Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/8cQDOpxgkjhQ96FLSYkpTqiUfXg.roa
File: 8cQDOpxgkjhQ96FLSYkpTqiUfXg.roa (raw, json)
Hash identifier: MnrmJ4s11+rVUj9G8zfkXetLx2L4buBCKGCNapUSPUg=
Subject key identifier: F1:C4:03:3A:9C:60:92:38:50:F7:A1:4B:49:89:29:4E:A8:94:7D:78
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01849C009FAF6068BF3D486B615433A72A67
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/8cQDOpxgkjhQ96FLSYkpTqiUfXg.roa
Signing time: Mon 21 Nov 2022 21:03:17 +0000
ROA not before: Mon 21 Nov 2022 21:03:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.139.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.156.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
77.90.178.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
77.90.184.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.151.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9c:00:9f:af:60:68:bf:3d:48:6b:61:54:33:a7:2a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Nov 21 21:03:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1c4033a9c60923850f7a14b4989294ea8947d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:c0:44:a8:ce:bd:59:51:66:5e:bb:2d:35:
62:eb:4e:74:75:98:39:be:23:21:62:85:36:30:ff:
0f:fd:20:ba:6a:d2:9b:f2:ea:53:94:de:ab:36:fa:
5a:a8:0f:22:cb:ea:3b:b4:3d:bc:02:ee:31:3f:25:
33:b7:ab:a3:97:37:92:ed:aa:15:13:16:7a:85:9a:
91:65:03:ed:ad:05:fa:af:81:1e:df:4c:51:32:1e:
51:bc:e5:1a:d9:68:09:d8:2e:aa:b0:bc:fa:ed:f7:
f6:3a:68:f2:b1:60:9f:a1:27:34:bc:49:d5:d8:88:
ef:c3:0e:08:d9:a0:4f:74:18:f1:86:bb:10:01:7b:
19:4c:ea:3a:b3:2d:7a:fb:d3:64:af:10:a2:8f:3d:
cd:79:a0:cd:d9:ef:8d:9d:58:57:01:a1:ef:69:d5:
e3:76:ca:a2:6d:38:05:14:73:49:f8:da:e5:f2:cf:
78:11:33:b6:80:6b:a8:cb:7e:4c:c5:ac:5b:d8:6a:
d4:e5:3b:18:68:b5:62:48:e0:55:79:9e:ad:ad:5b:
dc:20:71:0f:96:b5:d6:d8:72:e7:61:60:8c:fb:fb:
59:af:27:19:0a:47:aa:2b:c2:da:3a:ca:89:01:c8:
41:2d:56:d3:41:5b:3f:2f:de:10:69:65:f2:de:b4:
3b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C4:03:3A:9C:60:92:38:50:F7:A1:4B:49:89:29:4E:A8:94:7D:78
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/8cQDOpxgkjhQ96FLSYkpTqiUfXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.139.0-77.90.140.255
77.90.142.0-77.90.148.255
77.90.154.0/24
77.90.156.0/24
77.90.178.0/24
77.90.184.0/23
77.90.188.0/24
185.230.14.0/24
213.209.136.0/24
213.209.138.0/24
213.209.143.0/24
213.209.146.0/24
213.209.149.0/24
213.209.151.0/24
213.209.156.0/23
213.209.159.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
21:13:1f:51:ee:5b:84:9d:8f:6c:15:a7:a7:99:1e:31:3d:c2:
7d:92:c7:a1:b9:15:57:54:5b:94:d7:ca:f1:89:e9:64:ce:18:
df:b3:99:3f:8b:4d:62:eb:a0:eb:bc:e8:38:03:ff:3b:f3:52:
f3:17:b2:31:8b:07:16:53:4a:f1:5a:4d:dc:ce:1b:10:d2:f3:
71:2a:5a:97:b5:b8:e1:98:d3:86:9b:bc:6e:57:39:c0:15:2f:
6c:31:1e:b1:b6:d3:ec:8f:f9:70:f4:cf:f4:54:94:65:18:b5:
21:20:00:b0:34:ab:78:31:29:01:81:0d:fd:72:93:af:f0:85:
f6:6f:5b:4c:dd:c2:ff:e5:30:f1:d6:60:ee:6a:20:4a:be:42:
94:2b:7a:93:c6:9a:35:c1:a8:22:41:1a:cd:e5:75:ec:10:b8:
24:af:8b:cd:26:ef:8a:db:2c:e4:d2:8f:95:a1:fb:5b:21:81:
a1:90:53:36:2c:26:76:a5:5e:74:5a:21:73:ce:0c:31:1f:17:
f6:af:95:9b:bd:6e:bc:72:63:b8:b3:f0:e8:b2:45:ff:73:72:
75:fb:e9:1c:24:35:fb:20:c5:5f:ca:68:fb:86:ce:a3:48:8d:
e1:a1:22:fb:d4:c4:b4:0f:6d:d2:7a:45:73:78:bc:76:8a:9d:
16:53:1a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:22 2023 by rpki-client on console-fra.rpki-client.org