Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/p1jr52G03Jyfhan9RbNF9eN8XFo.roa
File: p1jr52G03Jyfhan9RbNF9eN8XFo.roa (raw, json)
Hash identifier: V4kYoTvlJUzYDvs/j+/U7B6xkjVfXouKhoF83oGnZr4=
Subject key identifier: A7:58:EB:E7:61:B4:DC:9C:9F:85:A9:FD:45:B3:45:F5:E3:7C:5C:5A
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 07C7AA42
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/p1jr52G03Jyfhan9RbNF9eN8XFo.roa
Signing time: Tue 08 Mar 2022 07:43:21 +0000
ROA not before: Tue 08 Mar 2022 07:43:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49870
IP address blocks: 213.209.146.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
77.90.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130525762 (0x7c7aa42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Mar 8 07:43:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a758ebe761b4dc9c9f85a9fd45b345f5e37c5c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:54:c8:01:f3:6d:0e:79:7c:e2:d4:1a:c8:b6:
d5:58:e5:0a:b0:79:ad:4e:2f:26:04:26:71:5e:de:
7b:cc:fd:13:7f:fe:86:3e:0f:44:89:b7:0d:ff:8b:
fc:14:b4:31:9d:1b:81:f5:cc:f9:3b:03:38:7c:67:
18:98:b9:93:5b:77:77:94:10:61:60:1a:9b:d7:13:
d8:9e:f4:0f:dc:f7:12:0a:f6:6e:26:c6:ec:2f:a5:
c3:25:c9:04:50:85:7f:8f:f6:4b:aa:bd:86:7b:cf:
be:27:5e:10:f7:9c:ac:60:05:c3:86:8a:14:5b:ce:
41:eb:57:6f:f0:ea:87:36:da:4b:8e:72:80:bb:bd:
79:2e:ba:ac:09:d9:a7:ad:fc:6e:c4:2b:d3:2e:51:
c4:64:01:34:27:cb:c7:68:58:ee:3d:c5:66:f5:03:
70:62:97:82:8e:1d:ed:ec:af:ee:33:4d:76:8d:c1:
ae:51:1a:05:ae:95:0e:2a:e9:29:da:13:36:e3:56:
51:55:06:fd:82:f4:67:ae:10:ff:1b:80:62:88:09:
0d:74:10:7b:9c:92:74:d7:02:ac:97:12:2d:dd:87:
6c:5f:a9:4c:dc:9d:e5:b6:7d:9c:7b:5a:d3:df:7d:
c0:60:63:eb:c0:6a:16:9f:f4:43:ba:82:35:0a:ee:
43:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:58:EB:E7:61:B4:DC:9C:9F:85:A9:FD:45:B3:45:F5:E3:7C:5C:5A
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/p1jr52G03Jyfhan9RbNF9eN8XFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.181.0/24
185.230.13.0/24
213.209.146.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:09:e1:84:c6:c9:06:a1:86:ab:29:33:08:0b:2f:f1:c2:0d:
a5:a2:7b:38:ba:50:0b:02:20:f7:0d:65:ad:ca:29:75:4e:98:
57:ac:66:8e:4b:9d:b0:08:b0:96:7d:68:02:d3:2f:cb:d7:ab:
9e:62:01:18:e3:b3:51:ce:5a:f3:31:71:d8:6c:4f:cc:56:82:
d5:50:7f:a9:84:ec:89:89:1a:d7:bc:80:66:6f:30:a5:0f:b6:
2b:b7:66:48:38:73:e6:b2:df:20:dd:09:73:f6:07:98:51:8a:
62:e4:1d:98:0e:f9:75:23:1b:bd:80:57:fb:d5:1c:86:69:07:
48:d5:eb:82:1f:41:64:f8:ba:b9:1f:03:0d:15:da:84:b1:d5:
9d:9b:18:40:1f:3c:43:e6:31:d4:a5:60:22:b5:c4:8b:93:9e:
f9:64:ed:e9:c4:cd:da:9e:a0:b2:29:85:23:46:39:65:76:20:
e5:51:30:8c:e4:17:76:d3:11:2e:68:5b:d3:33:26:25:ea:3b:
88:49:29:f4:56:5f:b5:6a:85:3e:72:9c:c2:9a:ac:f5:ba:1c:
fd:ac:09:52:bc:6e:3a:88:bf:6c:fe:79:e1:11:f2:eb:90:5b:
2f:09:c8:ad:1c:d2:fd:ca:45:37:d4:10:d3:26:a2:f0:c3:0b:
54:ab:47:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:06 2024 by rpki-client on console-fra.rpki-client.org