Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/SZAUzCtKhTZ-JvEWkrfVEcuCw-8.roa
File: SZAUzCtKhTZ-JvEWkrfVEcuCw-8.roa (raw, json)
Hash identifier: Z0zidCBpm/4FVTxNBQEjmiimlti558sD559Qqu1ZO1M=
Subject key identifier: 49:90:14:CC:2B:4A:85:36:7E:26:F1:16:92:B7:D5:11:CB:82:C3:EF
Certificate issuer: /CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
Certificate serial: 059CDFD3
Authority key identifier: 57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/SZAUzCtKhTZ-JvEWkrfVEcuCw-8.roa
Signing time: Sat 01 Jan 2022 02:59:19 +0000
ROA not before: Sat 01 Jan 2022 02:59:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44194
IP address blocks: 77.87.51.0/24 maxlen: 24
77.87.48.0/24 maxlen: 24
77.87.49.0/24 maxlen: 24
77.87.50.0/24 maxlen: 24
77.87.54.0/24 maxlen: 24
77.87.55.0/24 maxlen: 24
77.87.52.0/24 maxlen: 24
77.87.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94166995 (0x59cdfd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
Validity
Not Before: Jan 1 02:59:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=499014cc2b4a85367e26f11692b7d511cb82c3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:69:97:69:18:e6:03:ee:49:83:eb:33:66:c7:
79:1d:76:25:89:1c:19:8f:3f:e5:46:77:57:43:b7:
93:20:42:4a:2a:ca:2d:89:5c:58:2b:27:7c:fd:d1:
61:d1:e5:5d:f8:9a:a7:71:fa:f6:4c:f0:13:92:fe:
86:3f:39:d3:34:b9:65:ed:4f:9d:4e:07:13:12:21:
c9:6a:16:5e:e7:44:c4:65:48:a3:e4:ff:e4:12:20:
c2:a3:2f:cb:41:2d:99:cb:52:d6:b8:02:0f:37:1c:
26:69:be:c0:20:c8:bf:1d:23:52:dc:1c:8b:0e:f0:
94:04:13:0a:57:3c:f9:06:11:d3:bb:07:fd:88:af:
cc:84:08:24:b1:97:07:cd:a4:34:71:04:57:b1:ea:
aa:7d:51:f6:e9:72:fa:44:45:56:7a:2d:05:32:64:
e2:44:28:30:ea:d0:e9:4c:49:3a:4c:66:02:71:68:
19:7b:07:e5:e6:13:06:2d:fd:b3:ec:eb:e3:69:78:
3e:ed:8f:0c:af:2f:90:6e:7e:bd:66:a0:05:d9:8d:
b0:e2:a6:38:17:4f:7c:04:81:8c:ed:98:ba:8c:33:
1c:9d:1d:b1:28:e0:4a:19:7e:6d:54:61:6c:68:b9:
26:f8:98:fa:ee:0b:00:f1:ef:28:1d:39:1f:b6:eb:
50:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:90:14:CC:2B:4A:85:36:7E:26:F1:16:92:B7:D5:11:CB:82:C3:EF
X509v3 Authority Key Identifier:
keyid:57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/SZAUzCtKhTZ-JvEWkrfVEcuCw-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.48.0/21
Signature Algorithm: sha256WithRSAEncryption
71:48:51:c0:41:b4:dc:d3:5f:e4:7e:f2:75:38:31:00:c5:02:
70:42:d4:88:5e:4b:68:00:57:9d:9e:89:21:5f:22:ff:0c:72:
ee:ac:3b:9f:24:15:1a:42:52:fe:8e:19:58:05:71:87:d7:51:
32:46:2a:2f:e2:fe:ff:c5:4e:2e:d2:38:3b:af:a5:10:29:aa:
7a:ba:1b:b0:37:7b:8f:29:c0:f8:03:8e:6f:56:05:5b:78:96:
2d:ed:c1:32:81:8e:63:51:35:a3:8e:2a:d5:f8:10:3a:75:51:
02:84:22:25:3f:92:ff:f8:a0:4c:b6:27:f3:c7:88:1c:79:08:
48:ab:ce:9e:56:24:7f:05:57:1c:4e:77:6b:a8:41:b8:92:94:
08:98:94:09:ed:39:d5:7f:e8:27:f4:c9:13:3a:e7:89:e6:16:
48:07:9d:6c:54:04:d6:2b:93:d0:46:82:ee:be:fe:bf:f9:0c:
e8:e3:d4:d7:b3:6b:d3:32:ca:2d:ad:95:0a:81:76:6f:a2:68:
34:2f:d5:72:82:7d:36:89:12:f0:92:3d:d0:34:7b:7b:b1:07:
0f:ee:c4:1d:72:aa:0b:69:bc:33:75:62:a3:5a:14:db:24:3a:
7d:ce:05:52:68:5f:6e:28:9c:dc:3c:f6:15:21:ca:63:ef:89:
41:d2:35:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net