Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/DRuHzbZXjfi-KIMpyf5qt4s7m28.roa
File: DRuHzbZXjfi-KIMpyf5qt4s7m28.roa (raw, json)
Hash identifier: FsROXVi8rrRQcESg0JEA1T+LGY6xmWEQ8ZseiSc+YIw=
Subject key identifier: 0D:1B:87:CD:B6:57:8D:F8:BE:28:83:29:C9:FE:6A:B7:8B:3B:9B:6F
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 09FA0962
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/DRuHzbZXjfi-KIMpyf5qt4s7m28.roa
Signing time: Fri 01 Jul 2022 09:44:25 +0000
ROA not before: Fri 01 Jul 2022 09:44:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 185.230.13.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.144.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
77.90.149.0/24 maxlen: 24
77.90.164.0/24 maxlen: 24
77.90.166.0/24 maxlen: 24
77.90.178.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167381346 (0x9fa0962)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 1 09:44:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d1b87cdb6578df8be288329c9fe6ab78b3b9b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f2:23:4e:1d:e5:b9:d6:71:cb:8b:97:24:69:
1f:1c:c9:88:94:22:56:17:ee:8d:8a:9a:89:ba:fe:
57:38:1f:44:36:54:51:98:ad:12:dd:59:70:9e:a8:
79:53:0a:e0:f7:4c:c9:89:8f:27:89:f0:9c:b0:38:
f5:2e:a6:58:b5:c6:54:9d:a1:57:4b:6f:59:5f:f8:
f6:d2:5c:25:47:74:9a:95:35:c7:f2:2c:fc:d9:4e:
4d:d4:b8:60:30:ec:cf:a5:c2:94:f4:c6:c6:c5:56:
28:ba:49:22:03:a0:2a:81:3d:34:5c:68:a4:49:63:
6b:df:88:1b:fe:9a:ee:93:06:3d:97:ad:a4:d4:6b:
da:fd:ea:d0:21:c9:fb:33:99:5f:d8:5a:28:3d:0f:
65:6e:6c:1d:b8:d5:29:35:f1:93:94:3f:67:ed:d0:
65:4b:21:34:d0:1e:33:08:f3:f1:c2:88:20:3f:3b:
43:69:a4:50:3e:8b:df:99:ee:5a:12:fd:36:05:24:
55:70:8c:cf:c8:3c:ef:12:e0:41:eb:8f:89:7e:c6:
02:e2:ce:a2:6f:d8:8f:fe:19:1f:5c:a3:e6:19:e9:
43:1f:65:a5:9c:c5:6f:ee:7c:24:84:10:9b:af:88:
cf:92:fa:26:52:f4:1a:3a:6d:a8:19:f2:93:7a:87:
d5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1B:87:CD:B6:57:8D:F8:BE:28:83:29:C9:FE:6A:B7:8B:3B:9B:6F
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/DRuHzbZXjfi-KIMpyf5qt4s7m28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.149.0/24
77.90.164.0/24
77.90.166.0/24
77.90.178.0/24
77.90.185.0/24
77.90.188.0/24
185.230.13.0-185.230.14.255
213.209.129.0/24
213.209.136.0/24
213.209.143.0-213.209.146.255
213.209.156.0/24
Signature Algorithm: sha256WithRSAEncryption
16:da:e2:d5:8a:f5:e5:74:dc:17:05:cf:0c:15:65:e6:3a:ee:
83:3e:f8:93:9c:b2:c9:c6:f3:47:1f:7f:12:56:b7:8f:b7:be:
16:ae:8d:22:72:dc:b5:9c:b6:f7:53:79:be:2a:43:6f:5b:0b:
39:22:51:28:49:f7:f7:53:e5:fb:d9:f4:f5:b3:3b:16:8d:2b:
ae:1d:c8:7e:f0:c2:c8:91:be:1d:a2:21:2d:1e:8b:f3:f1:4e:
ba:86:9e:04:34:3b:91:bf:e4:38:e2:77:2b:6d:97:55:6c:ef:
5e:4c:65:e6:49:34:76:6c:1d:08:40:ae:f0:23:fb:26:24:d2:
c0:44:80:e9:4d:a8:a2:3f:e0:f0:9c:a6:af:5a:08:3a:5b:14:
3f:ba:d5:a0:36:be:cb:f0:af:72:8b:0c:9d:62:6c:68:97:05:
78:75:7c:43:c2:2b:a4:2b:7a:d2:32:fa:44:ec:c3:70:b4:1a:
7a:ee:6e:11:15:2a:58:3a:ac:4e:63:92:c3:f8:47:4e:d5:48:
73:fe:fd:af:dc:33:b2:ad:81:32:89:9d:ef:02:5c:89:6b:49:
93:3e:7d:37:28:15:e5:a3:9b:7a:81:0d:af:31:54:04:89:3e:
e7:4c:16:fa:f3:f9:ae:76:41:49:29:44:c8:3d:53:b5:cd:c0:
77:bf:03:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:03 2024 by rpki-client on console-fra.rpki-client.org