Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1BR7vhAjGMiUuf4tND-EMIoZ9BQ.roa
File: 1BR7vhAjGMiUuf4tND-EMIoZ9BQ.roa (raw, json)
Hash identifier: rLT75wkxs74dwbIZKQ60niBA3yjIWRU1NDnC7bPs3v0=
Subject key identifier: D4:14:7B:BE:10:23:18:C8:94:B9:FE:2D:34:3F:84:30:8A:19:F4:14
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 091E5656
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1BR7vhAjGMiUuf4tND-EMIoZ9BQ.roa
Signing time: Sat 14 May 2022 10:36:41 +0000
ROA not before: Sat 14 May 2022 10:36:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
185.230.12.0/24 maxlen: 24
77.90.191.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.152.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.155.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
77.90.164.0/24 maxlen: 24
77.90.178.0/24 maxlen: 24
77.90.180.0/24 maxlen: 24
77.90.181.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
213.209.144.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152983126 (0x91e5656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: May 14 10:36:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4147bbe102318c894b9fe2d343f84308a19f414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:db:f2:29:ab:b9:2a:15:c7:8d:90:ac:eb:
0d:61:68:76:a7:00:27:96:64:ea:fb:3e:02:23:9d:
f8:bf:64:f0:0a:74:10:ee:05:a7:82:33:9e:18:e4:
19:3b:a3:1f:62:50:b6:e6:26:f4:68:9f:a8:43:46:
93:d6:35:25:8e:40:61:bb:42:dd:6b:51:55:b9:f0:
01:1d:fc:7d:cf:32:7d:73:64:6b:08:31:1b:8c:93:
4d:ba:f3:c8:e6:5d:0e:22:6f:2a:20:0c:3d:66:23:
61:33:6d:a3:b6:96:a5:18:c0:30:b9:94:60:4d:c7:
56:cf:73:bb:f6:7b:04:6a:0c:ae:d3:bf:7b:59:8a:
69:76:b6:46:16:a9:2e:d1:3c:a8:8d:3d:fa:03:0b:
09:0d:a4:98:33:5f:b1:70:fc:84:bd:1d:0d:fe:bc:
0d:58:28:5a:02:8d:99:f0:1a:88:7f:38:97:4e:4b:
f6:3c:11:7b:f1:0e:e8:c0:ba:29:5b:af:34:35:c7:
cc:26:1b:a8:b9:c5:ed:f6:4a:26:64:2e:e9:88:e8:
6c:6f:0b:df:a1:b9:bf:c6:9a:27:d4:d6:b4:b0:d4:
35:53:6c:ba:72:47:71:31:97:8b:28:a3:5e:d9:01:
95:67:71:20:f6:fc:e2:94:5c:41:2f:92:f2:21:7c:
17:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:14:7B:BE:10:23:18:C8:94:B9:FE:2D:34:3F:84:30:8A:19:F4:14
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1BR7vhAjGMiUuf4tND-EMIoZ9BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.140.0/24
77.90.142.0-77.90.148.255
77.90.152.0/24
77.90.154.0/23
77.90.164.0/24
77.90.178.0/24
77.90.180.0/23
77.90.191.0/24
185.230.12.0/23
213.209.130.0/24
213.209.133.0/24
213.209.136.0/24
213.209.138.0/24
213.209.144.0/24
213.209.146.0/24
213.209.150.0/24
213.209.156.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
69:1e:10:2c:d7:77:30:56:c6:11:28:f5:e6:5e:38:da:4f:58:
a6:9c:e9:d3:a4:81:8b:d9:40:a4:71:e5:0a:f9:df:79:75:7d:
2a:62:91:e4:4b:60:2d:20:54:3b:fb:be:2a:be:f1:1d:af:8d:
08:19:1b:b5:26:d1:17:02:7c:7e:1d:96:ee:37:37:6e:c3:c8:
d6:90:6e:93:d6:aa:12:b8:ef:ac:e4:b0:ca:85:85:5d:d5:82:
dd:2b:02:5c:e4:d8:bf:d4:db:98:75:56:02:58:c2:6d:4f:d9:
43:33:2f:25:6f:9c:d9:d5:11:0c:55:34:e6:45:6d:42:fe:89:
f5:e9:ae:72:14:49:a0:c4:bc:53:47:3a:a2:2c:d1:a6:bb:af:
2c:48:b5:e8:c7:b2:b0:14:2b:d4:48:37:81:98:0e:55:9d:7b:
da:84:10:25:ff:4d:e4:02:79:f0:bf:e5:e5:cb:a8:74:b7:8e:
be:32:87:8b:e0:15:23:de:9b:19:88:70:93:6a:dd:0e:0a:09:
96:c2:2e:82:62:e8:50:e6:c7:27:13:18:d4:ca:ba:28:97:15:
ca:20:4f:d8:6e:0a:89:f1:f5:85:60:d6:30:09:43:01:bf:dc:
f9:1d:79:3d:65:dd:49:2a:aa:38:08:1e:51:81:97:de:c1:ac:
b9:e6:b4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:02 2024 by rpki-client on console-fra.rpki-client.org