Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/5sZwso0ofYM5CRIeRkkL8t7HkMA.roa
File: 5sZwso0ofYM5CRIeRkkL8t7HkMA.roa (raw, json)
Hash identifier: hjnFbA83rAa2kUAg+xhxdSGf5Na1aFFmSQVwoim1lfc=
Subject key identifier: E6:C6:70:B2:8D:28:7D:83:39:09:12:1E:46:49:0B:F2:DE:C7:90:C0
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 09B2E682
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/5sZwso0ofYM5CRIeRkkL8t7HkMA.roa
Signing time: Fri 17 Jun 2022 15:30:45 +0000
ROA not before: Fri 17 Jun 2022 15:30:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 213.209.134.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.155.0/24 maxlen: 24
77.90.156.0/24 maxlen: 24
185.230.12.0/24 maxlen: 24
77.90.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162719362 (0x9b2e682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 17 15:30:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6c670b28d287d833909121e46490bf2dec790c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:61:d6:78:a9:93:76:29:f1:a3:55:16:c7:f4:
c3:f2:3a:ec:ab:f1:a1:68:60:5f:76:ca:47:79:a8:
de:d8:d0:35:43:c7:d0:e8:69:14:15:16:ce:96:60:
47:30:52:28:f5:6d:ee:d9:5c:c4:40:96:0e:6d:14:
bd:a4:d2:e1:95:f3:f5:eb:5e:f6:15:71:3c:c4:9f:
08:36:e9:5e:89:4e:3f:3c:37:ab:1a:c8:4e:f5:37:
c5:b3:9b:85:d0:f3:2c:b7:82:9b:e1:27:30:3c:30:
f2:53:fc:22:c4:80:ed:0c:10:ef:11:11:17:ce:5b:
ab:e1:ae:e3:e7:58:af:27:37:23:64:06:b3:3d:2b:
1d:a7:33:31:8a:07:ef:53:c0:69:6e:e9:1c:ba:5f:
88:25:9e:42:04:d9:c8:5f:62:b4:aa:85:88:94:86:
58:5d:9c:da:da:6f:9a:ae:09:fe:9a:a2:ca:ed:81:
4c:74:21:ce:75:f4:e7:ce:0c:cd:08:c4:98:63:09:
6b:62:fd:fd:e7:36:b4:60:e0:2b:ca:dc:ec:15:d1:
97:8e:3d:30:b4:03:a2:82:5d:61:1e:48:52:8d:5f:
1e:5a:ee:fa:c3:c0:c1:bb:96:3a:cc:0d:68:93:c6:
ab:ed:05:b9:3c:6b:d8:45:bd:c5:10:ad:4e:48:5c:
1b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C6:70:B2:8D:28:7D:83:39:09:12:1E:46:49:0B:F2:DE:C7:90:C0
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/5sZwso0ofYM5CRIeRkkL8t7HkMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.145.0/24
77.90.155.0-77.90.156.255
77.90.184.0/24
185.230.12.0/24
213.209.133.0-213.209.134.255
213.209.149.0/24
Signature Algorithm: sha256WithRSAEncryption
95:e3:c3:de:31:56:48:f6:8c:2f:2d:5c:05:84:9d:da:9f:13:
03:84:7e:2e:1b:01:25:cd:a4:44:e7:8d:3e:19:6b:ea:0e:5c:
d1:24:23:de:62:4b:dd:34:0e:4f:69:52:d9:72:f4:1a:0f:4c:
02:35:ae:0f:e1:03:1f:0b:6c:f6:6a:4b:8a:59:d3:ec:f2:a9:
45:7c:39:c3:f9:4d:6f:3d:50:2b:7b:15:bb:90:8d:cd:b0:3a:
35:d7:a7:7a:87:69:68:3f:72:02:4b:55:ea:40:5c:38:04:dc:
9a:d0:b4:7d:1c:86:05:cd:ec:9e:f5:b1:33:d3:bf:bc:33:e8:
cb:e2:b6:dc:80:fe:e2:65:d1:43:08:88:9e:c3:70:1f:8f:af:
09:22:75:cb:ac:7d:96:5a:a6:fc:e4:27:78:23:5f:6c:96:0b:
0d:8a:5d:f2:9f:33:1c:7b:46:ca:27:55:d5:bd:8b:26:c1:66:
66:f5:cf:e6:96:4b:21:a5:68:d9:8d:98:8b:3e:79:84:f7:fe:
55:18:55:b3:7a:5e:df:77:68:54:07:39:12:6c:07:5a:47:cb:
f6:49:03:84:d2:3f:27:9b:a3:9c:32:6d:1a:20:7c:78:c9:05:
cb:9a:1d:46:68:09:5d:25:66:ce:b6:e8:f8:c9:32:15:bc:b0:
75:d8:25:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org