Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Gs_NLmfAuxxaBlji040OluFeluA.roa
File: Gs_NLmfAuxxaBlji040OluFeluA.roa (raw, json)
Hash identifier: I16UBuzLHkFQP+pqJ05wKFddP/5Gu7yLh0icu9+FHdE=
Subject key identifier: 1A:CF:CD:2E:67:C0:BB:1C:5A:06:58:E2:D3:8D:0E:96:E1:5E:96:E0
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 09E00999
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Gs_NLmfAuxxaBlji040OluFeluA.roa
Signing time: Fri 24 Jun 2022 17:21:28 +0000
ROA not before: Fri 24 Jun 2022 17:21:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 77.90.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165677465 (0x9e00999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 24 17:21:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1acfcd2e67c0bb1c5a0658e2d38d0e96e15e96e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b3:d3:ad:48:44:f3:2c:16:f8:5c:fa:e0:24:
9c:ed:6d:1d:87:44:1b:e4:a3:31:17:cf:37:6d:9d:
ed:39:f6:95:62:cf:fc:58:94:76:dc:b9:e1:02:cb:
6f:f1:31:aa:98:2b:87:6f:b3:7b:0c:b4:98:6e:9a:
a9:06:fe:d2:29:7a:6a:b2:19:f9:4f:f0:99:04:f5:
d2:28:65:4a:a6:9f:d3:ee:d1:d4:14:96:ab:bc:3e:
9c:ab:49:3a:d5:d6:a9:4e:b7:7c:c6:76:15:f7:11:
2f:56:c4:5d:8c:eb:09:e2:85:c7:1b:e9:c5:ad:96:
01:f5:e2:36:81:20:21:f1:6d:13:a3:10:7c:38:a0:
bb:1a:66:1f:37:8d:92:1a:fc:db:68:68:ed:95:9d:
f6:e4:4f:20:b4:49:4a:dd:c8:63:8b:41:5e:95:7d:
39:c0:a0:8d:63:78:58:f3:a1:b1:58:32:40:c1:ed:
ac:39:54:f4:35:5a:ea:58:7d:b3:3b:2b:73:94:86:
13:3c:65:b5:94:50:77:06:93:69:0a:3b:5a:f9:43:
1f:d7:65:5e:21:32:35:69:05:b3:02:f7:9c:f9:03:
5d:b4:d2:ab:0e:cc:44:8a:5d:bb:4d:41:b7:1b:23:
5a:1d:e0:cb:c2:88:a7:0d:ba:f8:9b:e9:6a:c5:c6:
a9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CF:CD:2E:67:C0:BB:1C:5A:06:58:E2:D3:8D:0E:96:E1:5E:96:E0
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Gs_NLmfAuxxaBlji040OluFeluA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.190.0/24
Signature Algorithm: sha256WithRSAEncryption
84:7f:fb:31:03:a9:f7:6a:b3:70:98:a4:e8:ce:e1:f2:a8:fa:
3c:d9:80:1a:1c:e4:ca:03:74:ee:9a:aa:06:d6:ec:9c:97:f8:
b9:60:d6:49:b4:23:df:34:d8:76:78:db:87:0b:79:c3:dc:40:
74:23:7e:24:a2:88:65:ab:8d:fd:52:93:4f:cd:b6:0a:84:30:
7c:45:78:ee:c2:c1:24:e2:ab:20:5d:7d:d3:e7:b8:3c:25:a0:
87:9a:4a:23:59:cc:69:c7:3a:23:da:f4:34:98:b2:b1:ee:f3:
98:08:c0:7c:2d:d3:49:a7:44:13:2a:76:e1:7b:a9:00:6f:dc:
4a:f8:1c:21:2b:d3:4f:18:14:f8:ce:4b:d5:88:95:da:77:8e:
47:2a:52:f7:8f:e7:f4:7d:e4:31:df:20:bf:e0:75:96:8b:e1:
57:72:a4:34:49:1c:53:70:23:83:aa:b4:10:a6:30:18:2a:39:
8e:8a:34:47:b5:d3:87:87:94:7f:58:2b:2c:82:74:d5:27:ab:
26:2c:98:bf:22:3e:ee:74:45:bc:23:e6:f9:31:b4:43:c5:1b:
5a:eb:1a:68:57:ef:f2:b6:18:b9:2b:6d:05:36:7b:35:2b:b8:
17:c4:99:ed:90:e0:cd:1a:3f:d6:d2:2c:2e:94:69:02:c7:33:
60:ee:7d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org