Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Fs8nGZFQrx5JDDQY_E5mAk-tgKs.roa
File: Fs8nGZFQrx5JDDQY_E5mAk-tgKs.roa (raw, json)
Hash identifier: KxasHybYY9VyBqipvjrhljqb4ZdzW2N3WlIdjeVAr98=
Subject key identifier: 16:CF:27:19:91:50:AF:1E:49:0C:34:18:FC:4E:66:02:4F:AD:80:AB
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 09D9B478
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Fs8nGZFQrx5JDDQY_E5mAk-tgKs.roa
Signing time: Fri 24 Jun 2022 09:36:47 +0000
ROA not before: Fri 24 Jun 2022 09:36:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.191.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
77.90.164.0/24 maxlen: 24
77.90.179.0/24 maxlen: 24
77.90.181.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.147.0/24 maxlen: 24
213.209.151.0/24 maxlen: 24
213.209.158.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1280:24::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165262456 (0x9d9b478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 24 09:36:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16cf27199150af1e490c3418fc4e66024fad80ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:aa:8f:b6:a9:22:94:af:76:8e:36:9f:5c:c2:
ad:1d:4f:ee:4c:62:98:af:d6:4d:b1:bb:80:f4:6e:
f7:7d:6a:4c:fe:c0:38:22:38:a2:73:6f:8f:2d:35:
82:20:65:91:ef:62:fc:1b:e6:5e:fc:67:60:67:57:
04:e0:36:d7:3c:ed:5c:f2:47:de:e2:12:9c:af:02:
2d:7c:76:36:b5:1d:e7:21:fc:28:eb:45:81:a2:7a:
67:45:67:3f:57:58:12:74:0d:e8:c2:f2:ec:60:5d:
6d:15:af:60:bc:aa:77:16:15:21:cb:9b:e0:0c:54:
7d:05:48:3c:a1:d6:e3:ee:e6:ab:7b:c4:f2:e9:82:
86:23:0e:2e:19:93:5b:ed:26:e6:01:7e:08:87:83:
0e:da:4c:c1:21:da:ab:81:18:f0:ab:c4:08:9c:97:
78:7f:76:f7:f1:f9:be:b2:99:62:0c:6f:5d:e6:70:
eb:26:83:c1:e5:68:85:3b:36:0c:5f:af:71:3e:fd:
d3:66:da:be:c1:a7:cf:67:54:77:3a:48:1e:da:23:
d3:8d:46:d0:95:98:f9:49:b6:eb:6f:ac:96:d8:61:
b4:06:2f:a1:3f:f0:39:f3:66:f4:81:64:a0:a8:ed:
57:35:7d:0c:6f:eb:85:af:4a:18:35:b5:fc:6c:a6:
40:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CF:27:19:91:50:AF:1E:49:0C:34:18:FC:4E:66:02:4F:AD:80:AB
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Fs8nGZFQrx5JDDQY_E5mAk-tgKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.138.255
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.153.0-77.90.154.255
77.90.164.0/24
77.90.179.0/24
77.90.181.0/24
77.90.191.0/24
213.209.130.0/24
213.209.138.0/24
213.209.147.0/24
213.209.151.0/24
213.209.158.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
60:55:b7:61:d6:32:3f:92:09:25:f0:97:97:c2:33:61:0e:25:
d4:e3:e6:1f:33:66:83:f4:1a:0b:cc:47:b9:e4:e4:e8:51:53:
65:cf:75:74:07:e3:a4:7a:16:b8:b6:5a:14:56:b5:58:68:1c:
a0:c9:42:d3:af:4e:33:26:2c:f3:2a:39:24:83:27:a9:3e:c2:
6c:1a:a8:ff:9f:c6:36:b1:f1:57:67:37:f8:0f:6a:d0:fe:81:
ea:88:8f:b7:0a:36:17:66:1a:80:f4:44:e8:e4:1b:11:22:d3:
2c:3e:40:8d:45:c7:14:dd:07:36:8b:07:be:f9:7c:24:4f:af:
07:19:32:54:7e:12:f3:fc:50:30:8e:69:01:f7:fc:98:28:0b:
61:01:fb:29:42:71:e3:df:f4:a9:63:24:61:75:19:b3:46:cf:
4a:7d:46:d3:25:62:25:1e:ce:ff:b8:46:0a:e8:62:1e:46:cf:
1d:c4:e5:ad:04:27:f8:27:70:24:39:09:37:4a:56:b6:98:2b:
da:8b:fb:5a:65:27:93:d4:4b:8a:ca:62:8e:10:e2:3e:97:48:
7b:d7:d7:d0:c7:02:21:5d:8a:a7:dc:36:e5:67:62:31:aa:9b:
17:6e:f1:d3:dc:b1:5a:52:74:d7:40:0e:1a:32:7b:68:92:f1:
68:29:16:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org