Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-b11zujDnXKe6wU6K5cLpPJDGIY.roa
File: 1-b11zujDnXKe6wU6K5cLpPJDGIY.roa (raw, json)
Hash identifier: SwfuG8ofTnk+/lYSzhBET21a6f/geLI7W9DyR8s2jJY=
Subject key identifier: F9:BD:75:CE:E8:C3:9D:72:9E:EB:05:3A:2B:97:0B:A4:F2:43:18:86
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01837A8FD26CDB873FF7C532EC8A26F414C7
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-b11zujDnXKe6wU6K5cLpPJDGIY.roa
Signing time: Mon 26 Sep 2022 16:09:49 +0000
ROA not before: Mon 26 Sep 2022 16:09:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 213.209.137.0/24 maxlen: 24
213.209.139.0/24 maxlen: 24
213.209.141.0/24 maxlen: 24
213.209.152.0/24 maxlen: 24
213.209.155.0/24 maxlen: 24
213.209.154.0/24 maxlen: 24
213.209.153.0/24 maxlen: 24
77.90.158.0/24 maxlen: 24
77.90.163.0/24 maxlen: 24
77.90.162.0/24 maxlen: 24
77.90.161.0/24 maxlen: 24
77.90.160.0/24 maxlen: 24
77.90.165.0/24 maxlen: 24
77.90.170.0/24 maxlen: 24
77.90.169.0/24 maxlen: 24
77.90.172.0/24 maxlen: 24
77.90.171.0/24 maxlen: 24
77.90.175.0/24 maxlen: 24
77.90.182.0/24 maxlen: 24
77.90.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7a:8f:d2:6c:db:87:3f:f7:c5:32:ec:8a:26:f4:14:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Sep 26 16:09:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9bd75cee8c39d729eeb053a2b970ba4f2431886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:a6:e2:05:eb:b3:d8:60:68:41:81:6e:66:
5a:1c:f3:93:21:5d:9a:c1:1c:5d:82:91:45:23:24:
fa:ac:22:61:04:e1:b2:5c:5e:9f:73:01:51:0e:c4:
98:c0:13:a4:81:c6:f3:a9:e9:36:54:cd:2e:f8:57:
b0:7f:4f:2e:c3:49:19:21:08:08:b4:1d:3a:01:c7:
c7:72:b1:31:8b:5c:10:09:f2:9a:0b:4b:53:06:b3:
e8:fc:e9:9c:41:6f:7d:fe:ee:b4:ab:f4:16:ac:c0:
a8:dc:9d:bc:76:29:61:c0:70:86:80:89:f0:76:5c:
2b:dd:7b:b9:60:6b:c1:d0:c2:ff:0a:cc:3d:20:b3:
29:b6:70:d2:76:fa:b8:1f:c7:26:13:77:46:bc:be:
29:d6:28:43:88:49:d2:37:32:51:4b:5e:e5:af:96:
07:ce:97:11:2c:dc:f4:cc:2e:ac:fd:e4:d3:c8:5b:
ab:80:63:46:13:98:6a:7f:8b:9f:9d:a0:57:e5:05:
7d:c9:e8:00:fa:e2:f0:30:6b:fe:7a:0f:c5:17:3b:
76:01:92:45:79:aa:91:bc:4a:4b:d5:44:c3:c3:34:
7a:19:46:76:56:62:96:d8:df:c6:b0:fd:dd:4d:9d:
fb:20:57:5a:56:c7:68:6c:5b:28:af:f4:b5:2f:af:
c3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BD:75:CE:E8:C3:9D:72:9E:EB:05:3A:2B:97:0B:A4:F2:43:18:86
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-b11zujDnXKe6wU6K5cLpPJDGIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.158.0/24
77.90.160.0/22
