Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/7vpFdssiXHvXuulVnLQrDz6mQIM.roa
File: 7vpFdssiXHvXuulVnLQrDz6mQIM.roa (raw, json)
Hash identifier: uV1DfEBWaLBxoQp4qhAFQo9TZ3rJLkFEfiAf6/9Hnto=
Subject key identifier: EE:FA:45:76:CB:22:5C:7B:D7:BA:E9:55:9C:B4:2B:0F:3E:A6:40:83
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 07773102
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/7vpFdssiXHvXuulVnLQrDz6mQIM.roa
Signing time: Thu 17 Feb 2022 07:08:19 +0000
ROA not before: Thu 17 Feb 2022 07:08:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 185.230.12.0/24 maxlen: 24
77.90.191.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
77.90.152.0/24 maxlen: 24
77.90.149.0/24 maxlen: 24
77.90.179.0/24 maxlen: 24
77.90.184.0/24 maxlen: 24
77.90.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125251842 (0x7773102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Feb 17 07:08:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eefa4576cb225c7bd7bae9559cb42b0f3ea64083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:a0:3b:01:01:18:cf:3e:f9:fa:84:84:12:
f9:8e:42:fc:c9:6a:e7:98:56:45:25:87:88:97:f0:
22:e0:f2:84:b7:da:a3:1e:55:cf:c1:62:a8:80:64:
0a:18:81:db:96:7d:f2:bc:f4:f7:d5:71:5a:05:fd:
c1:b1:28:d9:ef:a8:ae:60:25:e8:96:0a:db:29:53:
9d:9b:34:7e:4f:9b:1e:4d:bc:e7:d0:5b:01:31:2b:
75:f5:52:e5:78:bf:39:1b:65:03:02:44:2f:a3:1b:
e3:db:3f:6f:2b:11:e6:cc:da:98:44:d5:c1:c5:2c:
d3:94:4d:72:df:1c:9e:65:61:95:50:1c:d8:cc:5c:
e7:7f:ad:9a:f6:c3:dc:89:3f:bf:a5:2a:51:16:ff:
63:25:75:7c:77:37:c9:a1:27:63:25:56:a9:69:a7:
c8:1e:a8:84:a6:eb:88:ae:27:af:90:0b:6e:da:10:
7d:f8:c6:d9:58:a7:7b:7d:81:c7:38:da:17:d7:61:
11:f0:55:63:be:80:11:4a:ac:45:95:5e:77:22:43:
17:64:20:1d:5f:cd:85:97:17:58:7b:f1:2f:a7:31:
05:32:0c:d9:ff:4b:1c:ba:46:b5:61:05:c4:69:39:
e0:ae:2c:e1:a7:47:fa:83:be:a0:d2:93:4c:67:e8:
ba:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FA:45:76:CB:22:5C:7B:D7:BA:E9:55:9C:B4:2B:0F:3E:A6:40:83
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/7vpFdssiXHvXuulVnLQrDz6mQIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.149.0/24
77.90.152.0/24
77.90.179.0-77.90.180.255
77.90.184.0/24
77.90.191.0/24
185.230.12.0/24
213.209.129.0/24
213.209.134.0/24
213.209.143.0/24
213.209.145.0/24
213.209.149.0/24
213.209.156.0/23
Signature Algorithm: sha256WithRSAEncryption
af:b2:af:c6:27:7d:8d:d5:21:be:72:bd:11:1b:66:87:2f:58:
