Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/CkSJzOOrpIHPGlWgDjz86rEro64.roa
File: CkSJzOOrpIHPGlWgDjz86rEro64.roa (raw, json)
Hash identifier: ANbevr3RWh9JWUbd+99T2FnQOiJNTgVqn+lJSB1uawg=
Subject key identifier: 0A:44:89:CC:E3:AB:A4:81:CF:1A:55:A0:0E:3C:FC:EA:B1:2B:A3:AE
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 07A4396E
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/CkSJzOOrpIHPGlWgDjz86rEro64.roa
Signing time: Mon 28 Feb 2022 16:22:10 +0000
ROA not before: Mon 28 Feb 2022 16:22:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128203118 (0x7a4396e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Feb 28 16:22:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a4489cce3aba481cf1a55a00e3cfceab12ba3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:81:96:c9:ab:75:65:fa:9b:2f:8b:97:20:c2:
3d:99:9d:6e:80:b7:65:18:ad:28:75:85:c6:05:b9:
69:12:1f:57:15:3e:0c:6e:28:03:b4:ca:5e:c4:eb:
09:21:87:43:88:f8:3a:00:40:61:3b:df:1e:76:8a:
04:0f:f8:56:37:9e:ad:95:61:30:9c:50:75:8a:2c:
e5:e0:d9:6d:bb:05:65:f9:47:7e:bf:df:c0:79:35:
0d:69:cf:a9:86:d2:93:01:ff:78:73:50:93:af:06:
1d:73:17:78:a3:59:9c:da:95:77:f7:44:4c:f6:53:
6c:88:2e:de:78:8d:a2:cd:4b:2e:d9:74:d3:25:51:
f9:2a:e4:73:c2:02:f8:a7:c5:a6:f9:13:2c:27:d5:
9e:31:5d:36:a5:99:11:ad:d7:af:3a:71:e8:df:5c:
85:39:26:3f:35:3e:c6:2a:c3:c1:c6:44:53:78:82:
33:01:4a:7e:b4:b3:96:29:97:58:e8:d8:68:84:a5:
b0:07:ab:75:76:7a:55:2b:0c:a9:fd:27:ea:7c:41:
94:d1:1e:2d:b7:df:59:fb:29:c4:a3:1d:03:ec:41:
ec:90:56:2b:aa:32:d5:99:17:a3:23:79:47:e6:91:
94:e6:4c:c5:3e:fc:07:75:44:82:53:30:a4:ba:3b:
8a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:44:89:CC:E3:AB:A4:81:CF:1A:55:A0:0E:3C:FC:EA:B1:2B:A3:AE
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/CkSJzOOrpIHPGlWgDjz86rEro64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
213.209.130.0/24
213.209.136.0/24
213.209.138.0/24
213.209.146.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
62:63:20:5d:ff:11:a7:b4:ab:db:00:16:f1:5a:1a:3f:de:6b:
c9:df:aa:32:cd:09:90:b7:07:9b:5a:ff:24:2b:25:9d:02:f2:
a5:72:f9:55:20:94:70:49:b4:10:78:36:9e:b5:47:49:6a:08:
59:88:9f:df:a1:de:52:9e:31:d2:5c:5f:75:38:a4:ed:15:2d:
42:2d:89:aa:26:7d:ec:67:4d:da:17:33:0c:41:1a:90:fc:7e:
ea:e5:84:2c:2b:df:8a:3b:34:b0:39:6b:80:2d:73:a3:40:26:
ee:96:ef:51:51:35:9e:54:78:07:24:e8:c9:81:2e:2f:9d:3c:
cb:8f:30:56:bc:ab:54:c6:1f:b7:47:6a:90:10:43:06:85:20:
28:9b:0c:35:2f:65:b2:9d:8c:72:48:b9:c0:9d:c2:52:27:25:
75:9d:92:4d:46:93:95:9a:20:94:ca:5c:ad:fd:96:1d:d9:c8:
c1:1b:29:b0:38:90:4c:09:3f:83:eb:26:35:9c:ee:1f:14:29:
f6:93:d1:b8:ec:3a:06:9d:a0:be:82:5a:61:b1:cf:09:e0:90:
35:98:e9:16:5a:dc:3b:07:25:4a:59:2a:62:5b:e7:0e:09:48:
ca:51:dd:d5:c0:22:8d:ad:e5:bd:35:32:18:28:22:64:28:1f:
10:92:cf:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:22 2023 by rpki-client on console-fra.rpki-client.org