Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/gzA9OCm9JTpzCh5bwaejm-hrCYI.roa
File: gzA9OCm9JTpzCh5bwaejm-hrCYI.roa (raw, json)
Hash identifier: +PZMVQQ1DWerEQW1piOXd4aTZ4AjKJGZ6kQfTtpWrHE=
Subject key identifier: 83:30:3D:38:29:BD:25:3A:73:0A:1E:5B:C1:A7:A3:9B:E8:6B:09:82
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0181CEF4A5944ED7DE73385A2D8C862C928F
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/gzA9OCm9JTpzCh5bwaejm-hrCYI.roa
Signing time: Tue 05 Jul 2022 15:22:28 +0000
ROA not before: Tue 05 Jul 2022 15:22:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 77.90.187.0/24 maxlen: 24
213.209.132.0/24 maxlen: 24
213.209.148.0/24 maxlen: 24
77.90.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ce:f4:a5:94:4e:d7:de:73:38:5a:2d:8c:86:2c:92:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 5 15:22:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83303d3829bd253a730a1e5bc1a7a39be86b0982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:51:3c:59:1b:31:8b:2e:8c:ab:ba:1f:d6:6a:
1c:3c:20:86:79:45:24:9d:a5:6d:72:14:b6:f1:7f:
b4:12:86:20:57:b6:d8:69:00:82:14:27:40:f7:37:
c6:0e:4a:7d:8c:3c:06:78:fc:c1:5f:1b:18:5c:68:
24:ed:29:1d:ba:c1:c6:c3:21:5b:97:f9:75:05:0f:
ef:f1:a0:bd:2c:14:f4:ab:3b:51:55:6f:0d:f4:08:
0d:22:38:42:4b:2d:2b:ed:3a:ee:ad:35:a8:e2:00:
e5:27:27:53:8f:6a:f2:c4:04:87:79:8d:c9:55:3b:
2a:69:19:3b:3d:47:f0:93:2d:19:6e:7c:7b:84:14:
81:07:5d:f3:5d:0a:7e:97:bd:e1:21:53:22:19:75:
be:a3:76:a8:fb:5d:76:d8:df:13:06:a2:09:5b:28:
18:34:57:80:10:65:e5:5c:f4:70:24:fe:26:4a:46:
35:c9:db:ef:3f:df:57:56:df:a9:76:85:29:63:33:
c1:1a:e5:f8:98:7b:b3:ff:31:f0:84:a0:56:2a:ee:
15:59:6f:1f:fd:97:da:b5:96:e6:2e:03:bf:0f:f9:
c2:5f:50:c7:09:c1:1b:32:56:72:0f:79:61:80:1c:
04:7d:9a:17:f9:f4:18:d9:a0:e3:1a:c5:75:05:5c:
13:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:30:3D:38:29:BD:25:3A:73:0A:1E:5B:C1:A7:A3:9B:E8:6B:09:82
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/gzA9OCm9JTpzCh5bwaejm-hrCYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.176.0/24
77.90.187.0/24
213.209.132.0/24
213.209.148.0/24
Signature Algorithm: sha256WithRSAEncryption
12:68:dc:40:a3:73:f1:07:69:bb:0b:fc:b5:5a:76:a5:00:e9:
cb:31:b6:81:0b:76:32:80:04:45:07:1d:83:6a:97:c4:77:2c:
96:52:30:cb:06:3e:04:df:37:d4:f0:f8:d2:67:1d:2d:b7:77:
a5:40:3a:28:0c:15:66:57:f8:c8:96:bd:07:e2:ea:6b:93:9a:
cd:87:cd:4c:56:e8:a3:a1:4a:d1:ff:55:e3:9c:29:cc:cf:98:
30:12:81:0b:71:b9:61:ca:44:a0:ab:0f:da:fa:bb:02:fe:ca:
09:78:5a:37:4b:e5:db:32:13:93:dd:94:34:75:32:f3:77:c9:
ff:d9:f3:ef:10:65:74:88:e7:dd:b4:17:86:e6:27:ee:dd:0f:
21:98:90:b7:f8:73:bb:be:87:e1:17:fa:31:b7:b1:09:a7:6e:
74:e8:a2:d9:6d:08:d9:43:46:95:8b:fa:a7:96:e8:e0:6c:be:
67:6e:87:87:64:07:93:a6:14:fd:b1:41:11:18:e5:2a:b2:36:
cc:75:6f:11:ce:af:ea:b1:78:94:2e:1f:66:21:93:d1:c0:55:
1a:fe:ab:23:de:21:38:77:e7:2e:3e:cc:87:4c:09:14:d4:be:
74:9e:85:aa:20:51:31:0a:a1:83:42:14:8f:4f:00:95:82:92:
bc:b1:21:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org