Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/6nEAhm24eHmgN3mEKFuBCMUNCbs.roa
File: 6nEAhm24eHmgN3mEKFuBCMUNCbs.roa (raw, json)
Hash identifier: 9WbCoBAcjjgph/irtbL0OONwrG+/xoZdA9vyxvbnHCY=
Subject key identifier: EA:71:00:86:6D:B8:78:79:A0:37:79:84:28:5B:81:08:C5:0D:09:BB
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 07D0AE29
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/6nEAhm24eHmgN3mEKFuBCMUNCbs.roa
Signing time: Wed 09 Mar 2022 20:26:26 +0000
ROA not before: Wed 09 Mar 2022 20:26:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 77.90.191.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
77.90.152.0/24 maxlen: 24
77.90.149.0/24 maxlen: 24
77.90.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131116585 (0x7d0ae29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Mar 9 20:26:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea7100866db87879a0377984285b8108c50d09bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:cb:5f:da:6d:f5:ad:2b:b2:85:cd:04:d9:
19:ee:2f:30:55:55:72:9d:57:e3:b8:85:b5:9b:95:
17:8d:fb:28:60:19:1a:1a:4a:f5:12:ec:ac:e8:f1:
8d:15:0b:16:e2:2a:87:14:29:9f:18:19:eb:e3:06:
32:28:46:a6:b7:7d:1a:cd:a0:e7:2b:c6:f3:dd:36:
cc:42:2e:b7:38:2a:0e:11:32:ec:94:6c:a0:ea:5a:
7a:b1:16:39:6e:1f:bb:9e:1a:02:bf:c6:d7:aa:94:
2f:49:9c:62:30:a9:cc:0e:d3:d8:83:25:20:2b:5e:
7f:5d:b8:3a:41:a8:a8:4d:6f:6c:1f:b4:53:86:10:
bc:68:22:67:a6:0e:74:9c:c1:88:35:38:1e:54:ef:
76:31:5c:48:e2:a6:d8:e8:50:ee:de:e1:47:b0:cc:
fc:e6:bf:1a:d6:f6:4e:6a:3d:81:0d:f6:b5:73:2e:
47:29:d5:d4:d7:45:71:b4:45:18:19:35:d9:c2:3b:
b3:9c:7f:59:22:21:fd:69:c7:21:5f:08:49:5d:80:
90:fe:e1:11:cf:46:a0:58:3f:00:6c:24:dc:00:93:
59:81:65:12:26:9b:7c:dc:60:5e:36:25:95:35:1d:
0b:d1:70:35:0a:d0:0c:3d:da:15:5d:a1:bf:37:b0:
0d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:71:00:86:6D:B8:78:79:A0:37:79:84:28:5B:81:08:C5:0D:09:BB
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/6nEAhm24eHmgN3mEKFuBCMUNCbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.149.0/24
77.90.152.0/24
77.90.180.0/24
77.90.191.0/24
213.209.134.0/24
213.209.143.0/24
213.209.149.0/24
213.209.156.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:a0:f9:04:2b:7c:7c:6c:dd:6b:aa:16:cc:20:7a:ef:9b:25:
2c:c6:0e:fe:cc:de:d1:02:8a:01:65:95:55:94:c4:d5:c1:42:
5e:87:60:bf:2f:21:2f:6b:cd:7d:33:81:69:1f:92:94:f2:4b:
3c:ff:9c:fa:5e:00:84:9c:4b:a7:08:34:07:9f:1e:51:dc:14:
62:01:f4:4f:60:25:73:9b:27:9e:40:91:65:9e:34:aa:c6:73:
b9:9a:33:75:20:d2:53:e7:12:62:4e:5f:15:2c:e1:3d:3b:ef:
6a:78:99:d3:86:5b:95:04:95:61:1c:7a:cf:2e:03:7f:29:ca:
cf:f0:dd:8c:cd:07:d1:08:d6:45:4f:86:c2:0e:b3:98:e1:3f:
fc:61:b3:7c:3e:b9:cc:47:fb:10:65:78:08:25:09:5f:e8:b7:
73:d6:11:e9:9e:60:77:0f:6f:91:37:fa:3e:56:5a:3f:a7:2d:
f8:47:54:e7:fe:cb:51:ac:59:fd:25:e8:62:ab:00:f6:24:ee:
82:e7:26:e7:33:1e:0f:50:4b:01:71:b0:28:af:55:4f:37:5f:
33:a9:27:3e:d3:c9:da:65:71:76:bb:12:77:95:af:2d:ef:e1:
71:9d:6f:9f:1c:29:52:bb:e8:32:52:56:fb:14:10:6c:b0:72:
f0:52:ba:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:02 2024 by rpki-client on console-fra.rpki-client.org