Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/98QaxgAjp12MB7a3DvAHc-LgxC8.roa
File: 98QaxgAjp12MB7a3DvAHc-LgxC8.roa (raw, json)
Hash identifier: cY7AoBk6UFmJyKvqwyPqCesDr7PD7f0yZg6u0dGY2YU=
Subject key identifier: F7:C4:1A:C6:00:23:A7:5D:8C:07:B6:B7:0E:F0:07:73:E2:E0:C4:2F
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0892BE76
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/98QaxgAjp12MB7a3DvAHc-LgxC8.roa
Signing time: Wed 13 Apr 2022 11:18:52 +0000
ROA not before: Wed 13 Apr 2022 11:18:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 77.90.191.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
77.90.150.0/24 maxlen: 24
77.90.152.0/24 maxlen: 24
77.90.149.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.155.0/24 maxlen: 24
77.90.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143834742 (0x892be76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 13 11:18:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7c41ac60023a75d8c07b6b70ef00773e2e0c42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6d:43:45:d2:f6:9a:cb:49:77:b7:d1:ab:97:
56:70:e0:05:7b:31:e6:67:e4:ba:01:21:01:ca:19:
db:e2:e6:aa:b0:13:1b:9a:f4:91:31:1f:5e:eb:c7:
08:07:15:43:66:6d:82:dc:d4:5e:00:32:3b:c0:be:
bf:92:be:27:25:92:c5:1e:5c:0b:d2:1c:ca:52:8b:
53:cb:53:fe:6d:8b:e1:8b:99:32:ec:17:b1:c1:2f:
36:e6:a1:80:00:30:f0:b5:12:2d:e4:b6:44:60:aa:
d9:b7:d9:2a:ab:5f:4a:ff:76:07:0a:44:dc:ad:16:
f0:33:bd:cc:5f:80:48:b1:ae:cf:b1:db:da:61:a7:
8b:3c:37:16:74:05:46:14:b6:df:05:95:59:0b:9c:
0b:e1:d9:90:7a:38:e9:a6:4f:96:ed:57:dd:24:89:
70:0a:c6:c3:d5:3f:08:f6:69:c1:ec:c4:02:7c:07:
9f:d8:4e:2f:4a:9f:1d:a0:01:4a:66:18:1f:14:89:
ee:c4:a5:b8:91:c4:9b:a8:f7:0a:65:4c:99:95:b1:
17:76:c5:18:fe:a1:bf:e7:ef:39:24:da:f0:34:c6:
91:5d:42:97:6e:af:77:a4:27:94:72:f4:fd:a0:77:
24:11:ab:c8:6a:7b:79:60:04:e4:f8:7f:53:27:cb:
79:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C4:1A:C6:00:23:A7:5D:8C:07:B6:B7:0E:F0:07:73:E2:E0:C4:2F
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/98QaxgAjp12MB7a3DvAHc-LgxC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.149.0-77.90.150.255
77.90.152.0/22
77.90.179.0/24
77.90.191.0/24
213.209.129.0/24
213.209.133.0-213.209.134.255
213.209.143.0/24
213.209.145.0/24
213.209.149.0-213.209.150.255
213.209.156.0/23
Signature Algorithm: sha256WithRSAEncryption
65:5e:35:2c:07:ea:10:79:25:9d:91:c6:24:a4:9c:50:8d:98:
97:5c:e5:2e:a4:94:fc:ee:aa:ab:ef:80:a8:4b:79:b1:62:40:
f7:83:46:9f:54:66:23:f3:c1:f9:0a:83:4b:e1:b8:64:43:ed:
23:aa:57:36:5a:43:f3:2d:4f:ed:5a:17:e2:f7:d8:ee:99:2e:
51:18:36:d5:56:42:d9:57:62:4c:eb:a8:e3:48:3f:0f:6a:a7:
24:98:50:b6:93:b3:4d:0a:81:9e:70:ba:90:50:41:e5:d9:4c:
72:42:01:9f:6e:6d:31:ea:7d:9f:39:dd:b8:69:1b:39:81:aa:
d5:e5:08:71:fd:fd:91:e7:b7:03:eb:b8:29:a5:d6:78:94:23:
c0:21:c4:be:ab:f2:56:ee:c2:ce:4d:6c:cb:36:4b:c1:b1:71:
e8:42:47:9a:c4:f3:da:d0:5e:77:4b:df:d4:2a:9a:51:97:2e:
5c:6b:82:9b:22:33:31:27:1d:af:49:a9:b9:f2:16:d7:78:6e:
bb:07:60:c3:af:65:43:53:b7:c9:3e:a3:44:37:2d:aa:3b:fa:
e8:68:d8:e7:be:28:79:e7:7c:5c:0a:33:af:9e:f1:fe:d0:6a:
86:91:df:7c:86:82:9a:8d:f4:4c:63:97:8a:55:8e:41:13:87:
73:49:0e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:02 2024 by rpki-client on console-fra.rpki-client.org