Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/3Id5BC89HORER2SoVRo1ICDVYtc.roa
File: 3Id5BC89HORER2SoVRo1ICDVYtc.roa (raw, json)
Hash identifier: B9CKlLl8l25nUoVRGoM/MvPVX+SkV8tOlNAF4GGevWs=
Subject key identifier: DC:87:79:04:2F:3D:1C:E4:44:47:64:A8:55:1A:35:20:20:D5:62:D7
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01844DBC3752D11CBB56761B31A1458BB238
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/3Id5BC89HORER2SoVRo1ICDVYtc.roa
Signing time: Sun 06 Nov 2022 16:18:11 +0000
ROA not before: Sun 06 Nov 2022 16:18:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 213.209.136.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:4d:bc:37:52:d1:1c:bb:56:76:1b:31:a1:45:8b:b2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Nov 6 16:18:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc8779042f3d1ce4444764a8551a352020d562d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7b:c7:e6:e6:7b:cb:6f:b9:72:4f:a7:00:46:
b7:13:9e:1d:17:32:97:57:9d:97:96:66:3e:21:aa:
7c:9e:17:81:46:f1:dc:35:4a:43:9f:f3:7f:dc:39:
c4:3b:35:98:42:9d:67:2b:44:9a:12:e6:b8:6b:cf:
bc:9b:70:80:e1:5a:da:0f:3e:29:3b:4b:c1:b0:85:
5c:df:d7:21:40:31:1f:96:7a:33:83:9e:44:eb:03:
7e:85:e8:d2:c1:cd:b5:07:da:b5:b1:2a:09:55:ee:
f5:5c:34:20:9a:61:98:93:a7:ec:f5:1e:63:ca:17:
81:16:b6:b2:65:40:94:69:8e:25:26:89:5e:46:ed:
c4:ba:f9:19:e3:b7:ce:47:93:07:31:11:d1:16:c0:
fc:02:3b:10:41:c3:9f:b8:94:47:7f:1b:4d:9c:c1:
6f:76:c5:2a:5e:b0:8a:e6:ec:3f:cd:ba:ad:c0:3e:
7a:bb:8e:0a:b0:ab:c2:e9:06:25:b4:05:b1:00:59:
77:09:bb:86:56:8a:35:e2:1f:54:d5:74:ba:ae:76:
20:0c:b9:1f:46:92:65:29:2e:b9:dd:e5:eb:25:df:
64:f0:98:f7:d0:4f:cb:87:11:ee:fe:46:ce:dc:46:
57:55:89:b6:d5:52:43:3f:17:17:d9:01:ec:97:0f:
01:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:87:79:04:2F:3D:1C:E4:44:47:64:A8:55:1A:35:20:20:D5:62:D7
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/3Id5BC89HORER2SoVRo1ICDVYtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.185.0/24
213.209.136.0/24
213.209.146.0/24
Signature Algorithm: sha256WithRSAEncryption
28:fc:01:d6:f5:ae:64:46:15:a5:08:fc:5f:19:08:e4:1a:fc:
77:6a:67:e7:ad:ad:4e:af:e6:be:0a:4e:0b:48:d6:1f:da:8a:
80:94:bf:71:64:d7:c6:b2:92:4e:b3:b9:a6:20:ef:08:e2:2a:
27:15:94:68:e8:ca:2d:6c:49:6f:08:dd:93:43:aa:3d:b2:7b:
26:51:41:71:0b:dc:49:35:89:b4:17:96:13:3b:60:49:d0:2a:
56:51:a7:a7:c3:96:d2:8d:13:a6:7b:6f:83:6e:28:80:79:35:
69:79:b2:3a:ba:a6:fe:c9:5d:f5:d3:b3:4a:27:83:d7:e5:8f:
19:83:0b:6d:ac:4f:fa:4c:e7:af:a1:fe:15:c8:98:8a:fa:63:
26:37:d0:af:d7:d0:e5:d3:24:bc:e7:0e:5f:b2:1e:4c:65:ca:
22:24:a3:a7:15:c2:f3:fe:0a:5a:72:dc:96:ea:8a:92:6f:47:
de:2b:d8:b8:d6:15:18:e0:f0:3b:c3:43:28:b4:b3:0e:c7:1c:
4a:f1:3c:11:c3:b8:08:05:1e:2b:c7:cd:5f:90:03:bf:0a:de:
e7:dc:a4:6f:35:63:a3:ab:87:8f:af:3f:a9:85:d0:48:e4:60:
54:6b:2b:1d:c0:c6:44:91:d1:a4:dd:76:81:1b:c2:79:47:49:
a0:81:37:55
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYRNvDdS0Ry7VnYbMaFFi7I4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjIxMTA2MTYxODExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzg3NzkwNDJmM2QxY2U0NDQ0NzY0YTg1NTFhMzUyMDIwZDU2MmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3vH5uZ7y2+5ck+nAEa3E54dFzKX
V52XlmY+Iap8nheBRvHcNUpDn/N/3DnEOzWYQp1nK0SaEua4a8+8m3CA4VraDz4p
O0vBsIVc39chQDEflnozg55E6wN+hejSwc21B9q1sSoJVe71XDQgmmGYk6fs9R5j
yheBFrayZUCUaY4lJoleRu3EuvkZ47fOR5MHMRHRFsD8AjsQQcOfuJRHfxtNnMFv
dsUqXrCK5uw/zbqtwD56u44KsKvC6QYltAWxAFl3CbuGVoo14h9U1XS6rnYgDLkf
RpJlKS653eXrJd9k8Jj30E/LhxHu/kbO3EZXVYm21VJDPxcX2QHslw8BPQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNyHeQQvPRzkREdkqFUaNSAg1WLXMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvM0lkNUJDODlIT1JFUjJTb1ZSbzFJQ0RWWXRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATVq5AwQA
1dGIAwQA1dGSMA0GCSqGSIb3DQEBCwUAA4IBAQAo/AHW9a5kRhWlCPxfGQjkGvx3
amfnra1Or+a+Ck4LSNYf2oqAlL9xZNfGspJOs7mmIO8I4ionFZRo6MotbElvCN2T
Q6o9snsmUUFxC9xJNYm0F5YTO2BJ0CpWUaenw5bSjROme2+DbiiAeTVpebI6uqb+
yV3107NKJ4PX5Y8ZgwttrE/6TOevof4VyJiK+mMmN9Cv19Dl0yS85w5fsh5MZcoi
JKOnFcLz/gpactyW6oqSb0feK9i41hUY4PA7w0MotLMOxxxK8TwRw7gIBR4rx81f
kAO/Ct7n3KRvNWOjq4ePrz+phdBI5GBUaysdwMZEkdGk3XaBG8J5R0mggTdV
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org