Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/tBimtTrgHoBzUlmkCWH0p5Xp6Qo.roa
File: tBimtTrgHoBzUlmkCWH0p5Xp6Qo.roa (raw, json)
Hash identifier: /sSbl4gZ9PSTWLfiNcgCZLE54fQ6ew1P1hi/2oYDTMM=
Subject key identifier: B4:18:A6:B5:3A:E0:1E:80:73:52:59:A4:09:61:F4:A7:95:E9:E9:0A
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 080D275E
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/tBimtTrgHoBzUlmkCWH0p5Xp6Qo.roa
Signing time: Fri 11 Mar 2022 18:07:36 +0000
ROA not before: Fri 11 Mar 2022 18:07:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49870
IP address blocks: 213.209.145.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
77.90.164.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
185.230.12.0/24 maxlen: 24
77.90.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135079774 (0x80d275e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Mar 11 18:07:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b418a6b53ae01e80735259a40961f4a795e9e90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:44:50:1b:3d:bb:d4:49:86:93:18:16:66:2b:
d0:66:ac:d1:38:88:9f:4c:cc:03:c2:5c:01:f7:a1:
4c:a7:06:a1:18:45:63:2b:80:98:46:7d:d2:bc:3a:
65:12:56:e9:1a:a6:73:f6:ad:da:fd:60:b2:59:39:
02:de:ab:a8:f0:d0:49:d8:0e:40:11:58:d9:a0:70:
10:7e:05:55:a4:08:9a:0d:97:d5:2e:d4:23:93:37:
79:68:0b:08:66:55:80:5b:c0:48:a8:08:fd:fb:74:
62:c7:b1:a4:c6:b0:b3:dd:ff:2d:dd:f2:1e:b0:44:
e8:e0:fb:4f:0d:f5:67:39:ee:12:a8:c9:76:0a:d8:
ed:6c:1a:98:25:b3:46:b5:0e:9e:04:ec:24:64:d3:
69:eb:b5:d4:8d:29:1d:34:de:df:6f:58:f2:56:4d:
3e:dc:c2:1c:c5:bf:1f:3c:c7:11:3c:ca:37:ba:b6:
8f:4b:48:67:71:92:51:cc:6f:1a:32:52:19:ff:10:
f3:1f:a3:2f:f3:15:28:00:32:a3:db:cb:f6:c1:24:
33:f7:17:00:b9:eb:3e:4f:31:da:fb:10:72:c0:5f:
00:57:a7:66:44:30:43:c4:ac:28:11:5f:34:04:19:
db:9f:f0:30:55:5d:ed:40:38:af:8d:5a:bb:81:cf:
5d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:18:A6:B5:3A:E0:1E:80:73:52:59:A4:09:61:F4:A7:95:E9:E9:0A
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/tBimtTrgHoBzUlmkCWH0p5Xp6Qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.164.0/24
77.90.181.0/24
185.230.12.0/23
213.209.145.0-213.209.146.255
Signature Algorithm: sha256WithRSAEncryption
69:db:fe:5f:bf:21:f7:fa:63:81:56:e1:b7:11:5d:98:b2:b1:
db:a7:ab:88:e2:7a:32:0d:8b:fc:ab:60:19:d1:6a:98:cd:a5:
e2:b0:c9:d1:65:07:88:4e:3c:11:d0:b9:0d:75:d9:d6:2a:b4:
d5:6d:71:c0:35:4c:02:75:3e:7d:ca:76:f9:5d:62:5f:1d:93:
3a:2d:6e:1c:fc:c5:96:5f:2a:6e:8c:2f:34:db:a2:9e:26:fe:
0d:e5:01:8c:c5:76:74:83:55:b2:1f:02:3b:33:fa:3e:da:4a:
25:8f:71:fc:91:b8:49:55:9f:60:9a:46:05:43:55:e4:48:aa:
3f:d4:3f:29:30:4f:bf:72:48:dc:4e:94:88:f7:ac:8a:b9:22:
b8:a6:c4:26:c2:00:25:b8:15:49:7a:be:d2:db:f4:b9:25:c6:
01:64:99:5c:1c:0d:7a:03:97:26:6e:2c:d8:2f:f9:c7:b5:3c:
2a:93:f0:c2:2e:f2:ac:09:0d:11:1c:e0:5b:ea:b2:8d:4d:8d:
66:18:50:16:95:63:d9:d3:be:25:cb:40:1c:ee:0a:ee:01:7f:
8b:5a:36:67:d7:22:ab:f0:94:c1:8f:77:f4:08:0f:59:42:64:
2d:6a:cd:eb:b4:0d:02:db:90:3a:da:c5:ec:0f:1d:7e:d7:56:
42:04:4f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:09 2023 by rpki-client on console-ams.rpki-client.org