Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/7GkzUrMQIpTTt__s8KT1S_OubY8.roa
File: 7GkzUrMQIpTTt__s8KT1S_OubY8.roa (raw, json)
Hash identifier: eJeOyuGixa0lOA4UNOk9ztTZwu+dDPgI4gnVrCgJCMU=
Subject key identifier: EC:69:33:52:B3:10:22:94:D3:B7:FF:EC:F0:A4:F5:4B:F3:AE:6D:8F
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01850B1E51D1E1709969F01BA33088262F3F
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/7GkzUrMQIpTTt__s8KT1S_OubY8.roa
Signing time: Tue 13 Dec 2022 10:53:34 +0000
ROA not before: Tue 13 Dec 2022 10:53:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.151.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.156.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
77.90.184.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.151.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0b:1e:51:d1:e1:70:99:69:f0:1b:a3:30:88:26:2f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Dec 13 10:53:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec693352b3102294d3b7ffecf0a4f54bf3ae6d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3c:ca:5c:92:93:9b:fa:e3:b1:36:4a:a2:a6:
2d:b2:d9:84:f4:0c:de:86:f7:60:4d:18:1e:70:7f:
bd:03:a5:18:d9:5e:7e:0b:fd:22:f2:f0:a8:6e:f9:
cb:aa:f6:c4:15:54:5f:6c:4f:52:f8:19:37:90:f6:
7f:63:c9:73:a7:29:7c:1b:ab:0d:f1:9c:19:6a:e7:
71:b2:42:43:02:37:1f:c2:01:8c:ad:33:12:3a:a6:
13:70:e2:83:70:8b:17:99:43:ba:31:21:c1:a1:74:
d4:88:17:e8:5c:33:91:a7:74:d1:b2:47:c9:de:5f:
7c:1f:88:40:ad:25:62:08:f2:aa:0f:23:94:67:00:
62:de:b6:a4:bb:f4:dc:01:45:42:88:5d:59:2e:8f:
db:0e:ee:14:5c:51:d7:5b:0a:2e:99:77:b7:5a:67:
bc:5b:2b:a0:63:6e:e8:ca:e6:ee:a0:83:a9:41:8c:
fe:33:c0:97:84:46:27:19:87:21:60:2a:53:48:e2:
60:e9:96:e9:91:3b:64:0c:0b:a9:05:f1:bd:2b:ae:
91:7e:a5:52:7e:24:e7:c4:d0:a3:66:e1:3f:d0:d8:
c9:bc:17:88:6c:ba:c8:7d:3e:2c:26:24:7a:cf:55:
ed:de:0b:91:48:6f:30:5c:08:27:39:82:ac:8c:b6:
4f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:69:33:52:B3:10:22:94:D3:B7:FF:EC:F0:A4:F5:4B:F3:AE:6D:8F
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/7GkzUrMQIpTTt__s8KT1S_OubY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.151.0/24
77.90.153.0/24
77.90.156.0/24
77.90.184.0/23
77.90.188.0/24
185.230.14.0/24
213.209.136.0/24
213.209.138.0/24
213.209.143.0/24
213.209.146.0/24
213.209.150.0/23
213.209.156.0/23
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
1f:ac:ed:e8:97:b9:6b:80:53:2c:d4:ec:fd:e2:02:6c:af:00:
7b:46:ef:b7:f2:09:3d:6a:de:9a:37:45:4b:7a:ac:1b:3f:10:
e5:9d:18:d8:6c:b8:21:dc:8b:3c:24:31:fb:98:86:0d:8d:63:
d7:84:4f:93:97:17:59:9a:60:02:ff:8c:71:87:72:f1:a3:20:
69:1e:e9:03:95:a9:29:e8:a8:f6:2c:c5:41:ef:3b:68:5e:9c:
b2:89:56:9b:2e:1e:c3:f4:9d:18:09:cd:ac:25:c8:1e:59:c0:
87:5d:a2:96:4b:8c:cd:01:c6:c2:7f:39:1c:0a:42:38:fc:6d:
49:43:50:6c:00:e7:d3:ed:db:50:91:98:21:75:d1:2a:c8:a4:
5c:a6:d3:9b:04:64:64:30:68:9c:7e:d4:0c:b8:b0:bf:8e:2d:
4e:8c:43:a7:8f:3e:2d:24:fe:c9:75:23:cd:89:45:f2:ea:21:
2a:8d:35:96:63:56:b4:34:7d:d3:c9:2e:90:51:68:b2:bb:25:
be:cc:ff:3b:7a:35:1b:48:af:07:8b:79:b9:a6:f8:30:3a:8a:
7e:bd:b3:1e:71:fc:41:62:27:37:de:b8:23:0f:83:18:3a:17:
d5:d3:84:0e:3d:af:11:e3:f4:ec:cc:6f:55:26:21:6a:34:ba:
cf:ed:5f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:22 2023 by rpki-client on console-fra.rpki-client.org