Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/3OPeG1Vs8co7MGDrzEi8sL5XxPU.roa
File: 3OPeG1Vs8co7MGDrzEi8sL5XxPU.roa (raw, json)
Hash identifier: GF59O4j1VlLmSmoK3etJdfdOFFdX3sF5Jp5NhAecsBk=
Subject key identifier: DC:E3:DE:1B:55:6C:F1:CA:3B:30:60:EB:CC:48:BC:B0:BE:57:C4:F5
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 09AE7DC1
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/3OPeG1Vs8co7MGDrzEi8sL5XxPU.roa
Signing time: Fri 17 Jun 2022 11:53:44 +0000
ROA not before: Fri 17 Jun 2022 11:53:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208911
IP address blocks: 213.209.151.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
77.90.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162430401 (0x9ae7dc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 17 11:53:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dce3de1b556cf1ca3b3060ebcc48bcb0be57c4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:c8:ee:e7:09:d5:27:fc:68:fc:ec:21:24:
5d:51:70:06:5f:87:76:87:17:0c:31:00:4b:78:4c:
63:bb:fe:cd:86:65:1c:04:21:94:fd:c8:71:c5:41:
af:26:53:76:1a:0e:b8:05:9d:7d:28:b9:66:0c:ba:
a7:8d:e7:a9:d5:85:bb:84:2e:e1:19:9f:6a:96:0e:
26:d0:c9:6a:2c:bf:0f:e3:e7:91:4e:2d:d7:90:f9:
82:a4:61:fa:57:11:dd:c7:2a:5a:03:29:41:1f:41:
61:0c:30:4b:4a:bd:c1:06:1b:8f:7c:88:4a:af:5c:
05:74:3a:be:3c:d4:d4:05:aa:3d:1a:b4:68:10:01:
c2:82:b7:7c:75:5a:9d:a9:db:b8:09:d3:9d:6f:ac:
2f:8f:c4:98:02:a0:c9:a2:ab:23:e4:7e:84:df:6e:
12:5c:bc:95:80:d6:7c:f8:0b:dc:4d:80:73:10:4c:
6e:fd:90:7d:45:ff:06:5a:a9:fc:49:c2:52:37:b0:
7a:0c:0b:ea:9b:12:ee:d5:28:9a:00:b1:c1:a1:56:
e7:e9:50:43:03:80:0f:08:92:03:d1:fc:82:6d:0d:
85:99:48:c6:99:f3:5f:f1:4a:dc:22:9a:b0:2c:fb:
3c:d9:66:c0:a5:32:46:51:5c:45:e8:35:d8:c2:ef:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E3:DE:1B:55:6C:F1:CA:3B:30:60:EB:CC:48:BC:B0:BE:57:C4:F5
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/3OPeG1Vs8co7MGDrzEi8sL5XxPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.157.0/24
213.209.151.0/24
213.209.157.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:08:f6:37:ac:40:6b:a7:57:7e:17:85:40:8e:fd:5c:a6:cc:
3e:26:5f:1c:d3:73:56:ef:5f:03:2b:e9:87:83:6b:a2:ef:be:
f8:6b:b9:af:5e:cd:ce:74:1f:0b:11:20:97:9e:67:8a:73:68:
ac:84:c3:97:6e:57:97:fa:1f:45:98:90:da:46:cd:c9:05:d3:
df:8c:51:03:a2:68:de:72:2d:22:ce:ac:f8:fd:1a:2c:55:e7:
f4:0b:2b:b7:28:37:88:62:b4:59:a3:ab:93:14:c3:24:5c:74:
08:b1:df:bd:bc:62:9d:82:6b:f4:4e:2b:90:7f:49:d5:6e:d7:
a6:e6:99:59:5d:1d:64:6d:38:9a:10:d7:6c:a5:94:80:97:3e:
0f:ea:23:35:f8:6e:11:f4:05:0b:d6:a5:87:c7:62:f1:06:a5:
7f:72:a4:82:fb:58:85:ae:9a:f8:f4:51:cd:c6:02:ca:56:b8:
ac:70:57:a1:47:4d:19:24:03:f3:f7:c9:20:48:3d:d3:5c:4a:
49:ee:af:75:f2:7f:ef:cc:b5:54:95:e7:9a:a5:7c:4a:f5:8c:
fe:60:0c:02:73:1b:b5:84:7a:93:55:20:4f:de:fa:68:2d:ac:
50:4f:45:99:49:fd:39:78:6c:2c:73:74:43:7a:38:55:56:82:
7c:95:08:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:22 2023 by rpki-client on console-fra.rpki-client.org