Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/RbAGm_iRY-4Z7Y4BlNAXVDtBCyM.roa
File: RbAGm_iRY-4Z7Y4BlNAXVDtBCyM.roa (raw, json)
Hash identifier: S8iDlbH3jE9a7tfwvxO25X84AB76A80NP0PCnrNBuA0=
Subject key identifier: 45:B0:06:9B:F8:91:63:EE:19:ED:8E:01:94:D0:17:54:3B:41:0B:23
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0734E8C4
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/RbAGm_iRY-4Z7Y4BlNAXVDtBCyM.roa
Signing time: Fri 21 Jan 2022 12:11:30 +0000
ROA not before: Fri 21 Jan 2022 12:11:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49870
IP address blocks: 185.230.13.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120907972 (0x734e8c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 21 12:11:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45b0069bf89163ee19ed8e0194d017543b410b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c4:5b:20:3a:8c:33:6b:8d:98:e9:99:d8:38:
b9:28:66:75:7a:89:63:c6:46:62:ed:8c:9f:45:4b:
8d:61:23:4e:c9:1e:55:8c:5f:7b:d3:56:7d:e8:84:
46:b3:fd:bf:66:58:87:9c:cb:51:c7:c9:d8:ff:e6:
57:d0:1d:a0:d9:11:d5:bf:42:8b:5d:76:a0:b6:69:
2d:c4:f2:05:a7:f2:79:e1:11:f8:ed:d6:88:74:f6:
5e:91:23:b9:48:b9:1e:41:af:f9:a3:bb:ba:13:3b:
d1:0f:da:be:fa:0a:3d:de:75:ac:9d:5f:dc:b2:fd:
55:67:ba:71:a2:28:fa:41:9c:30:d1:19:de:0b:78:
59:fa:29:cc:4e:e3:fa:ae:2e:1e:55:ea:42:16:c7:
9d:c4:de:b9:51:1e:2f:97:fe:c5:99:3b:3e:16:34:
89:fa:d9:5f:f2:49:ad:93:20:98:b9:e6:da:83:ab:
72:ae:3c:04:78:41:89:58:27:60:d3:22:f3:82:c7:
2c:f1:bd:b2:85:22:3f:5b:cf:8f:bd:42:a2:99:8a:
e9:a9:a7:05:19:29:3b:08:2a:19:59:0e:02:cb:52:
81:3d:7b:86:f2:f7:e3:c1:6b:68:af:5d:df:e5:9e:
19:0d:30:d3:ed:5b:3a:4b:75:20:ff:0c:2c:a3:ca:
4b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B0:06:9B:F8:91:63:EE:19:ED:8E:01:94:D0:17:54:3B:41:0B:23
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/RbAGm_iRY-4Z7Y4BlNAXVDtBCyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.185.0/24
185.230.13.0/24
Signature Algorithm: sha256WithRSAEncryption
af:58:21:72:5f:3c:06:6d:ff:f4:ea:ca:b2:20:67:b7:6c:4b:
9a:14:2d:e4:fb:9c:67:c3:30:73:3f:44:9b:4f:62:2a:d6:3f:
69:48:0f:a6:a0:11:01:e5:47:cc:70:e4:49:6b:8d:06:5f:33:
b5:52:d8:ff:95:b8:36:26:8e:50:a0:a2:f5:56:c6:8c:25:57:
b6:da:b6:0a:c2:c1:27:f2:a6:32:27:ab:3b:0e:7f:e8:86:93:
18:f5:a0:21:cd:a8:27:f0:56:3f:f8:9f:ca:46:11:07:96:88:
77:33:0b:bc:0f:f9:74:fb:4a:06:89:7c:c3:d3:a6:fd:5c:16:
9a:71:22:f2:c1:38:00:97:c3:6a:2a:67:1d:df:0f:4f:0f:46:
3b:66:46:0d:d3:0f:f9:3f:98:e0:c0:84:08:a9:c2:01:3b:ab:
9e:f1:a5:81:57:2e:b4:d3:8f:68:e7:87:b6:ee:50:26:e0:c1:
7e:eb:0e:96:c0:8a:be:16:c3:81:3d:06:3e:c6:d7:15:dd:30:
fd:db:8b:ed:f1:8b:0a:10:8b:a4:b8:e3:30:bf:37:a3:b0:4c:
42:8a:32:2b:01:d5:22:43:8e:6a:bf:9f:75:bc:3b:87:f7:5d:
0b:c1:e8:d1:e8:d7:f9:0e:b3:71:54:88:8c:cd:55:4a:8b:72:
d8:0a:4f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org