Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/2H6bus2T-vxnRSoq1wBxD3qIQks.roa
File: 2H6bus2T-vxnRSoq1wBxD3qIQks.roa (raw, json)
Hash identifier: if7ENWvxsIltKkXL2vD9Fry4iIYMycW7e6xqEzXc4dw=
Subject key identifier: D8:7E:9B:BA:CD:93:FA:FC:67:45:2A:2A:D7:00:71:0F:7A:88:42:4B
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 084D2FC6
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/2H6bus2T-vxnRSoq1wBxD3qIQks.roa
Signing time: Thu 24 Mar 2022 11:08:49 +0000
ROA not before: Thu 24 Mar 2022 11:08:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.188.0/24 maxlen: 24
213.209.158.0/24 maxlen: 24
77.90.173.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
77.90.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139276230 (0x84d2fc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Mar 24 11:08:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d87e9bbacd93fafc67452a2ad700710f7a88424b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:12:91:bd:8f:cf:41:84:2b:13:cf:d5:dd:
a0:62:ee:48:23:9b:b9:db:7d:55:7e:95:1e:d6:13:
ad:31:9c:00:36:6e:7e:e5:1b:09:60:e8:65:23:5a:
d5:52:ea:6f:15:08:b6:86:4b:9b:55:ca:95:35:19:
69:dd:b4:6e:dc:e5:2e:f3:67:d3:a7:59:2c:ed:ce:
55:aa:b8:c1:da:94:f4:5d:c5:43:69:88:f7:ae:2d:
c8:db:89:39:c9:68:3b:cc:8c:82:43:5c:83:08:24:
81:8a:4d:a6:b4:ea:aa:fc:e9:b3:ec:c9:db:b5:fb:
cc:47:af:a4:64:19:0e:fc:27:3b:42:a2:c1:4f:fd:
5a:68:b7:0d:b6:f6:03:9a:ec:3d:86:b2:38:56:3e:
ec:43:cc:4f:5c:ae:af:50:f3:c1:2e:77:a9:ee:de:
a1:25:86:1b:b9:b6:87:e9:c9:c8:6d:06:df:16:b9:
e7:ce:81:ac:20:78:31:48:de:df:b1:26:1f:a2:d8:
e9:67:07:8b:ce:fc:b8:66:63:41:ef:81:3c:05:73:
82:cd:2e:b0:02:02:df:2f:e1:50:47:8b:58:54:14:
1f:d5:da:9c:35:10:b6:8a:00:0e:94:b0:5a:57:c7:
2c:35:18:d3:0c:2f:cc:4c:c8:5b:6f:ad:6d:5b:b7:
a8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7E:9B:BA:CD:93:FA:FC:67:45:2A:2A:D7:00:71:0F:7A:88:42:4B
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/2H6bus2T-vxnRSoq1wBxD3qIQks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.173.0/24
77.90.184.0/24
77.90.188.0/24
185.230.15.0/24
213.209.158.0/24
Signature Algorithm: sha256WithRSAEncryption
71:31:ff:14:77:81:3a:7a:b5:19:89:1f:a2:66:0b:51:e5:1f:
40:b8:bf:ee:ee:ce:46:33:21:cd:b6:24:bf:10:68:3a:e4:b4:
d1:80:71:66:4c:07:2a:d8:f6:e3:21:d7:3d:fc:37:84:c4:51:
bc:18:08:27:c1:ba:c6:72:9f:db:59:10:77:af:6b:93:0f:40:
99:6b:05:3d:9f:87:4c:b9:92:f2:8d:15:b7:59:d7:01:78:a1:
47:26:fc:6d:5b:ac:31:d8:fa:de:cd:05:df:76:2a:b8:0e:37:
16:49:38:bc:21:4a:19:b6:7e:75:1e:78:53:a1:8a:04:d4:c2:
2c:fd:d3:5b:3e:91:4d:d8:84:97:99:d7:f9:f5:87:15:20:5f:
ec:54:0e:0c:2c:d6:85:73:21:3b:cb:f3:52:a9:66:05:69:70:
a0:3c:c4:96:45:84:57:03:0b:86:7f:f5:cc:4b:70:41:18:60:
28:03:0c:88:4d:21:d9:5f:f2:1e:5b:36:46:26:a8:b1:40:43:
7d:0b:c2:27:89:b0:ee:7c:e2:66:9b:e1:ed:2a:da:2d:31:24:
6a:e7:c2:d3:35:26:ce:0f:d5:bc:92:3e:09:c8:24:d2:64:bc:
56:d6:6d:ed:1f:66:04:3c:70:fd:75:d1:3e:02:91:5f:5a:d4:
87:07:0a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:22 2023 by rpki-client on console-fra.rpki-client.org