Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9a2EHIR8faVj9261DQ246kL7_hE.roa
File: 9a2EHIR8faVj9261DQ246kL7_hE.roa (raw, json)
Hash identifier: 7qVBAJ59fmKyuc5XJmkLUv255T42fSQTwNr9t+W6ExM=
Subject key identifier: F5:AD:84:1C:84:7C:7D:A5:63:F7:6E:B5:0D:0D:B8:EA:42:FB:FE:11
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01842DEC45F0E387E2AD7C24433747676D37
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9a2EHIR8faVj9261DQ246kL7_hE.roa
Signing time: Mon 31 Oct 2022 12:02:49 +0000
ROA not before: Mon 31 Oct 2022 12:02:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.139.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.156.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
77.90.178.0/24 maxlen: 24
77.90.184.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2d:ec:45:f0:e3:87:e2:ad:7c:24:43:37:47:67:6d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 31 12:02:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5ad841c847c7da563f76eb50d0db8ea42fbfe11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8e:e7:24:44:91:15:bf:0f:d4:a7:df:44:0a:
16:85:60:be:47:d9:66:01:42:98:a8:80:06:5a:0f:
d8:e0:7f:41:3b:3e:38:93:f3:a8:56:c1:af:17:6d:
73:49:ef:7b:36:13:47:f3:4e:b9:7e:c3:b6:6a:6b:
46:c6:2b:05:26:9b:01:d3:2f:48:d1:02:d5:d0:5d:
17:95:3f:a6:38:79:d2:6d:11:b5:bf:38:70:58:d8:
52:b2:cb:7a:46:fb:2a:f7:8a:c6:58:0c:66:b1:fb:
48:4a:b4:05:af:64:15:a2:38:4f:fd:54:2c:82:e2:
21:f0:89:f4:49:b0:87:d6:57:99:84:cd:75:3d:55:
43:ff:7b:9d:88:b9:18:ed:c2:0a:ea:55:60:52:24:
67:02:de:64:5b:65:b6:74:72:8a:2f:77:50:2f:fe:
25:de:61:a2:09:7b:01:13:ed:fa:64:db:d0:32:8f:
13:e6:cb:b9:cd:cb:a5:1f:e1:a2:b2:30:c8:13:16:
d3:f3:24:67:b3:e9:6b:97:bb:ae:cc:a7:9b:37:73:
45:0f:75:56:a9:0c:f7:08:51:4c:bf:98:fc:60:25:
48:3b:25:ba:b6:47:a3:7f:62:59:2f:be:fb:77:3e:
e7:1f:19:b4:1b:f8:8e:e8:8b:f6:9b:50:00:1d:45:
0a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AD:84:1C:84:7C:7D:A5:63:F7:6E:B5:0D:0D:B8:EA:42:FB:FE:11
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9a2EHIR8faVj9261DQ246kL7_hE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.140.255
77.90.142.0-77.90.148.255
77.90.153.0-77.90.154.255
77.90.156.0/24
77.90.178.0/24
77.90.184.0/24
77.90.188.0/24
185.230.13.0-185.230.15.255
213.209.138.0/24
213.209.143.0/24
213.209.156.0/23
213.209.159.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
97:46:dd:23:8b:9d:a5:87:46:4e:2e:5c:b1:57:46:dd:5d:2e:
ad:da:17:02:cb:37:b3:8e:74:fb:c4:c5:78:97:04:63:85:3f:
19:20:cb:5a:3c:14:77:1b:69:cf:47:3a:25:37:49:88:22:97:
20:77:82:fa:96:82:5b:1e:6d:a3:30:35:f3:3a:40:70:de:1d:
e7:85:74:ab:c6:2e:8c:82:54:00:f7:50:62:14:e8:8d:7d:6d:
19:30:fb:ae:33:8b:dd:16:05:f5:b0:d1:b2:7a:84:87:0f:89:
b1:b9:7f:52:c8:da:ba:46:8f:b8:75:4c:3f:9f:f8:3d:e5:54:
f8:82:12:c2:a7:04:d6:a8:fb:7f:7e:8e:c9:72:6e:eb:71:8e:
a3:48:e2:f8:63:d4:02:1f:81:e3:9a:67:87:b2:35:a3:1e:07:
81:d8:7b:a7:32:fa:5a:f8:26:9f:6e:cf:23:b0:87:58:4b:c9:
a4:19:22:36:87:18:83:2d:2a:02:7b:bb:a6:b1:d1:af:4b:53:
a3:09:13:f2:7e:3a:7f:93:c2:5c:94:cf:77:3f:b1:fa:db:3f:
e7:e5:01:d8:4d:a4:d4:af:19:a2:3b:65:fe:93:a0:6e:ec:53:
14:7e:b5:d9:86:75:c8:ac:47:76:b2:f6:3d:ff:df:84:a6:ee:
7b:72:05:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org