Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/CE8qA304XjQOaeMVw1cH8opT23Q.roa
File: CE8qA304XjQOaeMVw1cH8opT23Q.roa (raw, json)
Hash identifier: jcjdg8cyjmcIQP7Al7mI0aAkD4qoV8fyUc4NTlQmvOk=
Subject key identifier: 08:4F:2A:03:7D:38:5E:34:0E:69:E3:15:C3:57:07:F2:8A:53:DB:74
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 08C07671
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/CE8qA304XjQOaeMVw1cH8opT23Q.roa
Signing time: Wed 20 Apr 2022 20:24:26 +0000
ROA not before: Wed 20 Apr 2022 20:24:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12695
IP address blocks: 77.90.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146830961 (0x8c07671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 20 20:24:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=084f2a037d385e340e69e315c35707f28a53db74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:ec:dd:2c:3c:1d:d0:f0:2f:40:63:7f:27:
d8:bd:75:19:6a:05:1f:52:40:e7:74:b9:1f:fd:d2:
1d:f8:18:0d:49:fe:74:c8:ba:34:4a:9c:8a:17:56:
6c:5e:2c:6d:99:fc:c5:73:2f:b9:24:40:42:7f:b7:
02:62:0b:aa:50:05:a5:a2:c3:93:ed:08:49:b6:46:
3f:01:7d:20:6c:50:08:24:4c:10:51:99:76:7c:0f:
45:ed:01:10:45:f2:99:0a:05:89:fc:1d:5f:e6:68:
ce:da:1e:e3:48:9a:58:48:71:48:43:6a:6a:7d:25:
fd:ca:81:69:a1:13:1e:2f:c3:19:85:b2:b3:28:30:
2b:a8:3c:b6:74:b2:d6:9a:07:8c:7d:80:8e:66:d8:
eb:8c:7d:b8:0d:d5:f4:f5:08:e4:67:e4:60:e4:b8:
77:43:14:b6:cb:5e:6c:ba:5a:9f:28:6c:ec:3f:54:
94:4d:84:dd:d3:03:c1:96:89:b0:de:e2:06:01:1e:
d6:1e:8b:b9:b5:f5:2b:35:1d:34:4a:cb:c2:51:fb:
96:28:1e:cf:45:a4:a8:45:1c:16:9d:d1:a8:62:ba:
6a:0d:1d:bd:f9:6e:6e:57:35:65:e1:f7:6c:02:60:
1b:05:5d:56:ad:70:64:4d:db:ea:c8:06:72:c8:0a:
5e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4F:2A:03:7D:38:5E:34:0E:69:E3:15:C3:57:07:F2:8A:53:DB:74
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/CE8qA304XjQOaeMVw1cH8opT23Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.189.0/24
Signature Algorithm: sha256WithRSAEncryption
02:52:31:59:22:e8:6b:a4:4f:99:26:a8:5d:58:f0:ee:22:48:
fa:c2:73:c4:8b:f7:3b:0d:ac:64:73:ca:ac:b4:48:66:43:32:
d6:43:0e:74:09:80:91:1f:41:17:b2:51:ae:4a:04:25:f6:74:
9d:17:3b:04:82:5e:59:c5:77:df:b9:b3:fe:bc:a8:d4:42:c6:
44:b3:a2:d4:09:60:eb:df:f6:ec:d5:65:fc:d4:31:b6:8e:a2:
40:b6:af:69:51:82:c1:70:c0:33:4b:46:07:6c:c6:e2:f1:e8:
f6:13:b7:2c:20:f5:ec:bf:ab:7e:3b:24:0d:79:e3:28:65:01:
f3:5b:7f:cb:97:19:7a:71:13:5a:ac:f5:0c:d5:ff:6a:9d:f8:
a6:fc:f4:9c:a4:27:f8:52:24:3f:9a:9c:f4:ea:bd:44:e9:ea:
bb:34:dc:5b:f9:2a:f3:e3:1e:87:83:f4:5f:6c:1e:f9:be:9f:
83:e8:ca:20:72:fc:b2:8d:d7:80:93:9d:26:02:68:04:e6:ce:
02:15:82:16:10:39:28:bb:c6:73:84:f3:bf:65:96:a9:cd:e5:
a4:a7:87:a3:24:c8:a4:66:f6:37:40:a2:b4:21:85:0c:ae:a7:
6d:b7:e5:87:5e:35:ff:14:c9:e7:d1:82:4e:fd:7f:81:e2:f6:
bf:e6:91:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org