e:9f:03:55:c7:ae:07:5a:2e:e3:8c:72:89:70:d4:6f:11:04:
a6:8e:d2:20:5d:81:73:38:b1:38:ae:83:0c:5e:41:ed:85:15:
0e:d8:5c:cb:c3:62:a8:bf:6f:6c:20:48:c9:84:40:7f:bc:a2:
4d:86:ec:e4:b9:89:82:e9:6d:f3:69:0b:58:45:82:c4:b1:7b:
18:97:3a:1c:ef:ca:31:e2:35:1f:03:ac:97:5c:16:69:c5:ec:
e5:9e:8d:09:50:1d:8a:22:f5:b9:f8:0d:0a:ef:86:00:20:aa:
b7:9d:55:4e:fe:d4:96:18:6b:f8:06:1b:05:6a:10:47:70:32:
91:e7:67:23:ea:3f:2a:fe:d0:fa:e7:a5:df:c7:f0:f6:77:f2:
1e:a2:dd:de:74:61:8a:51:bf:c9:79:dd:a0:8a:7e:2f:9d:30:
83:d3:40:d9:c3:bb:59:98:7a:10:07:ed:ab:35:fc:91:e0:3d:
d1:e2:b8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:14 2023 by rpki-client on console.sobornost.net