Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/LzrAMCldfkuSr7_XWU4qR9hnIb0.roa
File: LzrAMCldfkuSr7_XWU4qR9hnIb0.roa (raw, json)
Hash identifier: uQkJvop6mEpQzgmwcwRyCgeVB+YSe+nXkoh/S+juqiI=
Subject key identifier: 2F:3A:C0:30:29:5D:7E:4B:92:AF:BF:D7:59:4E:2A:47:D8:67:21:BD
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0746A3BF
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/LzrAMCldfkuSr7_XWU4qR9hnIb0.roa
Signing time: Tue 25 Jan 2022 15:41:17 +0000
ROA not before: Tue 25 Jan 2022 15:41:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 213.209.144.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.158.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.157.0/24 maxlen: 24
77.90.164.0/24 maxlen: 24
77.90.173.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
77.90.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122069951 (0x746a3bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 25 15:41:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f3ac030295d7e4b92afbfd7594e2a47d86721bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:51:1f:a5:6a:fc:51:38:5b:b5:fe:2f:f8:27:
2e:73:5b:bd:5f:8e:28:aa:b3:dc:3d:77:e1:e2:a6:
02:f5:4f:a9:8c:d3:43:be:00:bb:8b:6e:27:3c:34:
f2:90:83:ea:48:eb:96:7e:d9:20:a9:a7:c4:1b:71:
c4:75:ce:d9:c1:1c:b5:12:23:96:b2:02:2f:4a:bc:
a4:41:7d:48:d2:ce:ff:b9:18:d7:d6:77:72:7a:1c:
42:c6:56:0b:de:1b:c0:4c:6f:bb:c4:17:57:24:f6:
a0:2d:b2:23:f1:1d:58:70:5f:75:28:7b:f6:c9:23:
92:77:b4:46:b5:95:2e:15:56:e2:c5:a6:16:80:b3:
90:f6:7b:73:28:d6:31:7e:dd:31:55:5e:01:0f:bb:
61:53:c7:6e:a4:cd:b1:82:34:05:c7:b7:49:de:22:
5a:de:6c:25:bd:b2:7b:64:b8:06:14:1c:e3:85:ce:
10:04:39:f2:4f:24:b5:af:18:ce:b9:e9:3d:95:9c:
f8:92:93:15:ba:ae:f1:79:93:32:cd:38:a7:dd:3e:
54:70:4d:cf:ca:5e:34:ec:af:d2:30:36:e3:cb:92:
00:6b:d9:95:83:44:b1:ba:29:82:b9:27:c9:53:38:
6f:b7:22:8c:d0:ed:b0:05:87:70:65:09:37:a9:75:
4c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3A:C0:30:29:5D:7E:4B:92:AF:BF:D7:59:4E:2A:47:D8:67:21:BD
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/LzrAMCldfkuSr7_XWU4qR9hnIb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.153.0/24
77.90.157.0/24
77.90.164.0/24
77.90.173.0/24
77.90.181.0/24
185.230.15.0/24
213.209.144.0/24
213.209.146.0/24
213.209.158.0/24
Signature Algorithm: sha256WithRSAEncryption
52:06:a3:d0:5c:0f:e8:39:15:b9:39:ca:40:ca:f6:1e:e2:65:
5c:14:f3:f9:e7:67:11:92:e0:d7:ba:0a:72:c1:9b:94:43:45:
7d:05:b6:e9:21:7d:11:fc:d0:bd:5d:30:7a:26:d2:56:24:4c:
35:9d:bb:f5:c2:4e:ec:3e:5d:ee:02:19:8b:bf:f5:32:fd:c9:
e7:29:ca:2a:b9:5a:46:b5:3d:d2:b2:0b:aa:3a:6b:c6:51:ba:
f5:5d:72:a6:19:fd:b2:19:25:96:8d:17:70:13:38:2f:ab:63:
5e:fb:89:70:1a:82:36:02:17:d3:7d:ec:4f:de:87:4b:51:20:
a4:14:a4:53:9d:5d:81:53:bb:ab:07:f7:8f:e2:e7:49:1e:05:
35:8e:62:ae:0c:20:4e:e3:80:a7:0e:cd:70:0a:5f:d5:3e:da:
2a:19:f8:24:17:e4:a5:60:bd:e2:1b:cb:ec:09:c8:ac:cf:c1:
08:2f:f1:29:e8:ab:56:a2:da:77:09:ad:f9:27:ba:88:a5:92:
3f:c3:a3:4b:69:85:1e:4c:e7:00:b5:4f:7e:55:1a:7e:c1:9e:
8b:35:40:fd:30:ab:53:ca:6d:fe:83:8a:6b:24:c7:9b:44:99:
0b:a3:b2:79:de:8f:da:e5:8a:5d:ab:20:ce:fc:55:e8:7c:0f:
3e:f9:f2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org