Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/nllip75qztarDT98iu-mU4_uNAM.roa
File: nllip75qztarDT98iu-mU4_uNAM.roa (raw, json)
Hash identifier: jeiKoTkCKf6yOWqXu8j6/n7AM+DF5K3GKlFtOPBUmR0=
Subject key identifier: 9E:59:62:A7:BE:6A:CE:D6:AB:0D:3F:7C:8A:EF:A6:53:8F:EE:34:03
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 1D7F713C
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/nllip75qztarDT98iu-mU4_uNAM.roa
Signing time: Sun 29 May 2022 12:47:13 +0000
ROA not before: Sun 29 May 2022 12:47:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211306
IP address blocks: 77.36.2.0/23 maxlen: 23
77.36.56.0/24 maxlen: 24
77.232.216.0/23 maxlen: 23
77.36.54.0/23 maxlen: 23
77.232.218.0/24 maxlen: 24
91.237.49.0/24 maxlen: 24
93.120.44.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494891324 (0x1d7f713c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: May 29 12:47:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e5962a7be6aced6ab0d3f7c8aefa6538fee3403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:45:79:f1:85:e4:cc:a4:7f:16:9b:24:d6:a1:
67:d8:c6:ff:2f:4e:5c:74:76:cb:ab:60:54:e7:27:
6f:2c:a4:9a:db:f9:92:2b:00:34:d8:06:dd:3e:57:
32:2d:7b:b9:66:c0:8a:50:36:4b:de:8e:26:23:26:
53:46:0a:53:4a:ce:b9:c2:65:17:d6:6b:36:11:11:
5f:41:69:60:3c:2f:e2:0a:1c:75:11:5f:78:ec:fc:
26:ee:5f:6e:8e:d7:3c:7d:41:89:4e:b0:9d:e3:d5:
84:63:6a:1c:14:ea:ac:ee:e8:76:bf:03:8d:01:7f:
b1:d9:b9:70:76:1a:1a:a9:36:b3:2e:79:f1:b7:54:
60:72:49:f3:65:28:75:b2:7b:ce:e6:3a:00:3a:d6:
71:d4:ab:2d:44:17:cd:a5:dc:2a:8e:d3:d9:c5:52:
dd:59:18:e7:c9:90:41:7f:22:3a:43:f3:d6:42:85:
77:5f:09:28:66:07:16:a4:21:c4:fe:1e:8d:7f:24:
db:76:11:79:dd:ec:c8:03:90:7d:1c:22:a4:b7:f6:
4d:7c:38:30:a6:27:be:51:7a:97:4c:54:21:dc:cb:
21:b0:96:28:05:f6:bb:ab:ca:f9:7c:2b:f4:0c:f3:
45:34:70:1b:53:dc:3f:e4:37:ed:d9:35:06:72:f3:
66:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:59:62:A7:BE:6A:CE:D6:AB:0D:3F:7C:8A:EF:A6:53:8F:EE:34:03
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/nllip75qztarDT98iu-mU4_uNAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.36.2.0/23
77.36.54.0-77.36.56.255
77.232.216.0-77.232.218.255
91.237.49.0/24
93.120.44.0/23
Signature Algorithm: sha256WithRSAEncryption
39:c8:69:22:fb:5a:1b:5d:53:b5:e5:62:5e:35:f1:55:e9:bf:
3f:77:14:58:9a:5b:b5:c1:6a:03:a2:6e:82:30:2f:2a:22:0b:
05:54:d6:cd:e7:8f:f6:11:9b:1a:19:ed:b3:fa:8c:a9:04:9f:
