Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/oVrOL9LRU_hVsc13SzgmuZiyzuQ.roa
File: oVrOL9LRU_hVsc13SzgmuZiyzuQ.roa (raw, json)
Hash identifier: L2TJvkqEo19fpg70953RXfzDN8T5mDxl7pV7JWDfSII=
Subject key identifier: A1:5A:CE:2F:D2:D1:53:F8:55:B1:CD:77:4B:38:26:B9:98:B2:CE:E4
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0181E473CE74F08F0EA97CFD112C21D50D09
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/oVrOL9LRU_hVsc13SzgmuZiyzuQ.roa
Signing time: Sat 09 Jul 2022 19:33:23 +0000
ROA not before: Sat 09 Jul 2022 19:33:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 77.90.150.0/24 maxlen: 24
77.90.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e4:73:ce:74:f0:8f:0e:a9:7c:fd:11:2c:21:d5:0d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 9 19:33:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a15ace2fd2d153f855b1cd774b3826b998b2cee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:14:90:b8:1c:e0:0e:61:da:dc:f0:f9:8c:3e:
b9:b1:b1:c6:ac:77:56:95:d3:60:4d:34:ee:30:d7:
c7:3c:77:f0:27:90:af:b2:b6:b6:d9:e3:42:fe:73:
dd:eb:fe:bf:6b:05:33:76:54:0b:3f:40:12:b4:ed:
84:f2:c5:24:6d:72:2e:b7:95:75:31:d7:50:52:f2:
eb:64:82:3b:67:df:e9:6c:31:53:ed:53:a9:91:52:
a2:5c:59:55:dc:a0:f2:75:4e:e4:c9:8e:e0:1a:b9:
87:10:3c:c0:e7:36:e7:fe:7a:04:9d:a4:39:92:82:
19:c1:17:c3:62:da:4c:13:f4:8d:b4:99:05:8d:7c:
fc:c4:81:56:19:9f:17:9b:72:cf:8b:fd:7f:f8:9a:
fe:28:12:d5:33:02:1b:1d:32:99:b6:ce:ce:0f:cf:
dc:ba:34:cd:9f:6c:94:ae:33:a9:fc:a2:8b:c7:5f:
d5:8a:18:4e:d2:22:16:80:b7:bf:e7:5e:7d:9c:3d:
d9:3c:2c:ce:39:62:cd:ed:3c:51:06:34:b2:34:72:
da:e8:4f:b3:95:87:53:62:71:c2:51:af:e1:ab:89:
3f:e5:fd:6d:9c:13:19:3e:3e:34:03:4c:e5:c3:61:
04:cf:e3:64:27:46:c1:cf:5b:8d:c3:7c:22:8c:fb:
db:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5A:CE:2F:D2:D1:53:F8:55:B1:CD:77:4B:38:26:B9:98:B2:CE:E4
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/oVrOL9LRU_hVsc13SzgmuZiyzuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.150.0/24
77.90.173.0/24
Signature Algorithm: sha256WithRSAEncryption
91:95:1d:f1:d7:fa:b9:0e:cf:cc:b6:d3:51:90:1c:57:a3:96:
1b:88:39:f9:70:73:cb:a9:de:d8:86:61:da:e8:52:12:a1:e2:
6a:89:be:ec:50:98:88:a9:67:52:db:ab:80:c2:2f:98:9e:be:
53:0f:f8:77:9d:30:4b:27:37:64:c1:6a:8d:9c:ec:7f:f5:cf:
76:a0:05:c7:98:24:4c:23:45:44:b9:eb:e0:8e:3c:92:08:ce:
01:de:d4:a6:62:44:2f:cb:b0:61:f9:78:5a:ab:38:23:23:33:
94:04:bf:a1:88:a6:5c:9b:f0:e6:15:f9:c4:79:2a:9e:ad:07:
93:07:7b:59:46:cc:46:81:a5:df:54:ae:16:08:c8:83:f9:85:
ed:e9:2b:35:56:5d:8a:17:44:23:81:9c:85:30:5a:66:3f:48:
82:22:3a:f7:09:aa:b1:0f:27:5c:8d:96:1b:42:24:31:65:37:
a9:89:19:58:63:21:d4:8b:4d:d8:fe:98:1b:48:86:3c:a3:50:
eb:3f:64:68:d6:11:64:98:a6:94:22:e2:e9:6a:2e:06:f9:41:
ee:a1:0c:c7:47:7f:6d:70:69:2e:2a:1c:e8:6e:a9:f0:93:5c:
e9:90:20:1d:63:0b:7d:6c:e5:58:fd:33:bf:e3:9b:95:6d:b6:
94:e2:05:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:25 2024 by rpki-client on console-ams.rpki-client.org