Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/t6dlbP4EPu9AducMBGAKB67Xtfo.roa
File: t6dlbP4EPu9AducMBGAKB67Xtfo.roa (raw, json)
Hash identifier: BoLd8ioeg7OOfpM45rwYNeqOdiFyVRPxKdjjHqkg0+M=
Subject key identifier: B7:A7:65:6C:FE:04:3E:EF:40:76:E7:0C:04:60:0A:07:AE:D7:B5:FA
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 06ECA20F
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/t6dlbP4EPu9AducMBGAKB67Xtfo.roa
Signing time: Sat 01 Jan 2022 07:00:23 +0000
ROA not before: Sat 01 Jan 2022 07:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212853
IP address blocks: 77.90.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116171279 (0x6eca20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 1 07:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7a7656cfe043eef4076e70c04600a07aed7b5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:16:3a:24:60:80:95:2b:97:e6:fa:ed:aa:
2b:45:d7:ab:3a:3e:6e:6f:78:0f:e3:43:a4:7c:78:
b2:1a:21:3f:71:d4:6e:6e:39:08:fd:48:07:b3:6d:
41:1f:32:d1:f9:c7:68:8d:86:d7:49:92:47:05:86:
8f:02:06:d9:86:38:20:70:e1:35:42:15:21:3e:aa:
20:86:b7:8a:03:fa:fb:ab:5a:05:54:ea:00:9b:44:
51:72:4b:4f:5b:72:72:64:d4:2c:c5:3c:52:c8:59:
b9:2d:3d:c3:97:7f:61:61:d5:32:ce:40:bd:69:a5:
5f:25:6b:d7:91:12:df:35:b2:f1:78:d7:65:31:d2:
d6:a5:7d:62:57:e7:a7:ce:33:ee:d3:2a:30:cb:de:
ab:72:1e:5e:7a:1b:d2:6e:85:29:3e:8a:03:9a:95:
89:8b:ea:58:dc:0b:70:7d:a6:78:98:da:ce:6b:67:
0b:57:d1:d0:f2:3d:01:0a:bd:a8:9b:39:10:05:8d:
de:30:3e:a2:1d:0b:3f:b5:8a:64:76:fa:1f:07:3b:
8b:65:63:f2:94:f0:d3:eb:89:d3:a4:54:bf:82:15:
6a:e1:2f:b9:d9:5a:4d:80:ed:05:bd:22:4c:6e:b7:
ef:33:8f:94:0f:a7:6b:ba:50:7d:a1:38:e6:65:53:
99:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A7:65:6C:FE:04:3E:EF:40:76:E7:0C:04:60:0A:07:AE:D7:B5:FA
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/t6dlbP4EPu9AducMBGAKB67Xtfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.151.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:a4:a3:ec:a9:55:71:98:1a:b0:97:18:a8:3c:45:ec:3a:21:
eb:a4:c6:5d:9d:0f:8b:e5:80:fd:8a:e4:ed:c3:ee:29:76:e4:
c7:fc:8e:17:3e:4f:6d:e3:f0:6d:ac:cb:d6:ed:95:4b:99:ed:
ce:b8:c7:6e:ac:2b:f1:c9:a6:a1:72:e0:43:35:67:8d:48:7f:
d6:35:f0:d9:ac:c1:e5:15:cb:b5:d7:f0:ea:52:43:0e:f9:4d:
f6:8e:7b:de:71:6a:8e:bb:ea:7c:d6:12:1d:da:ca:0d:9b:81:
86:aa:2c:e5:4c:4e:25:c2:89:3c:b1:b3:3c:02:18:72:52:7e:
20:00:49:6e:ca:59:63:4b:89:d9:18:d9:7a:a5:72:85:49:1c:
15:99:38:ea:e1:4b:a4:bf:a7:0e:9a:8a:dd:16:e0:27:f7:43:
9d:1f:8e:f2:ca:93:8f:45:43:f6:fc:c0:d7:89:9f:78:e5:f9:
da:e3:29:2a:0a:c6:0c:fb:6f:48:86:6d:75:e6:f7:ee:fc:1e:
78:4e:5d:66:6d:68:9d:58:75:58:9d:b6:7d:df:39:b2:06:6d:
9c:2d:8f:cc:3d:6b:b4:2d:b7:14:b1:b7:e5:2d:7a:c7:d0:f2:
e5:4a:55:64:0f:f1:5d:35:19:88:ca:fe:a6:10:53:8b:8a:36:
36:2c:d5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org