Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/5JXOCi0R50_Oc90QoGS09UScxIw.roa
File: 5JXOCi0R50_Oc90QoGS09UScxIw.roa (raw, json)
Hash identifier: ryDFP+lBgHt3KiB1nPtHyWd4ONCgdKgeU9keTsJNZHk=
Subject key identifier: E4:95:CE:0A:2D:11:E7:4F:CE:73:DD:10:A0:64:B4:F5:44:9C:C4:8C
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 07BF1CD7
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/5JXOCi0R50_Oc90QoGS09UScxIw.roa
Signing time: Mon 07 Mar 2022 20:23:11 +0000
ROA not before: Mon 07 Mar 2022 20:23:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 77.90.191.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
77.90.152.0/24 maxlen: 24
77.90.149.0/24 maxlen: 24
185.230.12.0/24 maxlen: 24
77.90.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129965271 (0x7bf1cd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Mar 7 20:23:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e495ce0a2d11e74fce73dd10a064b4f5449cc48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:2a:29:22:fd:c6:6b:bb:e1:b1:8d:21:93:
95:09:eb:49:d5:40:77:6d:5f:44:06:eb:76:4b:f2:
35:b6:bd:36:21:04:52:57:be:d2:ef:e1:27:5e:e0:
f6:9e:ca:62:a2:fc:40:19:7c:f6:e0:7c:eb:7b:7a:
59:4a:ce:64:c0:57:4b:a1:2c:7c:ce:8b:2a:bd:8b:
b4:6e:c4:38:a2:8f:20:78:87:72:90:ef:59:ce:00:
8f:ec:26:b4:0f:ed:8f:2f:6a:e2:3e:f8:47:ff:6c:
38:87:28:db:3c:1b:4f:65:1a:b8:02:00:fd:26:f1:
05:f6:77:13:80:b1:f6:c0:63:02:49:09:07:81:52:
09:60:fa:b3:46:9d:5a:f5:3a:a0:25:35:1b:80:fe:
85:ad:b7:d0:23:63:37:e2:bb:76:d0:bc:dd:6f:bc:
db:d5:8e:bf:88:08:54:45:5d:aa:d8:0c:72:53:02:
01:d1:e1:38:2c:98:13:9e:cd:be:1e:25:47:bb:22:
03:da:be:98:73:63:c5:0a:cb:5f:f5:11:df:be:0d:
29:c4:9d:0e:25:64:04:ed:87:de:e4:28:c4:56:08:
ac:c1:68:8a:75:ea:b0:ba:a1:51:1b:ee:85:7c:f4:
6c:3e:05:96:58:2d:72:d2:ad:56:e5:1d:c2:55:76:
4d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:95:CE:0A:2D:11:E7:4F:CE:73:DD:10:A0:64:B4:F5:44:9C:C4:8C
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/5JXOCi0R50_Oc90QoGS09UScxIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.149.0/24
77.90.152.0/24
77.90.180.0/24
77.90.191.0/24
185.230.12.0/24
213.209.134.0/24
213.209.143.0/24
213.209.145.0/24
213.209.149.0/24
213.209.156.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:42:5b:45:8f:ac:be:de:71:90:7c:79:17:7c:04:eb:b5:91:
91:92:67:a5:7d:01:be:5b:c8:69:a1:12:c5:6a:85:a0:e9:1d:
69:91:71:25:fb:bd:42:a8:dc:11:d3:61:a4:ad:ee:c9:a0:f7:
54:09:cc:d0:54:9e:1b:11:4a:62:11:65:ad:27:c9:17:1a:50:
54:94:ae:62:9e:96:da:24:51:fd:38:00:0b:38:4b:4b:64:ad:
0f:3a:40:b0:bf:13:da:be:4d:cc:ac:f4:49:4c:cd:0d:42:5b:
32:0b:e1:83:87:9f:55:64:06:79:a4:55:17:06:50:dc:14:12:
e7:10:81:75:78:d8:83:af:23:bd:ef:0d:50:c4:e7:12:34:f0:
19:97:db:0c:53:cf:eb:4d:dd:0b:8c:41:30:87:e5:ac:71:f9:
1f:c8:44:36:e5:d0:ed:96:b1:48:20:32:7c:c4:2b:2a:2d:b5:
ea:16:cf:97:0d:44:35:e4:28:94:f0:8b:1a:e2:a1:f8:cd:13:
a7:53:14:7b:3f:e6:b3:64:c2:b3:b0:dd:eb:c4:56:39:61:e2:
ba:6e:73:42:82:d9:6b:eb:40:43:4a:0e:fc:a5:83:05:17:e1:
36:a4:fa:1a:62:4a:76:1a:f5:76:5d:27:aa:29:67:5b:87:6e:
a0:62:f9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:22 2023 by rpki-client on console-fra.rpki-client.org