Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9mWlDLxmXvoAbtjvCujDvo2SbFo.roa
File: 9mWlDLxmXvoAbtjvCujDvo2SbFo.roa (raw, json)
Hash identifier: cBNtmOacNS2gT5OmyHpxwFxq1NuiHH6Jk36F7DTvouQ=
Subject key identifier: F6:65:A5:0C:BC:66:5E:FA:00:6E:D8:EF:0A:E8:C3:BE:8D:92:6C:5A
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 097A55BA
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9mWlDLxmXvoAbtjvCujDvo2SbFo.roa
Signing time: Tue 07 Jun 2022 08:44:20 +0000
ROA not before: Tue 07 Jun 2022 08:44:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.188.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.155.0/24 maxlen: 24
77.90.156.0/24 maxlen: 24
77.90.173.0/24 maxlen: 24
185.230.12.0/24 maxlen: 24
77.90.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159012282 (0x97a55ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 7 08:44:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f665a50cbc665efa006ed8ef0ae8c3be8d926c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:5a:d7:fd:df:23:f9:8e:28:07:ff:a8:58:
1d:d5:e2:61:2b:41:9d:49:5e:d7:46:97:50:1f:6d:
e8:55:02:1c:c4:53:a1:09:8c:d5:ec:46:8f:88:bd:
90:10:98:be:2f:97:57:28:b5:41:15:dd:8f:67:0d:
d4:ff:6f:ad:a9:0d:f7:54:c4:fd:64:c9:94:f8:18:
e1:8d:d6:01:dd:28:2d:47:d5:62:7d:ea:bb:73:4d:
58:69:7d:c1:f9:a0:b7:83:f2:4b:79:7e:0e:33:8c:
99:ca:39:72:98:73:a8:f6:f4:dd:32:ef:5c:43:87:
af:e2:f7:a1:56:30:2f:2d:67:f7:a2:4b:16:5a:a7:
c7:2e:de:f7:5c:94:ab:2a:56:2d:bb:66:ea:ca:3f:
1e:75:d7:c0:aa:25:bb:38:93:f3:fd:89:f5:22:b5:
fb:8c:98:ab:69:0c:7d:02:1e:88:9c:73:13:94:7d:
86:7d:c3:13:26:da:de:d4:83:a0:47:68:63:d0:da:
a6:a9:cc:e8:d7:7f:65:5b:51:8b:fa:03:3a:d6:3c:
a1:5b:61:6d:83:e7:4e:1e:da:4a:56:e6:56:8f:e5:
51:e4:0e:f9:fc:01:0d:20:89:ea:5b:9e:a8:89:0f:
5e:76:11:98:ba:2f:72:31:dc:46:ec:19:d7:ce:04:
9b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:65:A5:0C:BC:66:5E:FA:00:6E:D8:EF:0A:E8:C3:BE:8D:92:6C:5A
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9mWlDLxmXvoAbtjvCujDvo2SbFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.145.0/24
77.90.155.0-77.90.156.255
77.90.173.0/24
77.90.184.0/24
77.90.188.0/24
185.230.12.0/24
213.209.133.0-213.209.134.255
213.209.149.0/24
213.209.157.0/24
Signature Algorithm: sha256WithRSAEncryption
19:56:27:50:f5:9f:96:a1:a8:d6:a7:90:a0:be:4b:7a:c6:88:
ff:2d:d8:54:55:19:9a:16:94:5c:0c:76:27:d2:bf:f1:f4:09:
0e:e2:7d:cb:75:37:db:6b:64:02:a6:ab:e1:1f:ce:54:90:0c:
7e:4f:61:0a:1f:e3:4a:2c:b6:af:29:54:74:ec:3d:32:6e:32:
8a:c8:21:12:69:4f:29:01:18:be:8d:4c:68:7c:69:b0:fa:a1:
62:8c:e8:13:5a:77:99:c9:d5:a1:d4:55:e3:b3:c5:d8:ae:ee:
94:64:24:c8:4d:31:cd:48:7d:eb:e7:f4:b4:15:13:a1:c0:65:
fc:fa:04:bb:b0:b4:5f:55:cd:0e:86:0a:0d:8e:27:20:d8:e5:
8e:6f:cb:a4:7d:a1:98:a9:be:49:f1:9b:5b:38:0f:80:09:78:
00:fd:aa:61:8c:49:4a:90:89:5b:5c:7a:cf:47:97:62:bf:93:
ad:96:3f:fc:a3:79:0f:7a:20:ac:a4:de:00:83:ee:2e:62:c5:
d0:e1:ac:80:3d:e9:fc:a1:78:84:5f:54:0e:f6:ef:a3:59:08:
ea:28:62:39:ad:ca:a9:1c:ec:7d:86:09:64:78:57:ea:e5:a9:
14:fe:0b:1e:24:14:37:39:ff:cd:e8:d3:f1:4a:85:1d:c4:e5:
22:b7:30:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org