Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/CfDK5q_3EVE6UKT4bw6WwELRlTg.roa
File: CfDK5q_3EVE6UKT4bw6WwELRlTg.roa (raw, json)
Hash identifier: Q6TJX/AHGc1MiK2uc7yJ6QnNqtViChUrfkWrWM9Xcm0=
Subject key identifier: 09:F0:CA:E6:AF:F7:11:51:3A:50:A4:F8:6F:0E:96:C0:42:D1:95:38
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 095CE078
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/CfDK5q_3EVE6UKT4bw6WwELRlTg.roa
Signing time: Mon 30 May 2022 19:35:16 +0000
ROA not before: Mon 30 May 2022 19:35:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 77.90.190.0/24 maxlen: 24
77.90.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157081720 (0x95ce078)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: May 30 19:35:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09f0cae6aff711513a50a4f86f0e96c042d19538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:2d:c9:ff:21:66:9b:dc:8f:d1:bd:9a:cc:
3f:87:20:fd:dc:ce:0f:59:4c:ed:28:d7:9c:a3:24:
09:b9:95:07:66:9a:09:3b:23:a6:9d:9f:a7:8e:b1:
76:ef:04:86:be:32:17:dc:63:f7:b2:38:ac:e2:bd:
17:6d:fa:b9:09:4d:db:8b:4f:b0:1d:6b:85:d9:00:
4f:d8:74:97:f9:d8:d2:e6:16:32:c1:b8:4c:df:d4:
f2:f3:fb:0c:e2:1d:d2:f5:10:45:16:06:98:d8:80:
98:a2:19:9d:4c:41:2c:8f:42:7c:65:4f:92:3e:32:
b1:7e:86:a1:ba:d4:53:1b:39:c5:0e:d4:52:7c:89:
5e:5c:4b:7b:76:d9:c5:24:26:c1:7d:b5:a1:94:54:
87:58:53:4b:de:9b:16:89:f1:61:74:a7:d0:f5:74:
56:89:de:3c:55:f4:5c:0e:c1:de:3f:55:bc:fe:77:
45:51:6f:8b:96:d0:92:44:9d:8b:fa:b3:07:98:d4:
c0:74:3a:5d:e3:60:13:a0:29:56:a2:93:bf:f8:3e:
ba:a2:fc:4b:41:7b:58:dc:ab:99:bf:f3:fd:36:f4:
00:a6:79:75:cb:4a:a4:e3:3f:bf:c5:f4:8b:01:6b:
8c:ec:33:31:00:46:0d:37:37:59:95:66:a2:11:8f:
c9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F0:CA:E6:AF:F7:11:51:3A:50:A4:F8:6F:0E:96:C0:42:D1:95:38
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/CfDK5q_3EVE6UKT4bw6WwELRlTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.166.0/24
77.90.190.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:6d:16:a7:70:72:5e:70:be:3b:23:40:55:3c:eb:87:34:ef:
0d:65:1a:02:5d:a6:9a:10:83:d5:b0:56:13:8f:60:10:8e:1d:
2c:f7:bc:d6:30:3d:ec:39:b0:04:f8:df:bd:ff:3d:f3:44:26:
7f:d7:2b:77:60:82:15:e5:97:93:c4:58:2b:1a:2b:9c:48:b6:
25:65:87:33:ef:4d:70:c3:e3:99:e4:7b:cc:64:3a:6b:6b:e9:
5e:1e:bc:5f:09:1a:60:13:fc:4d:cb:26:e8:29:4e:89:48:7d:
51:d3:16:06:46:09:63:ec:50:40:78:1c:c8:e8:26:87:8c:5e:
21:75:07:00:80:72:75:bb:2a:ad:b9:b1:8e:02:2a:b4:5d:71:
0d:47:e7:3c:d6:e2:e6:50:c3:fc:a5:51:35:fe:5c:13:cc:d3:
b2:bb:e2:d1:b3:89:59:a3:8e:ca:2e:1c:e4:d6:b0:bf:21:df:
de:07:f2:b3:a8:aa:56:74:7c:c1:11:fb:85:19:e6:bf:14:07:
80:e2:62:ac:c5:4a:08:32:2e:7c:47:9f:e1:b0:44:69:3b:5c:
3a:61:51:f8:37:bb:58:04:1d:c7:f3:cf:ab:53:b2:dc:0b:02:
0c:e0:8e:a5:c3:db:fd:0d:64:31:e5:8b:a2:ef:77:a1:3e:82:
47:47:d9:40
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECVzgeDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjQ3NmUxMmU4OTg3ZTViMzAyY2RjMjRiZGQ5ZGIzZmU4M2M4NDQ5MB4XDTIyMDUz
MDE5MzUxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDlmMGNhZTZhZmY3
MTE1MTNhNTBhNGY4NmYwZTk2YzA0MmQxOTUzODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANN6Lcn/IWab3I/RvZrMP4cg/dzOD1lM7SjXnKMkCbmVB2aa
CTsjpp2fp46xdu8Ehr4yF9xj97I4rOK9F236uQlN24tPsB1rhdkAT9h0l/nY0uYW
MsG4TN/U8vP7DOId0vUQRRYGmNiAmKIZnUxBLI9CfGVPkj4ysX6GobrUUxs5xQ7U
UnyJXlxLe3bZxSQmwX21oZRUh1hTS96bFonxYXSn0PV0VonePFX0XA7B3j9VvP53
RVFvi5bQkkSdi/qzB5jUwHQ6XeNgE6ApVqKTv/g+uqL8S0F7WNyrmb/z/Tb0AKZ5
dctKpOM/v8X0iwFrjOwzMQBGDTc3WZVmohGPyU8CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQJ8Mrmr/cRUTpQpPhvDpbAQtGVODAfBgNVHSMEGDAWgBQ7R24S6Jh+WzAs
3CS92ds/6DyESTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8x
L0NmREs1cV8zRVZFNlVLVDRidzZXd0VMUmxUZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
ZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8xL08wZHVFdWlZZmxz
d0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAE1apgMEAE1avjANBgkqhkiG9w0B
AQsFAAOCAQEAnW0Wp3ByXnC+OyNAVTzrhzTvDWUaAl2mmhCD1bBWE49gEI4dLPe8
1jA97DmwBPjfvf8980Qmf9crd2CCFeWXk8RYKxornEi2JWWHM+9NcMPjmeR7zGQ6
a2vpXh68XwkaYBP8Tcsm6ClOiUh9UdMWBkYJY+xQQHgcyOgmh4xeIXUHAIBydbsq
rbmxjgIqtF1xDUfnPNbi5lDD/KVRNf5cE8zTsrvi0bOJWaOOyi4c5NawvyHf3gfy
s6iqVnR8wRH7hRnmvxQHgOJirMVKCDIufEef4bBEaTtcOmFR+De7WAQdx/PPq1Oy
3AsCDOCOpcPb/Q1kMeWLou93oT6CR0fZQA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:24 2024 by rpki-client on console-ams.rpki-client.org