Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9ON1qryj_gM90cnGI_Ra-h1nCTU.roa
File: 9ON1qryj_gM90cnGI_Ra-h1nCTU.roa (raw, json)
Hash identifier: h3avXU1ov9M+7+t0JpqwBg0fB8DZm6XfW+cgvWi6Wsk=
Subject key identifier: F4:E3:75:AA:BC:A3:FE:03:3D:D1:C9:C6:23:F4:5A:FA:1D:67:09:35
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 09157C9A
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9ON1qryj_gM90cnGI_Ra-h1nCTU.roa
Signing time: Thu 12 May 2022 07:48:02 +0000
ROA not before: Thu 12 May 2022 07:48:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 213.209.129.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
213.209.158.0/24 maxlen: 24
77.90.150.0/24 maxlen: 24
77.90.149.0/24 maxlen: 24
77.90.157.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
77.90.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152403098 (0x9157c9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: May 12 07:48:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4e375aabca3fe033dd1c9c623f45afa1d670935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:88:e1:eb:53:c4:4b:10:7c:90:05:8b:60:ab:
04:e9:5b:3f:aa:f5:fc:1c:72:ae:8b:73:c6:6f:42:
d6:37:f5:41:c3:1c:14:b3:e7:15:b4:a3:ab:ce:a0:
36:21:13:7f:0a:a8:89:14:b7:c0:a6:ce:db:5c:9f:
b3:26:06:d1:b8:07:c1:01:10:57:1e:69:43:a9:e1:
21:7c:5c:65:c6:af:7b:72:7d:5c:e6:b3:40:db:29:
d1:6c:10:6d:c8:15:c1:12:fe:7a:dd:cb:71:55:bd:
5e:a7:13:19:b2:fd:0f:b1:3d:f8:0f:f2:fd:07:06:
41:ba:02:7f:53:16:93:b2:ec:a7:7b:f1:fa:72:3f:
82:d6:3e:8f:0b:5a:17:bb:15:d3:1f:5e:07:01:bf:
1b:a6:1b:fd:bb:5a:1d:0c:b5:21:3f:9d:cc:a3:3c:
87:d1:23:16:21:89:93:01:8e:0c:74:d4:ac:b3:08:
8f:f1:ef:41:d9:cf:e2:e5:3b:2b:94:da:9a:dc:76:
50:e1:d9:ad:8f:76:7e:31:ca:59:d4:46:b1:5c:4c:
44:0d:23:c5:a6:2f:4e:50:60:6b:03:87:d3:13:b1:
d3:0a:d5:89:a3:a5:d3:10:f2:98:70:ba:dc:57:15:
79:c3:48:c6:9f:5a:32:2a:f9:04:c9:fd:13:da:68:
41:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E3:75:AA:BC:A3:FE:03:3D:D1:C9:C6:23:F4:5A:FA:1D:67:09:35
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9ON1qryj_gM90cnGI_Ra-h1nCTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.149.0-77.90.150.255
77.90.153.0/24
77.90.157.0/24
77.90.179.0/24
185.230.14.0/24
213.209.129.0/24
213.209.143.0/24
213.209.145.0/24
213.209.150.0/24
213.209.158.0/24
Signature Algorithm: sha256WithRSAEncryption
72:94:1c:05:ab:c8:11:28:cc:23:16:94:fc:25:96:ab:28:ea:
a3:fc:60:f7:98:7b:c2:20:10:72:ac:47:fe:66:6c:7d:a5:fb:
59:76:06:e0:dd:09:0e:3c:09:ec:38:75:f4:1b:b7:f2:a6:fc:
50:dc:52:4d:b9:45:55:69:95:03:e7:2b:07:a2:5d:74:2f:df:
5b:db:8f:d4:89:5a:82:b5:41:45:73:a6:4a:e7:06:a2:71:11:
6b:e7:4d:e2:32:0c:1c:66:56:5e:c2:49:8e:1a:9b:8d:8c:e8:
69:9a:11:ad:2b:2a:80:8d:95:2e:23:b7:8b:6d:bf:24:a7:5e:
8e:84:d4:26:fe:8e:c9:98:02:60:24:c3:e7:fc:b8:00:7c:0e:
52:d2:2e:b7:1e:db:ba:f0:e3:31:ad:2b:cc:ee:70:ae:52:c5:
52:7b:76:14:c8:3e:5d:83:3e:cd:6e:83:84:80:8a:96:11:7f:
a5:51:09:67:13:9a:07:b9:d6:3c:3e:a9:fd:d3:9e:ac:82:3d:
9a:37:77:07:68:94:a8:12:d3:b6:1e:0e:d2:2d:03:7c:0a:3f:
d6:4f:2b:e9:85:2f:d6:fa:48:65:25:76:4b:97:61:01:1a:99:
ee:e5:8a:9e:b1:f8:c5:b0:95:86:fc:60:5d:b0:d5:3d:39:7d:
aa:1d:0c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org