Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/7cYNAoxa_X0l6J35C04vbtLHzvs.roa
File: 7cYNAoxa_X0l6J35C04vbtLHzvs.roa (raw, json)
Hash identifier: fbGaWhGS9KXMDesZ/GKwbuTtViVoMamfBPSh+si9xvw=
Subject key identifier: ED:C6:0D:02:8C:5A:FD:7D:25:E8:9D:F9:0B:4E:2F:6E:D2:C7:CE:FB
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018372125A30DD7B782EC8390E1F39EBB4BC
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/7cYNAoxa_X0l6J35C04vbtLHzvs.roa
Signing time: Sun 25 Sep 2022 00:35:48 +0000
ROA not before: Sun 25 Sep 2022 00:35:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.139.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1280:24::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:72:12:5a:30:dd:7b:78:2e:c8:39:0e:1f:39:eb:b4:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Sep 25 00:35:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edc60d028c5afd7d25e89df90b4e2f6ed2c7cefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:49:2a:25:f0:2f:b5:a1:4b:9b:47:c5:c0:
46:e7:81:10:c3:2a:c3:e3:45:6b:c7:8c:bf:87:5c:
57:4a:c0:f3:6a:10:40:27:55:1f:e8:59:33:78:3a:
56:cd:98:26:c2:10:70:ba:49:2f:3a:fa:15:be:7e:
60:67:3f:20:82:f4:14:4f:71:42:ff:6b:15:a7:ef:
b4:f1:56:69:61:2e:b8:56:98:a2:eb:a7:6a:90:6c:
95:a7:2b:44:03:22:c5:ac:e6:b6:78:27:ba:83:55:
21:93:13:31:db:ad:d9:21:df:ea:d3:e8:00:9f:28:
c4:1c:b5:5b:fc:0c:03:d8:8f:03:b9:7a:bb:61:21:
10:ce:84:e0:8e:29:9e:dc:d1:9e:10:58:69:53:33:
d3:3f:a6:33:c0:f7:d6:80:18:3c:91:95:24:f5:1f:
88:18:8d:e7:d0:86:ae:01:52:da:33:0a:11:21:36:
5d:24:49:40:8b:fc:2d:8b:80:6d:b4:de:8a:90:79:
4b:7c:97:53:fd:a8:0c:f2:46:ba:e0:b4:e7:a4:61:
e6:68:a7:1f:1b:68:47:8b:22:60:2a:78:12:13:0f:
b6:3c:e3:b4:e7:85:11:96:88:bb:17:9f:ac:12:52:
8d:c2:61:cd:45:ef:21:7b:ba:81:60:a8:9c:ff:8e:
43:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C6:0D:02:8C:5A:FD:7D:25:E8:9D:F9:0B:4E:2F:6E:D2:C7:CE:FB
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/7cYNAoxa_X0l6J35C04vbtLHzvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.139.0-77.90.140.255
77.90.142.0-77.90.148.255
77.90.153.0-77.90.154.255
77.90.188.0/24
213.209.130.0/24
213.209.138.0/24
213.209.143.0/24
213.209.145.0/24
213.209.149.0/24
213.209.157.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
6d:67:68:df:cb:d0:a4:18:10:b9:50:29:57:70:c1:1b:b1:32:
26:4a:5c:52:76:17:9e:12:1c:25:2a:f1:e6:fc:24:95:6d:37:
b9:90:93:0b:b8:b1:d0:09:88:70:be:ab:41:75:d4:98:66:a0:
59:c8:cd:27:dc:f8:6b:c6:6d:08:47:2f:d6:1e:6e:f7:7f:9a:
28:bd:f1:30:18:c1:10:aa:f9:d9:6e:96:6c:ed:b7:ed:8a:29:
3a:7f:65:8b:bf:c5:50:a9:30:d8:41:24:ba:8b:b5:87:57:3a:
89:79:f3:b4:d1:da:a4:d7:98:a6:17:8c:c1:53:15:d5:42:2a:
04:ab:f1:b8:b6:71:ba:c5:7d:31:ca:89:2a:49:e9:6d:c2:8f:
d9:a1:db:ec:07:09:1a:65:78:54:73:6a:98:1e:cf:83:c8:42:
2b:58:04:1f:2b:33:a8:13:f6:7a:1b:1e:9b:21:81:3f:44:67:
82:41:bf:00:1a:6e:5f:48:fa:2e:9f:de:2f:9f:63:81:9b:bb:
70:67:c4:b7:6e:33:2b:8d:03:46:c2:eb:23:11:7f:88:16:ad:
29:72:14:0d:29:da:c4:33:60:c3:bc:19:fa:82:8f:4c:75:fb:
cb:55:72:01:54:de:ce:ac:1b:92:c7:8d:57:be:ec:3f:0e:57:
76:f8:c5:70
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgISAYNyElow3Xt4Lsg5Dh8567S8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjIwOTI1MDAzNTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGM2MGQwMjhjNWFmZDdkMjVlODlkZjkwYjRlMmY2ZWQyYzdjZWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/JJKiXwL7WhS5tHxcBG54EQwyrD
40Vrx4y/h1xXSsDzahBAJ1Uf6FkzeDpWzZgmwhBwukkvOvoVvn5gZz8ggvQUT3FC
/2sVp++08VZpYS64Vpii66dqkGyVpytEAyLFrOa2eCe6g1UhkxMx263ZId/q0+gA
nyjEHLVb/AwD2I8DuXq7YSEQzoTgjime3NGeEFhpUzPTP6YzwPfWgBg8kZUk9R+I
GI3n0IauAVLaMwoRITZdJElAi/wti4BttN6KkHlLfJdT/agM8ka64LTnpGHmaKcf
G2hHiyJgKngSEw+2POO054URloi7F5+sElKNwmHNRe8he7qBYKic/45D6wIDAQAB
o4ICjDCCAogwHQYDVR0OBBYEFO3GDQKMWv19Jeid+QtOL27Sx877MB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvN2NZTkFveGFfWDBsNkozNUMwNHZidExIenZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjB2BAIAATBwMAwDBAdN
WoADBABNWoIwDAMEAk1ahAMEAU1aiDAMAwQATVqLAwQATVqMMAwDBAFNWo4DBABN
WpQwDAMEAE1amQMEAE1amgMEAE1avAMEANXRggMEANXRigMEANXRjwMEANXRkQME
ANXRlQMEANXRnTAUBAIAAjAOAwUAKgQpwgMFACoEKccwDQYJKoZIhvcNAQELBQAD
ggEBAG1naN/L0KQYELlQKVdwwRuxMiZKXFJ2F54SHCUq8eb8JJVtN7mQkwu4sdAJ
iHC+q0F11JhmoFnIzSfc+GvGbQhHL9Yebvd/mii98TAYwRCq+dlulmztt+2KKTp/
ZYu/xVCpMNhBJLqLtYdXOol587TR2qTXmKYXjMFTFdVCKgSr8bi2cbrFfTHKiSpJ
6W3Cj9mh2+wHCRpleFRzapgez4PIQitYBB8rM6gT9nobHpshgT9EZ4JBvwAabl9I
+i6f3i+fY4Gbu3BnxLduMyuNA0bC6yMRf4gWrSlyFA0p2sQzYMO8GfqCj0x1+8tV
cgFU3s6sG5LHjVe+7D8OV3b4xXA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:22 2023 by rpki-client on console-fra.rpki-client.org