Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/7-EBvP2SlXH8Do9FTao-0INa884.roa
File: 7-EBvP2SlXH8Do9FTao-0INa884.roa (raw, json)
Hash identifier: aEQvEhuHT9AMKkNeHv/rsREd6NZyOI6Q0gNlNb4YMvU=
Subject key identifier: EF:E1:01:BC:FD:92:95:71:FC:0E:8F:45:4D:AA:3E:D0:83:5A:F3:CE
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 09AC0A1F
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/7-EBvP2SlXH8Do9FTao-0INa884.roa
Signing time: Fri 17 Jun 2022 11:52:44 +0000
ROA not before: Fri 17 Jun 2022 11:52:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.188.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.155.0/24 maxlen: 24
77.90.156.0/24 maxlen: 24
185.230.12.0/24 maxlen: 24
77.90.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162269727 (0x9ac0a1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 17 11:52:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efe101bcfd929571fc0e8f454daa3ed0835af3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:97:c4:0d:99:0b:1d:22:34:71:53:74:d7:
85:dd:b1:6c:76:26:ed:ee:96:bf:fb:8c:4c:f0:6f:
ff:d2:b0:b9:71:cf:8f:38:61:d4:75:f2:2e:cb:f3:
ab:8b:70:bc:df:ba:42:04:90:c8:48:10:8e:94:34:
ec:66:d4:de:cd:67:4a:0d:b7:56:62:33:10:6e:a0:
8a:4d:47:19:e9:db:20:4d:f0:e4:ae:9d:30:15:19:
06:f7:c1:3f:66:64:85:53:64:d7:cc:90:ec:1b:c0:
8e:31:3a:96:d3:ef:35:29:7a:7d:1f:0e:86:c6:be:
5e:93:aa:fd:e9:59:44:54:94:39:9b:90:1b:df:d7:
73:83:e6:ad:29:2d:11:d4:ff:d5:2b:42:de:0e:aa:
c9:dd:6d:19:74:85:f3:eb:68:7a:97:52:06:38:17:
f1:03:8a:2c:3d:b2:fc:a2:5b:d5:ef:f3:f1:52:14:
18:7b:d0:93:a0:14:2a:a0:94:78:9d:50:eb:1b:2a:
c4:bc:1e:3b:0d:60:1f:f8:62:f8:cb:ea:f1:65:64:
98:ac:f9:6f:c1:82:f8:5f:56:de:b7:a5:ef:3e:da:
56:93:94:c6:4c:28:1a:06:2f:e2:1a:47:ed:33:e2:
4d:6d:78:90:78:de:70:bd:87:50:a2:39:04:dc:e7:
fe:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E1:01:BC:FD:92:95:71:FC:0E:8F:45:4D:AA:3E:D0:83:5A:F3:CE
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/7-EBvP2SlXH8Do9FTao-0INa884.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.145.0/24
77.90.155.0-77.90.156.255
77.90.184.0/24
77.90.188.0/24
185.230.12.0/24
213.209.133.0-213.209.134.255
213.209.149.0/24
Signature Algorithm: sha256WithRSAEncryption
51:fd:90:01:9d:0d:33:ca:4b:eb:23:b8:28:c3:bb:6e:c4:eb:
9c:95:3f:a3:e8:92:c8:3f:04:d7:71:f9:2a:82:fb:0b:92:02:
19:f1:d7:30:7f:bc:23:7d:fd:59:24:20:34:96:20:02:86:b0:
a3:04:e1:e7:d9:32:64:5a:1d:52:15:6c:9b:f5:a1:02:16:d0:
25:69:cc:71:bd:60:cd:1e:19:cc:09:5d:12:ca:c3:06:c4:33:
9c:bf:f7:62:19:5c:bc:90:ce:82:d7:40:c8:5c:fe:33:61:b5:
7a:25:b8:66:f2:a1:d4:40:a1:ec:c8:6f:5a:e6:cd:a6:3e:8e:
07:79:f5:62:43:90:da:3c:88:f4:0e:76:cf:65:ff:85:0e:0f:
2c:b1:98:28:35:c6:5b:f3:40:c9:4d:ee:5c:08:b5:09:9d:90:
66:c1:99:99:60:7b:4d:86:8c:88:34:88:4e:42:b4:54:cd:c6:
2e:8d:1a:c5:30:15:62:e0:bb:cd:d1:e2:12:a7:95:2d:69:cc:
58:0f:09:ec:58:77:cd:26:5b:c2:66:8f:8b:0e:1b:fe:7e:6f:
30:26:c2:32:fb:38:06:73:34:f5:6d:c9:22:c2:e6:ca:de:d5:
32:db:86:90:69:6f:e1:94:bf:09:2b:7f:2d:3a:50:51:b1:5e:
ba:a7:dd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org