Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/8QKUgX-HuM1iCOvWE_TbhhP1P60.roa
File: 8QKUgX-HuM1iCOvWE_TbhhP1P60.roa (raw, json)
Hash identifier: A2G1wyrw01a9cwJL8ZZA+mYkmxmaBii4qTQRNAlpSuw=
Subject key identifier: F1:02:94:81:7F:87:B8:CD:62:08:EB:D6:13:F4:DB:86:13:F5:3F:AD
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 089E6F61
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/8QKUgX-HuM1iCOvWE_TbhhP1P60.roa
Signing time: Thu 14 Apr 2022 11:38:38 +0000
ROA not before: Thu 14 Apr 2022 11:38:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 77.90.191.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
77.90.150.0/24 maxlen: 24
77.90.152.0/24 maxlen: 24
77.90.149.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.155.0/24 maxlen: 24
77.90.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144600929 (0x89e6f61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 14 11:38:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f10294817f87b8cd6208ebd613f4db8613f53fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:0b:95:78:18:99:5d:ca:37:20:80:a5:63:
96:ef:5b:dc:4a:eb:49:c4:3f:49:b2:f6:39:84:01:
56:ee:76:8d:67:0f:01:90:bc:de:7b:26:89:a6:ce:
12:2e:aa:a8:5b:15:1c:a8:84:e0:47:49:b3:2d:36:
9d:3d:a1:96:aa:31:e8:99:91:b8:64:54:55:c5:c1:
0a:68:ab:29:a4:fc:92:7a:58:1f:2a:2e:fb:d6:fd:
d6:9c:80:51:f8:66:da:45:2e:b3:e0:c2:7a:9a:dd:
ec:da:94:5b:5e:47:5c:4e:45:81:4e:e0:02:de:26:
b4:69:e7:44:9c:d4:2e:17:cd:a9:3d:2e:dd:37:8c:
66:16:bb:03:36:4a:d0:1b:bf:e6:ad:c8:88:69:04:
6b:04:26:09:05:42:6d:d2:94:23:85:26:fd:c4:04:
2f:a3:95:c8:41:bb:a0:0b:35:49:4d:e4:d1:2b:7b:
a0:d8:f4:e3:f8:dd:01:5f:2c:e4:fa:cb:1a:42:ad:
6f:79:15:34:64:ed:00:47:72:bd:c9:32:42:c5:90:
fc:81:ad:9d:db:9b:72:01:73:ac:89:1c:18:a3:bc:
63:6f:60:ef:7b:36:2b:4a:53:64:c3:76:03:89:87:
0c:16:21:32:4f:a8:15:a3:26:78:3f:20:bc:47:f0:
a2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:02:94:81:7F:87:B8:CD:62:08:EB:D6:13:F4:DB:86:13:F5:3F:AD
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/8QKUgX-HuM1iCOvWE_TbhhP1P60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.149.0-77.90.150.255
77.90.152.0/22
77.90.179.0/24
77.90.191.0/24
213.209.129.0/24
213.209.133.0/24
213.209.143.0/24
213.209.145.0/24
213.209.149.0-213.209.150.255
Signature Algorithm: sha256WithRSAEncryption
63:64:0a:89:83:e0:5e:38:17:c7:73:bd:e3:f7:74:c6:c0:36:
df:f9:b3:83:43:30:0e:19:f5:f4:32:f5:41:fa:cb:5b:b3:da:
25:25:64:97:a5:26:60:4b:04:6a:f3:e6:aa:e5:19:65:26:a8:
9e:ec:d9:c7:4f:5b:a5:4e:48:c4:16:c9:54:17:35:17:8e:4e:
b2:19:f6:5a:91:bc:b0:d5:a4:58:ff:c1:3d:0d:67:38:41:9b:
80:a8:5e:5c:16:40:e2:b4:f1:2f:fe:ba:3e:b7:8c:27:77:2d:
c1:4f:a5:9c:d7:57:53:e3:cf:01:e2:1a:c6:82:94:d5:14:34:
d7:fb:f4:3a:cd:6b:a9:bf:98:10:57:7a:84:23:68:f9:d4:3b:
25:49:5d:06:6d:1b:65:65:42:b6:0a:e1:c0:76:31:c6:00:4e:
8d:b1:db:6a:98:2c:3b:cd:4c:52:83:06:6a:93:52:77:db:6b:
78:39:14:ac:d0:59:a8:27:e0:b0:74:c5:c3:1f:2e:fd:4f:30:
be:ed:33:26:e9:f9:65:1c:38:6c:0e:4c:fe:14:61:d8:93:c4:
f6:64:6f:ef:1a:32:0f:da:6e:cf:6c:5c:d1:b6:ce:46:a8:cc:
9d:bb:8d:27:2f:c9:7e:4d:e5:7b:2b:1b:05:4d:41:de:7f:26:
c8:07:f6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:22 2023 by rpki-client on console-fra.rpki-client.org