77.90.165.0/24
77.90.169.0-77.90.172.255
77.90.175.0/24
77.90.182.0/24
77.90.186.0/24
213.209.137.0/24
213.209.139.0/24
213.209.141.0/24
213.209.152.0/22
Signature Algorithm: sha256WithRSAEncryption
46:01:0b:4d:ae:e6:3f:77:a8:c7:2c:a8:38:2d:1b:1b:67:55:
bb:8b:a9:4c:eb:c2:94:1e:c7:5b:d0:31:66:7e:d4:b2:7f:15:
9c:23:05:e4:f5:54:14:f5:e5:28:96:e2:4c:0f:ab:c4:52:07:
d6:ee:ca:a7:4c:5b:e6:e1:d5:61:b1:01:0c:27:12:f6:c1:2f:
e7:f7:92:a6:d2:cd:54:c0:c6:39:41:56:a0:94:1b:27:cb:32:
ba:f7:0e:59:72:c0:b3:34:53:ca:9f:ea:76:84:c6:ac:1b:48:
c8:ba:86:5a:48:cd:a1:a8:43:a8:a6:97:a8:0a:23:fb:10:e9:
de:aa:0c:b8:96:c3:8c:92:32:6e:a1:2f:ba:9f:43:eb:b6:9d:
08:08:d7:85:bb:06:66:87:08:fe:0d:9c:d5:40:aa:25:79:2b:
75:fd:d2:56:f7:d7:89:8c:bf:df:67:e2:e4:72:b4:98:60:9a:
42:cc:a0:ac:66:15:61:af:98:3a:84:2c:75:21:22:cb:11:40:
f1:88:8a:c9:ba:d0:43:d8:bc:31:89:8f:b8:95:a7:1c:72:d4:
a0:51:f8:37:48:cb:b9:2f:79:cf:de:7c:59:7f:af:4f:41:bf:
2a:5d:34:0e:d2:cd:46:c7:ce:84:f8:fb:1c:f9:ee:bf:11:01:
f0:ed:16:f7
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgISAYN6j9Js24c/98Uy7Iom9BTHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjIwOTI2MTYwOTQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWJkNzVjZWU4YzM5ZDcyOWVlYjA1M2EyYjk3MGJhNGYyNDMxODg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAWm4gXrs9hgaEGBbmZaHPOTIV2a
wRxdgpFFIyT6rCJhBOGyXF6fcwFRDsSYwBOkgcbzqek2VM0u+Fewf08uw0kZIQgI
tB06AcfHcrExi1wQCfKaC0tTBrPo/OmcQW99/u60q/QWrMCo3J28dilhwHCGgInw
dlwr3Xu5YGvB0ML/Csw9ILMptnDSdvq4H8cmE3dGvL4p1ihDiEnSNzJRS17lr5YH
zpcRLNz0zC6s/eTTyFurgGNGE5hqf4ufnaBX5QV9yegA+uLwMGv+eg/FFzt2AZJF
eaqRvEpL1UTDwzR6GUZ2VmKW2N/GsP3dTZ37IFdaVsdobFsor/S1L6/DjQIDAQAB
o4ICTjCCAkowHQYDVR0OBBYEFPm9dc7ow51ynusFOiuXC6TyQxiGMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvMS1iMTF6dWpEblhLZTZ3VTZLNWNMcFBKREdJWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEw
MS8xL08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBjBggrBgEFBQcBBwEB/wRUMFIwUAQCAAEwSgMEAE1angME
Ak1aoAMEAE1apTAMAwQATVqpAwQATVqsAwQATVqvAwQATVq2AwQATVq6AwQA1dGJ
AwQA1dGLAwQA1dGNAwQC1dGYMA0GCSqGSIb3DQEBCwUAA4IBAQBGAQtNruY/d6jH
LKg4LRsbZ1W7i6lM68KUHsdb0DFmftSyfxWcIwXk9VQU9eUoluJMD6vEUgfW7sqn
TFvm4dVhsQEMJxL2wS/n95Km0s1UwMY5QVaglBsnyzK69w5ZcsCzNFPKn+p2hMas
G0jIuoZaSM2hqEOoppeoCiP7EOneqgy4lsOMkjJuoS+6n0Prtp0ICNeFuwZmhwj+
DZzVQKoleSt1/dJW99eJjL/fZ+LkcrSYYJpCzKCsZhVhr5g6hCx1ISLLEUDxiIrJ
utBD2LwxiY+4laccctSgUfg3SMu5L3nP3nxZf69PQb8qXTQO0s1Gx86E+Psc+e6/
EQHw7Rb3
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org