Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/2o6oLXs8W0J5bumwDJt72-KUcec.roa
File: 2o6oLXs8W0J5bumwDJt72-KUcec.roa (raw, json)
Hash identifier: R0Pycxl6bSDtaE1VDFtfTh1IB5Cvr3iDxEPVmVxBMAw=
Subject key identifier: DA:8E:A8:2D:7B:3C:5B:42:79:6E:E9:B0:0C:9B:7B:DB:E2:94:71:E7
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01822AA79A23C2079AB2164EDDA611CBD9E6
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/2o6oLXs8W0J5bumwDJt72-KUcec.roa
Signing time: Sat 23 Jul 2022 10:43:23 +0000
ROA not before: Sat 23 Jul 2022 10:43:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.12.0/24 maxlen: 24
77.90.191.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.139.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.149.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.157.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
77.90.173.0/24 maxlen: 24
77.90.179.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.144.0/24 maxlen: 24
213.209.147.0/24 maxlen: 24
213.209.151.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.158.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:2a:a7:9a:23:c2:07:9a:b2:16:4e:dd:a6:11:cb:d9:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 23 10:43:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da8ea82d7b3c5b42796ee9b00c9b7bdbe29471e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:bb:2e:82:cd:db:95:4c:cb:e2:8f:ae:b7:52:
b3:09:58:bf:88:e6:61:40:53:ee:8b:57:96:9b:ae:
03:1d:a7:68:17:72:c2:23:66:69:ed:67:e5:9a:71:
9b:75:49:51:85:c2:a4:26:c5:26:42:cd:58:c6:99:
30:57:55:ab:65:df:cc:0f:fe:c0:4a:76:c7:1b:db:
fc:47:68:04:e7:26:7d:87:ec:1a:b6:c7:67:ef:da:
09:ba:24:7e:3f:28:10:82:9a:08:bf:30:b9:da:fe:
9b:79:65:cb:b0:6c:b6:f5:64:2b:5e:aa:49:82:1d:
40:e5:bd:02:49:bf:68:1e:ba:54:41:ac:09:28:e0:
8b:40:c8:ba:b6:74:4d:99:2c:27:24:eb:f6:f8:f8:
7c:fb:7e:fa:94:c3:3c:3a:5a:fe:33:8b:15:cc:f6:
d1:c1:8b:32:46:d7:55:fa:3f:d0:e9:1f:b9:59:bb:
1b:f0:c7:87:91:d1:8f:00:38:b1:77:53:17:de:63:
1e:ae:bd:e5:38:8b:1b:f6:07:36:c0:d0:9f:05:4c:
e5:f8:2d:0a:81:a3:78:b2:fe:30:0e:b9:78:e0:78:
7c:c9:75:18:51:bf:fe:28:3d:e6:68:58:c2:05:5c:
46:76:b5:41:00:46:14:14:9f:3b:fb:15:07:8c:7e:
83:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8E:A8:2D:7B:3C:5B:42:79:6E:E9:B0:0C:9B:7B:DB:E2:94:71:E7
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/2o6oLXs8W0J5bumwDJt72-KUcec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.140.255
77.90.142.0-77.90.149.255
77.90.153.0-77.90.154.255
77.90.157.0/24
77.90.173.0/24
77.90.179.0/24
77.90.188.0/24
77.90.191.0/24
185.230.12.0/24
213.209.129.0-213.209.130.255
213.209.133.0-213.209.134.255
213.209.138.0/24
213.209.144.0/23
213.209.147.0/24
213.209.149.0/24
213.209.151.0/24
213.209.157.0-213.209.158.255
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
a9:7d:c2:7d:c8:1c:f2:a2:59:f1:20:49:40:99:ee:c8:16:bd:
bf:74:c5:e8:76:fe:28:fe:cd:2e:52:65:ea:9c:a9:23:02:5e:
24:f2:a1:d4:f8:c3:a7:12:33:19:d6:a2:09:b1:a9:40:28:9e:
68:c7:43:5e:a4:f9:0a:73:21:89:e3:95:f1:92:49:79:12:27:
66:69:d5:63:4c:fb:74:6c:07:cf:3b:3b:2a:ef:b2:6a:2a:43:
ce:e7:f9:03:8d:48:bf:3e:d0:df:9e:e4:9a:82:e4:19:1f:0f:
d9:7d:b5:b2:a1:b2:d5:98:0d:0a:2b:b2:f3:fd:e7:36:b4:e1:
25:16:c7:2b:e7:a1:4c:ac:c4:7d:1a:b2:c8:8b:d1:61:c5:e2:
ff:ea:f2:dd:e1:82:1f:c8:bb:ce:c0:0f:fc:24:0e:6d:c3:a6:
77:b2:0a:42:9b:f0:9f:39:04:fa:29:75:c4:1c:cd:41:04:b4:
07:c6:49:b8:c8:d4:0a:93:32:c0:c1:35:6a:9f:d2:4a:85:dc:
a8:52:4c:2e:9e:17:d0:17:8b:1b:e4:91:75:56:0e:92:03:4b:
d2:0d:db:9c:00:31:52:aa:11:8b:74:54:c8:d1:71:24:e1:01:
96:cb:6e:07:88:bc:1a:b0:3e:57:68:8b:7d:d3:7c:c4:0d:99:
a5:5d:89:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:24 2024 by rpki-client on console-ams.rpki-client.org