Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/XK3xabwQplUkbk-ZJF9gRRn-_t0.roa
File: XK3xabwQplUkbk-ZJF9gRRn-_t0.roa (raw, json)
Hash identifier: q4eqNnC7bMVudDhVnYNDrgC5Bk0jMXm5PN0SXTXyJaY=
Subject key identifier: 5C:AD:F1:69:BC:10:A6:55:24:6E:4F:99:24:5F:60:45:19:FE:FE:DD
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01847C6C50FCD41AF6F42781803CF9D93A31
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/XK3xabwQplUkbk-ZJF9gRRn-_t0.roa
Signing time: Tue 15 Nov 2022 17:53:04 +0000
ROA not before: Tue 15 Nov 2022 17:53:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 77.90.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7c:6c:50:fc:d4:1a:f6:f4:27:81:80:3c:f9:d9:3a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Nov 15 17:53:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5cadf169bc10a655246e4f99245f604519fefedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:81:f9:e7:fb:bb:e7:d1:a8:a8:07:c3:5e:58:
d1:4e:30:6d:77:0a:a2:c7:3b:04:89:9a:38:d1:26:
9a:34:40:51:fa:e5:43:d9:f9:0b:74:c2:8b:c8:ca:
db:8f:54:a4:34:ef:83:03:6c:15:e9:10:6b:c8:18:
ae:b4:da:83:f6:f1:a9:5e:8e:84:26:15:20:9c:cd:
26:38:b3:ee:17:fa:c8:14:09:60:63:53:d6:62:d7:
23:14:3c:20:62:e6:a9:cc:cb:1d:db:43:69:54:32:
5f:79:bd:fd:d8:e7:04:1f:89:16:6a:59:10:ba:87:
a4:25:82:e2:f8:43:11:41:2d:a1:bb:6a:a6:5d:83:
7b:6a:28:e4:b6:bc:ce:c0:6f:11:4e:5c:ce:89:7d:
53:ce:6d:e3:20:11:d9:e9:f3:42:80:32:0a:93:9a:
05:3a:fc:79:87:ef:2b:9a:60:78:35:f5:ed:e3:c4:
07:1e:c2:6e:64:5b:ad:9e:5b:7c:c2:9e:8f:6e:a0:
43:75:de:63:c4:ba:68:1f:9b:9b:3b:78:55:f5:50:
e5:43:25:03:59:8b:10:3f:34:12:46:dd:c0:96:2a:
06:f6:c6:18:a1:79:1a:b9:66:dc:dc:91:fb:ae:c6:
b8:94:6b:22:ad:3e:65:d1:15:75:f4:95:ee:84:b9:
db:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AD:F1:69:BC:10:A6:55:24:6E:4F:99:24:5F:60:45:19:FE:FE:DD
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/XK3xabwQplUkbk-ZJF9gRRn-_t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.184.0/24
Signature Algorithm: sha256WithRSAEncryption
96:df:20:8b:02:58:a9:63:f5:ed:bf:bc:8c:1d:e3:87:78:aa:
e4:8b:68:fe:ea:53:d3:f1:0c:40:5c:24:4a:5a:2d:57:73:96:
df:39:52:2e:d1:ec:51:f6:8c:88:81:41:39:a5:8a:bc:ad:9c:
70:c0:e3:b0:df:6f:07:aa:c2:75:06:df:d7:92:75:ce:74:40:
48:52:ec:4d:83:bd:0e:8f:45:fa:fd:dc:3d:e3:bc:a0:e3:9b:
2e:f5:56:80:5b:e9:38:e4:2c:d4:ed:6d:07:a3:80:aa:7e:8f:
f6:07:3f:0f:c7:cc:6f:d0:0d:7a:da:ac:be:fe:c4:30:01:ed:
76:e3:15:8b:86:c3:0d:4f:36:05:06:45:c4:ff:c3:57:67:3d:
46:36:61:00:7b:9c:14:a2:a0:eb:0e:a4:0a:3a:71:06:f0:b7:
aa:14:53:fe:2b:0d:2a:d2:d5:78:4d:ee:06:62:9d:9d:01:96:
4d:d6:53:d1:8c:2c:28:58:a0:d2:e2:8d:d9:f2:11:75:a4:a5:
9b:74:e1:01:95:e6:48:92:f6:52:82:cd:77:c9:99:32:c8:ed:
64:84:c2:41:f0:5c:88:ad:8c:29:66:6e:62:a4:f9:b8:d3:0e:
60:60:4f:06:1a:97:02:23:2c:a2:2c:55:44:b8:ff:0d:df:04:
76:fb:b9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org