Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/nbvOzaf1Lrwu6orAF09rgKBCY6w.roa
File: nbvOzaf1Lrwu6orAF09rgKBCY6w.roa (raw, json)
Hash identifier: U7DyrOKwjaDjcopCWm/ja3LXh1etNBBAMrYrY5kS8yA=
Subject key identifier: 9D:BB:CE:CD:A7:F5:2E:BC:2E:EA:8A:C0:17:4F:6B:80:A0:42:63:AC
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 08783BF8
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/nbvOzaf1Lrwu6orAF09rgKBCY6w.roa
Signing time: Thu 07 Apr 2022 06:54:39 +0000
ROA not before: Thu 07 Apr 2022 06:54:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.188.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.158.0/24 maxlen: 24
77.90.173.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
77.90.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142097400 (0x8783bf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 7 06:54:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9dbbcecda7f52ebc2eea8ac0174f6b80a04263ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:db:58:b8:7c:3a:bc:a8:77:52:9e:b7:ac:
a9:6f:8d:c6:fa:40:f1:c4:54:ae:37:b2:a1:cf:07:
9e:f3:53:1d:ed:e3:8e:28:23:83:d7:42:6b:ee:d8:
2f:33:44:fe:be:64:d5:aa:12:6a:91:66:68:c6:3a:
a6:97:22:97:5a:66:4f:4f:6a:d0:a7:61:3c:a6:ef:
1d:e5:b1:a1:1b:13:b9:2f:81:ad:38:b7:cc:48:a2:
1e:58:6b:82:4f:37:bf:9b:2e:8a:f4:d5:16:92:87:
bf:05:66:c4:ea:11:cd:a2:6b:f9:26:8e:b2:60:78:
4a:dd:d2:02:df:9f:84:4d:24:08:21:d9:4d:19:06:
12:cb:ca:7a:60:53:40:a7:f6:6f:b0:94:a6:a1:90:
45:44:e3:13:3a:d2:9c:ca:70:a2:4b:05:76:7b:d1:
a1:7c:df:52:42:86:49:07:e1:81:e6:7f:09:9c:fe:
92:6a:25:cb:a6:63:4d:52:b3:c8:68:43:e9:75:cf:
e7:44:04:f4:82:02:5f:62:97:69:c1:7b:f8:27:41:
bc:fc:da:3b:d4:f3:77:c4:e9:72:18:05:b2:0e:ea:
57:3c:96:26:77:b1:22:36:48:91:3b:f3:7b:78:9a:
69:0c:f6:0e:09:c9:7d:ce:6f:5c:a9:39:ac:58:05:
31:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BB:CE:CD:A7:F5:2E:BC:2E:EA:8A:C0:17:4F:6B:80:A0:42:63:AC
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/nbvOzaf1Lrwu6orAF09rgKBCY6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.173.0/24
77.90.184.0/24
77.90.188.0/24
185.230.15.0/24
213.209.146.0/24
213.209.158.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:b8:b4:27:55:25:84:fb:3f:a8:92:27:18:fe:10:3c:00:27:
6c:32:e6:ec:70:ea:b8:bc:7c:d9:b5:0e:d3:25:6c:08:c7:f9:
7f:81:ef:05:2d:74:e7:a7:70:3e:a2:72:07:eb:89:cf:86:1d:
1f:d9:6e:98:5e:7a:7e:d5:c8:23:13:87:27:49:ec:69:12:5c:
73:d6:ac:7a:ce:c2:f8:74:e5:03:fb:56:4a:66:d9:52:a0:f8:
09:18:64:4e:cf:af:e7:f9:c5:61:b1:cd:c7:52:e4:f1:00:db:
aa:0b:97:bd:db:40:43:7b:ab:bf:10:b8:1f:3e:62:8f:11:d0:
09:ee:5a:d5:44:b9:3c:08:30:7e:37:4d:40:df:5c:38:76:62:
47:52:a6:35:0b:59:12:91:9a:e8:98:db:32:aa:87:50:6c:21:
28:0f:ab:e7:15:2d:e1:03:ae:a9:c8:ea:04:60:23:49:bd:47:
b2:d7:ef:21:59:9d:7d:dc:c9:18:b9:27:a2:66:1a:26:c6:9e:
11:61:25:74:b5:28:c5:cf:6f:28:03:92:cb:b7:50:57:69:17:
71:ce:86:96:ed:f1:fb:8e:d8:23:06:5e:41:5c:f1:83:db:3c:
e1:f8:ff:1e:3f:1f:ff:e4:be:8e:86:59:55:e0:74:49:51:a3:
48:da:64:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:03 2024 by rpki-client on console-fra.rpki-client.org