Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/A6BIxZ4HAfbvgCoDbg3MyVDVRfQ.roa
File: A6BIxZ4HAfbvgCoDbg3MyVDVRfQ.roa (raw, json)
Hash identifier: tjYw2CtLkQasujLbo4M6CAHjxWnBUl/dKMtl7Galgqs=
Subject key identifier: 03:A0:48:C5:9E:07:01:F6:EF:80:2A:03:6E:0D:CC:C9:50:D5:45:F4
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0181FB7B9932B0B2942353DD18E75F1B1728
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/A6BIxZ4HAfbvgCoDbg3MyVDVRfQ.roa
Signing time: Thu 14 Jul 2022 06:53:09 +0000
ROA not before: Thu 14 Jul 2022 06:53:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 77.90.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fb:7b:99:32:b0:b2:94:23:53:dd:18:e7:5f:1b:17:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 14 06:53:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03a048c59e0701f6ef802a036e0dccc950d545f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:12:31:78:c6:9a:99:16:aa:c5:0e:1a:67:
6d:5d:07:03:9f:4f:cc:a7:37:e4:a8:35:ed:c7:c0:
6e:80:e6:29:fd:68:22:a6:34:1b:1f:e7:ee:65:5f:
2c:52:95:b0:d4:7d:b8:49:f8:c1:5d:f8:fc:10:fe:
0d:c8:7d:eb:c8:53:bb:02:2d:9c:40:f9:be:c4:1a:
56:b6:94:53:fb:32:2c:4e:f0:93:95:1c:35:4d:14:
73:26:95:e4:6d:9e:d8:86:a6:7b:e5:cd:23:3c:6c:
25:4f:ac:6d:9c:94:a2:84:a5:e7:8d:7c:c4:bf:06:
8f:51:e2:7a:32:f2:cf:b8:2b:94:03:24:74:0a:18:
66:f3:a8:1b:19:f8:05:ba:5a:ad:18:e9:b8:9d:61:
2e:c4:72:8a:4c:7c:3b:50:6b:ee:82:13:e6:f1:e7:
95:9b:3a:54:33:e9:94:87:da:d9:de:6d:61:db:83:
b4:53:a7:b5:44:d3:ec:49:75:db:1b:2c:ae:3c:11:
04:3f:14:be:ff:7b:46:b6:a2:ee:7d:43:c4:dd:fb:
77:3f:34:53:60:e8:a5:9b:24:30:09:70:3e:29:e4:
e3:63:b4:19:77:bd:43:1c:16:6e:da:74:4b:bc:03:
e1:02:2c:1a:83:99:3f:da:17:c9:ac:75:92:f3:d2:
56:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A0:48:C5:9E:07:01:F6:EF:80:2A:03:6E:0D:CC:C9:50:D5:45:F4
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/A6BIxZ4HAfbvgCoDbg3MyVDVRfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.150.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:2c:8f:94:4c:39:ca:86:c6:ca:c6:17:ef:1a:5e:3f:00:da:
91:4e:55:18:72:43:5e:e7:27:a6:74:17:25:f5:bb:44:31:f6:
70:2a:07:2f:43:4b:bc:81:8f:4f:8c:f1:db:30:85:07:82:e2:
14:07:f7:a3:5f:d8:92:65:ae:13:52:04:ac:73:14:30:e6:3b:
1f:cf:71:8e:76:f1:83:5d:d9:b0:00:d0:4d:5e:44:0d:7d:7e:
a9:f7:cf:13:db:4c:85:2f:7f:04:57:15:d8:41:1d:fc:99:53:
4c:85:a1:76:75:2c:97:80:71:fb:3c:f0:0c:ed:e5:1e:09:af:
8c:73:ef:1a:8c:a6:2c:30:f4:ce:d2:f6:38:cf:fe:03:35:02:
b6:1c:ae:2a:fc:6f:07:0d:7d:1e:c2:7c:8f:06:b6:88:7f:2d:
38:e3:88:d4:f1:45:dd:ae:01:61:d4:3c:d7:7c:b7:a8:8b:8a:
46:5c:35:06:4e:8a:6b:4d:5b:1d:bc:77:d4:58:a8:b8:be:f2:
d9:4a:7f:62:df:85:71:12:cd:66:3e:be:50:c1:fc:60:27:4a:
a2:17:c4:c0:bb:c9:97:ba:52:b3:64:51:fb:d9:3f:58:fd:9a:
96:21:c9:67:40:d4:ae:19:95:08:8d:e7:59:1a:d5:bd:b2:95:
47:2a:b3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:22 2023 by rpki-client on console-fra.rpki-client.org