f8:dc:0e:08:9a:22:a9:9d:17:b6:69:e1:9d:64:3e:4c:4f:94:
b4:86:76:15:70:51:b4:0f:49:b7:99:a8:f2:30:23:eb:f5:fd:
ba:f0:36:9e:3f:e2:38:84:2d:06:6a:2d:2a:40:84:3e:18:a5:
66:c0:b4:06:45:8f:c6:56:4c:82:b4:72:6d:e5:6b:22:3f:4e:
c0:5d:1c:a8:22:24:34:f3:10:ac:1b:52:37:a9:8c:21:f5:25:
35:6d:02:be:38:bb:85:ba:70:b6:56:05:0d:bb:07:94:fa:42:
e1:6d:6e:a4:73:5e:d9:0b:3d:27:79:3e:86:fb:59:8d:65:48:
ad:3c:00:15:64:cf:38:b8:1a:f8:fc:80:dd:c1:c2:33:c9:e2:
64:85:0e:e2:5e:54:65:95:6c:22:ad:26:b3:87:53:9c:1e:30:
0c:4b:f5:30:0a:1e:44:bf:37:2f:0b:f3:c0:10:a9:cc:5c:c2:
0f:87:f5:c7:df:36:75:bc:f1:3b:b0:26:ad:85:7e:b7:f6:86:
06:37:ee:2b
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIEHX9xPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NDljYmJkNWMyY2Y0MTk1Y2M2ZWM3ZjIxZjYwNzU4MWEwMjI0ZGFhMB4XDTIyMDUy
OTEyNDcxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWU1OTYyYTdiZTZh
Y2VkNmFiMGQzZjdjOGFlZmE2NTM4ZmVlMzQwMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMFFefGF5MykfxabJNahZ9jG/y9OXHR2y6tgVOcnbyykmtv5
kisANNgG3T5XMi17uWbAilA2S96OJiMmU0YKU0rOucJlF9ZrNhERX0FpYDwv4goc
dRFfeOz8Ju5fbo7XPH1BiU6wnePVhGNqHBTqrO7odr8DjQF/sdm5cHYaGqk2sy55
8bdUYHJJ82UodbJ7zuY6ADrWcdSrLUQXzaXcKo7T2cVS3VkY58mQQX8iOkPz1kKF
d18JKGYHFqQhxP4ejX8k23YRed3syAOQfRwipLf2TXw4MKYnvlF6l0xUIdzLIbCW
KAX2u6vK+Xwr9AzzRTRwG1PcP+Q37dk1BnLzZr0CAwEAAaOCAjEwggItMB0GA1Ud
DgQWBBSeWWKnvmrO1qsNP3yK76ZTj+40AzAfBgNVHSMEGDAWgBQ0nLvVws9Blcxu
x/IfYHWBoCJNqjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05KeTcxY0xQUVpYTWJzZnlIMkIxZ2FBaVRhby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmQvY2RmNWY2LTJmMTgtNDJjNy05MzBlLWRjMDZkZDgwNTk2MC8x
L25sbGlwNzVxenRhckRUOThpdS1tVTRfdU5BTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQv
Y2RmNWY2LTJmMTgtNDJjNy05MzBlLWRjMDZkZDgwNTk2MC8xL05KeTcxY0xQUVpY
TWJzZnlIMkIxZ2FBaVRhby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBH
BggrBgEFBQcBBwEB/wQ4MDYwNAQCAAEwLgMEAU0kAjAMAwQBTSQ2AwQATSQ4MAwD
BANN6NgDBABN6NoDBABb7TEDBAFdeCwwDQYJKoZIhvcNAQELBQADggEBADnIaSL7
WhtdU7XlYl418VXpvz93FFiaW7XBagOiboIwLyoiCwVU1s3nj/YRmxoZ7bP6jKkE
n/jcDgiaIqmdF7Zp4Z1kPkxPlLSGdhVwUbQPSbeZqPIwI+v1/brwNp4/4jiELQZq
LSpAhD4YpWbAtAZFj8ZWTIK0cm3layI/TsBdHKgiJDTzEKwbUjepjCH1JTVtAr44
u4W6cLZWBQ27B5T6QuFtbqRzXtkLPSd5Pob7WY1lSK08ABVkzzi4Gvj8gN3BwjPJ
4mSFDuJeVGWVbCKtJrOHU5weMAxL9TAKHkS/Ny8L88AQqcxcwg+H9cffNnW88Tuw
Jq2Ffrf2hgY37is=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org