ff:92:73:cd:29:ac:0a:da:8b:20:47:8f:1d:84:c0:3f:8e:f4:
84:9c:2c:c8:93:36:ff:72:20:5f:ec:7a:d2:3e:40:74:73:8a:
51:e3:16:cd:c2:02:0d:0b:ee:f7:06:41:9e:b3:0c:e7:fd:49:
a3:a3:69:f4:bd:a5:a5:65:14:6b:35:2f:df:43:47:1f:67:58:
dd:2f:15:e8:e4:06:ef:78:1e:4f:b8:38:1c:da:e7:8a:c8:d0:
e6:73:12:e9:49:c0:ef:39:b1:ba:80:2c:14:ed:c8:bf:b5:57:
4d:2c:1a:47:23:85:fe:80:1c:f8:c1:5a:80:4a:c9:02:40:0d:
3a:d1:b7:e6:37:25:02:22:0e:c3:06:08:f2:f2:de:ee:1e:81:
d1:21:7d:79:13:ef:ce:fc:50:13:90:59:01:f8:ea:ec:32:b5:
ef:2c:e2:63:2c:28:b7:bf:84:90:86:4f:25:d6:3f:4b:35:3a:
d6:8b:e4:1c:ed:99:f6:7d:fe:d4:0a:24:96:07:0c:e7:ec:6c:
10:6f:57:30:1f:54:8d:2e:ab:b8:ff:92:e5:7c:ba:cf:db:63:
4c:46:7a:bf:74:53:a8:1d:3b:81:2f:a4:c2:7c:87:9a:12:3f:
79:2e:b2:9f
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgIEB3cxAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjQ3NmUxMmU4OTg3ZTViMzAyY2RjMjRiZGQ5ZGIzZmU4M2M4NDQ5MB4XDTIyMDIx
NzA3MDgxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZWVmYTQ1NzZjYjIy
NWM3YmQ3YmFlOTU1OWNiNDJiMGYzZWE2NDA4MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKk5oDsBARjPPvn6hIQS+Y5C/Mlq55hWRSWHiJfwIuDyhLfa
ox5Vz8FiqIBkChiB25Z98rz099VxWgX9wbEo2e+ormAl6JYK2ylTnZs0fk+bHk28
59BbATErdfVS5Xi/ORtlAwJEL6Mb49s/bysR5szamETVwcUs05RNct8cnmVhlVAc
2Mxc53+tmvbD3Ik/v6UqURb/YyV1fHc3yaEnYyVWqWmnyB6ohKbriK4nr5ALbtoQ
ffjG2Vine32BxzjaF9dhEfBVY76AEUqsRZVedyJDF2QgHV/NhZcXWHvxL6cxBTIM
2f9LHLpGtWEFxGk54K4s4adH+oO+oNKTTGfouqECAwEAAaOCAlMwggJPMB0GA1Ud
DgQWBBTu+kV2yyJce9e66VWctCsPPqZAgzAfBgNVHSMEGDAWgBQ7R24S6Jh+WzAs
3CS92ds/6DyESTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8x
Lzd2cEZkc3NpWEh2WHV1bFZuTFFyRHo2bVFJTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
ZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8xL08wZHVFdWlZZmxz
d0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBp
BggrBgEFBQcBBwEB/wRaMFgwVgQCAAEwUAMEAE1alQMEAE1amDAMAwQATVqzAwQA
TVq0AwQATVq4AwQATVq/AwQAueYMAwQA1dGBAwQA1dGGAwQA1dGPAwQA1dGRAwQA
1dGVAwQB1dGcMA0GCSqGSIb3DQEBCwUAA4IBAQCvsq/GJ32N1SG+cr0RG2aHL1j/
knPNKawK2osgR48dhMA/jvSEnCzIkzb/ciBf7HrSPkB0c4pR4xbNwgINC+73BkGe
swzn/Umjo2n0vaWlZRRrNS/fQ0cfZ1jdLxXo5AbveB5PuDgc2ueKyNDmcxLpScDv
ObG6gCwU7ci/tVdNLBpHI4X+gBz4wVqASskCQA060bfmNyUCIg7DBgjy8t7uHoHR
IX15E+/O/FATkFkB+OrsMrXvLOJjLCi3v4SQhk8l1j9LNTrWi+Qc7Zn2ff7UCiSW
Bwzn7GwQb1cwH1SNLqu4/5LlfLrP22NMRnq/dFOoHTuBL6TCfIeaEj95LrKf
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org