Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1Yr4WICY40zjQRBcnSw2C5poM70.roa
File: 1Yr4WICY40zjQRBcnSw2C5poM70.roa (raw, json)
Hash identifier: KHf3verJplm2IZ14UnZSfppiojWo1o4c/eEOznV67N0=
Subject key identifier: D5:8A:F8:58:80:98:E3:4C:E3:41:10:5C:9D:2C:36:0B:9A:68:33:BD
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 081E49F9
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1Yr4WICY40zjQRBcnSw2C5poM70.roa
Signing time: Mon 14 Mar 2022 07:38:19 +0000
ROA not before: Mon 14 Mar 2022 07:38:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60458
IP address blocks: 77.90.189.0/24 maxlen: 24
77.90.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136202745 (0x81e49f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Mar 14 07:38:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d58af8588098e34ce341105c9d2c360b9a6833bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:62:d6:d1:dc:76:00:b0:7e:54:4d:5b:d4:3a:
49:ba:82:a9:64:eb:c6:2f:c6:ee:8a:af:21:7e:e4:
ad:17:81:6b:b1:90:dc:44:15:2b:5f:d5:13:e6:45:
f1:77:01:8d:16:b9:5a:ad:e1:97:b5:fa:7e:38:93:
a4:b1:07:8a:e0:14:33:78:24:3f:f1:85:c7:62:7e:
99:3c:96:24:2e:8d:2a:1a:0c:95:71:2d:b2:8c:31:
06:0e:d9:47:e4:5b:f5:17:27:50:69:83:87:3e:18:
2c:26:d4:f6:2b:cf:fb:27:5b:d9:b9:86:0d:ae:1b:
cb:a1:71:d7:a9:63:ee:0b:61:23:43:4a:51:22:8b:
5a:83:65:d5:b9:4a:d6:1a:4b:cb:5d:58:e4:3e:8e:
44:a9:ab:f1:14:ec:11:35:52:67:b6:4f:b7:03:ef:
78:82:1f:a3:20:72:88:2d:ee:09:69:4c:4b:3b:4d:
5d:3d:ae:b8:af:9e:6f:74:40:6b:b5:c6:35:ec:4c:
aa:92:fd:b2:70:85:f9:c9:02:9e:b3:04:30:10:21:
18:82:9d:a1:d3:a0:2b:84:a8:4a:a6:c8:6a:21:1e:
29:60:f6:7f:3c:52:2c:58:82:6e:9b:45:1d:e2:95:
09:1d:86:b4:ad:be:89:1a:a6:fc:57:2d:9b:0c:82:
fe:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8A:F8:58:80:98:E3:4C:E3:41:10:5C:9D:2C:36:0B:9A:68:33:BD
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1Yr4WICY40zjQRBcnSw2C5poM70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.156.0/24
77.90.189.0/24
Signature Algorithm: sha256WithRSAEncryption
01:c8:d1:af:4e:0d:ea:47:9b:32:c1:5c:db:e2:b3:af:df:5e:
d0:0f:33:60:3f:0d:db:67:6e:5a:88:87:39:8b:ce:6b:33:c7:
17:35:83:14:da:da:4f:02:2d:90:64:05:44:4b:5b:08:f7:58:
6e:05:0a:24:4e:3c:7d:6d:dc:5d:6f:d9:f8:ba:98:d1:27:bb:
02:67:0c:53:c6:90:dc:7b:0c:d9:c5:5f:48:17:9a:e4:5f:d7:
d8:40:4f:9c:ea:75:f8:6e:c7:b6:f6:2e:6d:25:d6:f1:16:7a:
75:d4:90:a4:49:26:1b:a6:16:ca:43:1e:d9:25:b5:b4:e6:19:
f9:80:56:0e:77:47:c5:49:e3:98:ab:28:a1:23:63:6e:53:fb:
6e:dd:0d:b2:18:4b:96:5a:d6:43:20:fa:12:d6:52:3f:86:53:
d1:7b:55:56:88:98:be:2e:b9:7d:c2:40:d9:25:74:ed:d9:3d:
22:c8:3d:79:9b:88:d7:20:72:d1:5d:8b:da:e8:f4:a7:ed:d2:
94:7f:60:d6:e1:71:25:3e:86:3b:6b:cf:39:2d:44:3b:99:17:
de:ea:39:23:1e:d0:cf:14:8e:2b:7d:1d:25:fe:38:c8:f2:88:
b0:79:c2:c4:dd:d6:32:ea:22:36:06:94:94:53:02:08:64:a2:
54:9f:1b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:22 2023 by rpki-client on console-fra.rpki-client.org