Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/_6zIWukvxlyYXul-peBm9Y6LVvY.roa
File: _6zIWukvxlyYXul-peBm9Y6LVvY.roa (raw, json)
Hash identifier: C3lvMQ3ETPfDQ3c5jsc4qkrlbERTHDv+6wcQz917e64=
Subject key identifier: FF:AC:C8:5A:E9:2F:C6:5C:98:5E:E9:7E:A5:E0:66:F5:8E:8B:56:F6
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 08644298
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/_6zIWukvxlyYXul-peBm9Y6LVvY.roa
Signing time: Fri 01 Apr 2022 12:50:10 +0000
ROA not before: Fri 01 Apr 2022 12:50:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49870
IP address blocks: 77.90.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140788376 (0x8644298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 1 12:50:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ffacc85ae92fc65c985ee97ea5e066f58e8b56f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8c:d0:77:55:77:84:c9:eb:e0:d5:cf:bc:84:
ca:70:61:42:b6:ca:5c:cf:b5:ca:3c:1b:d9:ec:dd:
1a:fa:41:56:1a:6a:5c:18:87:cf:c3:62:e1:45:bb:
2f:fa:aa:f7:42:d3:93:d1:c9:39:f3:bb:9c:6e:e7:
3b:95:c9:1e:13:2c:82:b7:4c:04:1d:f0:5b:a1:b2:
fc:b9:3d:a0:ab:c4:c9:ae:9e:85:3d:ef:a6:4a:8e:
96:c0:cb:3c:20:75:ba:46:42:be:7d:53:15:de:85:
58:ef:74:91:b6:d8:6b:25:f4:99:ce:dc:d1:a6:7c:
49:43:10:85:f2:15:aa:c2:14:88:d0:6f:a4:52:5f:
cd:b9:39:1c:59:e8:09:b9:93:62:f3:f8:96:b9:fb:
30:18:b4:ab:5d:9a:87:3f:b5:6d:6f:49:4d:be:d9:
7e:86:76:ab:35:34:18:8b:57:55:59:71:d6:02:42:
83:28:b9:15:b2:8d:db:aa:68:e9:6c:c6:9e:d8:df:
b4:b0:7a:2c:4b:92:d1:d3:4b:57:88:d7:45:a7:d3:
94:ef:e4:76:4b:53:d4:c2:4b:7a:91:9d:86:db:bb:
66:c7:e6:cf:f8:14:96:72:e7:f3:d9:22:97:71:03:
d9:6e:7b:26:0d:69:42:db:e4:b4:ae:49:b5:91:35:
15:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AC:C8:5A:E9:2F:C6:5C:98:5E:E9:7E:A5:E0:66:F5:8E:8B:56:F6
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/_6zIWukvxlyYXul-peBm9Y6LVvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.164.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:a2:8e:ff:67:ce:7d:59:8d:a0:27:42:0f:9a:b1:a0:62:ad:
de:2d:ba:1c:ef:d9:6d:36:75:fc:cb:a4:85:ee:61:ef:2e:1f:
1f:db:86:8b:50:26:90:38:cc:7f:ae:14:6b:52:61:74:48:81:
0e:5d:3f:26:ad:7e:71:dd:4f:c0:84:bb:0f:35:bf:f3:bf:66:
6d:64:1c:92:34:d7:41:ea:9b:63:65:cb:16:45:84:24:7d:26:
1e:b6:02:fe:a4:45:14:8a:08:5b:c7:8d:2e:32:03:9a:34:bf:
5d:30:d3:03:44:df:23:16:97:ce:3c:70:b8:f7:b7:75:30:82:
18:15:c4:d9:ba:0b:7f:31:07:ce:38:27:1d:60:18:5a:17:7f:
92:a4:e7:4e:9b:b5:43:70:7f:da:6e:ac:6a:6b:03:86:fe:b8:
63:3a:37:e8:cc:6d:26:b7:60:9f:0b:2f:ed:5c:d7:28:0f:6a:
f7:ea:db:a1:20:07:1e:9e:8f:72:b0:b3:8f:a3:af:01:10:15:
c7:ab:6b:2e:99:03:5f:2d:66:63:0e:8d:38:64:8b:f6:8b:5c:
5a:2e:a7:43:b2:b2:4e:a5:d2:6c:61:86:f3:8d:c3:ae:3d:66:
68:7b:af:e7:b7:f5:90:2c:1c:62:3b:22:59:15:75:57:40:4e:
de:f7:44:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:25 2024 by rpki-client on console-ams.rpki-client.org