Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/6y7LNfdI_6STPg_OSUPwW6f19mM.roa
File: 6y7LNfdI_6STPg_OSUPwW6f19mM.roa (raw, json)
Hash identifier: obev+IYHnMYmRUhjifH+YVjzpIQaeFEHfzHs09WsMyM=
Subject key identifier: EB:2E:CB:35:F7:48:FF:A4:93:3E:0F:CE:49:43:F0:5B:A7:F5:F6:63
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0182180C1D2312F2B7606D7E7CCF422D8C77
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/6y7LNfdI_6STPg_OSUPwW6f19mM.roa
Signing time: Tue 19 Jul 2022 20:00:23 +0000
ROA not before: Tue 19 Jul 2022 20:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 213.209.159.0/24 maxlen: 24
77.90.155.0/24 maxlen: 24
77.90.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:18:0c:1d:23:12:f2:b7:60:6d:7e:7c:cf:42:2d:8c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 19 20:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eb2ecb35f748ffa4933e0fce4943f05ba7f5f663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:27:1b:e2:a5:76:02:bd:49:0b:d9:41:17:7d:
d7:3b:a6:14:79:94:a3:50:f9:be:9e:44:3a:d1:67:
85:a9:39:e8:fd:0c:b6:a5:be:9f:f5:64:af:99:61:
e1:8f:d2:24:30:e3:95:e1:95:a0:47:db:95:85:fd:
c4:0c:40:86:97:90:22:b9:c1:90:8d:b7:1e:41:97:
bb:4e:05:00:e2:95:26:db:ef:d1:95:97:43:83:a5:
7c:67:54:ce:4e:23:92:43:ab:fe:16:57:e1:d0:89:
b8:72:00:d6:6c:28:0a:a1:59:50:4e:bf:60:08:f5:
ee:46:72:d5:b3:93:ad:b7:59:1d:d5:4b:ff:ed:ec:
65:e4:7c:53:73:e1:cc:43:62:fb:6d:3c:69:47:ef:
a2:2d:92:86:c6:5c:bc:42:f8:29:18:ac:fe:72:8b:
ac:68:d8:3b:31:6b:34:92:f8:65:1d:ea:1b:b4:af:
7c:c3:18:4c:54:fc:73:0b:a3:08:d0:57:4f:db:4b:
c4:b8:22:32:26:8f:6c:34:34:11:83:c4:7c:d5:ff:
9b:5b:2d:20:1f:21:4f:1d:46:20:eb:45:ca:14:97:
f3:ba:79:c9:fc:ee:32:19:04:3f:0e:ac:fa:86:40:
47:9d:17:1a:42:bd:5e:01:6d:8a:95:e5:44:ae:72:
b0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2E:CB:35:F7:48:FF:A4:93:3E:0F:CE:49:43:F0:5B:A7:F5:F6:63
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/6y7LNfdI_6STPg_OSUPwW6f19mM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.155.0/24
77.90.184.0/24
213.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:b7:ce:d5:fe:2c:97:d2:fb:26:47:99:87:03:a3:7c:ed:1d:
f6:e0:e7:14:05:1e:29:3a:4e:39:67:43:e6:f3:a5:b6:6f:94:
3e:a1:68:e9:31:86:c8:19:ef:e4:32:b8:71:51:f2:2d:7e:48:
2c:e7:95:fc:a8:ef:02:1e:93:b9:3a:86:f1:1a:8a:39:6f:5d:
51:e8:cd:4a:b3:ab:9b:cb:e5:06:9f:16:45:55:d2:ca:48:de:
5d:39:3e:bc:2a:42:d0:37:ca:46:07:12:9d:dd:1d:5e:19:b8:
77:5c:94:b3:10:ec:f9:a6:f8:7e:c6:fa:7c:f5:5f:9a:51:64:
aa:4e:7b:8f:14:49:0e:ba:e9:c1:69:70:2a:fa:80:de:ec:ef:
8a:64:4c:0e:39:06:b9:46:51:69:09:98:c2:e6:b6:d3:42:eb:
3a:d0:7c:c5:d7:ff:c1:9e:c1:ca:d3:b9:9c:43:4e:e6:ab:6b:
bf:63:fc:92:a8:bb:14:94:b3:2c:ab:38:17:b2:06:ec:c9:c1:
3a:79:a1:14:d9:fc:2c:4c:38:ef:a7:71:ef:48:c8:7a:4e:af:
2c:d5:4a:34:1b:9f:ca:30:ae:cf:47:bc:dc:09:1e:3e:14:81:
26:e0:6c:b3:4e:a0:af:53:ed:86:16:40:fc:f8:6f:20:04:24:
45:b5:40:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:22 2023 by rpki-client on console-fra.rpki-client.org