Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/7XJb-AgjrX1DfNar4IzHd_ZJyfg.roa
File: 7XJb-AgjrX1DfNar4IzHd_ZJyfg.roa (raw, json)
Hash identifier: 7Vgv9On+7A6Hwk8Q+uMdfmyP5KWfxvAwyXB2HkW7DjU=
Subject key identifier: ED:72:5B:F8:08:23:AD:7D:43:7C:D6:AB:E0:8C:C7:77:F6:49:C9:F8
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 08073D1C
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/7XJb-AgjrX1DfNar4IzHd_ZJyfg.roa
Signing time: Fri 11 Mar 2022 15:01:22 +0000
ROA not before: Fri 11 Mar 2022 15:01:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49870
IP address blocks: 213.209.146.0/24 maxlen: 24
77.90.164.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
77.90.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134692124 (0x8073d1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Mar 11 15:01:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed725bf80823ad7d437cd6abe08cc777f649c9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:17:c5:f8:76:66:c6:6f:c1:e8:fe:1c:5d:
26:cc:15:31:23:60:d2:a2:37:b6:00:48:5f:64:21:
c3:a6:b2:fc:d5:7a:2e:03:a0:68:e1:60:e8:0c:ae:
b7:60:04:d1:50:1d:66:25:10:ff:61:48:a5:de:48:
78:e2:92:5a:ba:85:22:08:47:a8:2d:3b:89:c8:64:
99:a7:11:af:bf:67:d4:fe:48:3b:08:c9:27:84:17:
f0:f1:83:f2:04:35:b6:d1:36:d8:80:a3:57:a7:38:
2b:9f:2f:f2:d8:fc:da:3f:c2:51:fb:f9:d1:41:3c:
7d:a0:04:62:87:02:20:a8:e8:78:b4:d7:5b:9a:bb:
fc:07:6b:42:1f:cf:8f:08:c3:33:2f:20:9e:ae:1d:
8b:b3:0e:ff:21:c7:7a:b9:05:2e:b7:b2:ba:e1:d5:
3a:b6:dd:79:a7:b8:6f:d1:9f:fa:b9:18:96:d7:9a:
f8:34:44:73:30:1e:02:81:e6:90:d4:60:6c:bd:a9:
c1:3d:0c:ce:73:c1:5d:2b:b9:38:6c:cc:23:b0:b0:
a5:53:8b:b6:f1:61:bd:af:90:74:5d:e5:56:08:ac:
d6:fc:cc:e4:4b:da:6e:7c:a8:a2:6f:f5:4a:b0:4a:
f4:bb:f8:be:d8:76:1a:9b:b3:7d:bc:41:96:95:cb:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:72:5B:F8:08:23:AD:7D:43:7C:D6:AB:E0:8C:C7:77:F6:49:C9:F8
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/7XJb-AgjrX1DfNar4IzHd_ZJyfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.164.0/24
77.90.181.0/24
185.230.13.0/24
213.209.146.0/24
Signature Algorithm: sha256WithRSAEncryption
48:fd:e4:00:d6:b4:67:cf:54:66:3c:73:41:02:6d:b3:32:09:
d4:9f:4a:86:31:a7:23:b0:29:3c:20:af:37:bf:a1:fe:dd:38:
6b:79:09:7a:f9:a7:97:c8:e9:0c:3e:9a:1a:b1:44:8d:85:5e:
8d:41:1d:a1:fc:aa:74:08:57:0f:f5:1a:79:92:60:bc:67:a6:
62:27:fd:8c:fa:88:3a:39:cf:e7:5f:82:42:c8:3c:f3:7e:ca:
c2:32:af:64:6b:36:1b:54:53:e5:90:1f:10:9f:27:8d:d5:a4:
d0:25:c8:51:bc:c6:88:59:44:54:a2:f4:c7:61:9f:b2:b4:2f:
ee:1f:c1:4b:a5:fb:75:b3:05:23:49:42:f7:50:44:31:dd:f8:
b1:54:08:9f:ca:d8:5c:d4:16:67:81:ec:44:1c:e0:67:ba:94:
d2:12:26:b1:32:7f:79:39:b4:6b:bb:a0:9b:b3:23:4a:6a:2c:
96:40:43:96:8c:c1:04:f3:45:9c:60:15:38:56:24:43:b8:9e:
92:0e:c7:a5:5a:0c:40:82:7b:5d:f2:83:81:01:a4:8a:95:db:
2e:6e:e3:d7:0d:e9:8d:14:07:9e:25:9e:a7:f4:6f:3f:6c:09:
49:21:fd:23:d7:11:05:41:93:2d:65:a2:10:48:1f:14:de:8b:
3e:d2:9a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:22 2023 by rpki-client on console-fra.rpki-client.org