Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/LLVJbp9ZlQEuOW8WxjKI4-JmylA.roa
File: LLVJbp9ZlQEuOW8WxjKI4-JmylA.roa (raw, json)
Hash identifier: W20MO5sIS0fZuzTDT1Oyw6RhNodNOWcDSS94oCWzeGQ=
Subject key identifier: 2C:B5:49:6E:9F:59:95:01:2E:39:6F:16:C6:32:88:E3:E2:66:CA:50
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 098268F8
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/LLVJbp9ZlQEuOW8WxjKI4-JmylA.roa
Signing time: Thu 09 Jun 2022 16:44:03 +0000
ROA not before: Thu 09 Jun 2022 16:44:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 185.230.13.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.147.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.158.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
77.90.150.0/24 maxlen: 24
77.90.149.0/24 maxlen: 24
77.90.178.0/24 maxlen: 24
77.90.179.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159541496 (0x98268f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 9 16:44:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2cb5496e9f5995012e396f16c63288e3e266ca50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1b:47:41:0c:11:ed:fd:09:94:e3:dc:d3:0a:
e2:90:4d:ca:a8:2b:39:09:5e:31:3f:86:3f:64:93:
ac:25:d3:be:fd:44:93:6e:75:3f:85:ed:2f:36:77:
cc:01:d5:eb:32:76:f3:87:78:9c:28:2d:ba:32:bc:
66:dd:4f:7b:00:20:b7:c6:3a:3b:db:5e:0c:99:e7:
a2:11:90:a6:0f:ce:80:32:8e:42:5a:d1:e2:1d:80:
c5:0c:63:14:bc:43:1f:32:6c:d8:c1:bc:96:86:59:
fa:ca:48:6f:94:c0:d8:d4:d4:0c:42:95:9c:04:6e:
ea:e8:79:8d:e0:dd:51:ce:4a:2f:a4:6f:cb:80:19:
4d:1a:d2:92:f6:fa:bf:f6:d3:dd:b6:71:69:14:7b:
db:f7:5d:38:dd:07:04:d6:95:0c:91:4c:50:5c:47:
c0:b2:0a:4e:37:95:12:7f:51:96:e1:e8:eb:77:f9:
49:5a:7b:6d:0a:1c:f9:b5:e1:25:5c:18:82:0b:e0:
52:d8:e9:46:4b:c9:7b:85:3b:79:e6:2d:b1:f2:b1:
84:59:98:32:e9:93:2f:11:68:27:87:46:3c:f5:80:
84:07:bc:05:67:3f:bd:38:ab:2b:0c:fa:81:ab:fe:
f5:9e:3d:04:51:e1:ae:f6:9e:a3:a6:1c:5a:09:8c:
55:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B5:49:6E:9F:59:95:01:2E:39:6F:16:C6:32:88:E3:E2:66:CA:50
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/LLVJbp9ZlQEuOW8WxjKI4-JmylA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.138.0/24
77.90.149.0-77.90.150.255
77.90.178.0/23
77.90.185.0/24
185.230.13.0-185.230.14.255
213.209.129.0/24
213.209.145.0-213.209.147.255
213.209.156.0/24
213.209.158.0/24
Signature Algorithm: sha256WithRSAEncryption
28:2e:a3:79:6d:97:c2:5f:8b:d3:9d:53:fa:fc:61:49:09:58:
02:e4:58:cf:f8:4a:96:51:f5:09:b1:3f:7e:dd:6e:bf:5b:42:
25:09:3d:fe:8f:a8:cb:bb:7d:83:00:c6:a7:41:37:26:99:5f:
c7:4b:79:fe:55:d7:37:f8:31:1d:54:e8:f4:bf:82:dc:9b:e3:
57:f1:bc:83:05:7c:84:57:96:bd:e0:2b:7f:ce:da:a1:7f:ca:
53:8a:31:6b:91:78:3a:ce:2f:de:c8:e7:ff:ff:2b:6f:7b:4a:
41:29:23:2b:28:fc:fd:12:9c:13:ab:d3:8c:5b:47:3d:48:2f:
9d:a3:14:67:6b:8e:27:9b:bf:f6:45:2b:95:a6:00:b6:61:16:
bb:a8:bc:78:01:31:f3:3a:11:67:88:c8:5d:fa:19:53:d7:12:
1b:9d:3c:ff:94:b6:74:f4:c2:da:89:dd:c6:c8:f2:fd:57:15:
01:5e:37:05:de:b1:9d:ab:ec:31:9c:56:0c:d6:82:56:0b:8d:
ee:d0:ba:22:75:dc:ce:c8:6a:c0:6d:e5:22:fb:46:f4:e4:9f:
7e:06:1d:c1:3b:ac:1c:6b:43:9a:2f:dc:0f:0b:61:da:9f:3d:
44:68:d9:c4:d4:3f:9c:98:ca:84:92:e0:5e:6d:a3:e0:d4:43:
c2:e2:ba:bb
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIECYJo+DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjQ3NmUxMmU4OTg3ZTViMzAyY2RjMjRiZGQ5ZGIzZmU4M2M4NDQ5MB4XDTIyMDYw
OTE2NDQwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmNiNTQ5NmU5ZjU5
OTUwMTJlMzk2ZjE2YzYzMjg4ZTNlMjY2Y2E1MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOIbR0EMEe39CZTj3NMK4pBNyqgrOQleMT+GP2STrCXTvv1E
k251P4XtLzZ3zAHV6zJ284d4nCgtujK8Zt1PewAgt8Y6O9teDJnnohGQpg/OgDKO
QlrR4h2AxQxjFLxDHzJs2MG8loZZ+spIb5TA2NTUDEKVnARu6uh5jeDdUc5KL6Rv
y4AZTRrSkvb6v/bT3bZxaRR72/ddON0HBNaVDJFMUFxHwLIKTjeVEn9RluHo63f5
SVp7bQoc+bXhJVwYggvgUtjpRkvJe4U7eeYtsfKxhFmYMumTLxFoJ4dGPPWAhAe8
BWc/vTirKwz6gav+9Z49BFHhrvaeo6YcWgmMVSECAwEAAaOCAlEwggJNMB0GA1Ud
DgQWBBQstUlun1mVAS45bxbGMojj4mbKUDAfBgNVHSMEGDAWgBQ7R24S6Jh+WzAs
3CS92ds/6DyESTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8x
L0xMVkpicDlabFFFdU9XOFd4aktJNC1KbXlsQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
ZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8xL08wZHVFdWlZZmxz
d0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBn
BggrBgEFBQcBBwEB/wRYMFYwVAQCAAEwTgMEAE1aijAMAwQATVqVAwQATVqWAwQB
TVqyAwQATVq5MAwDBAC55g0DBAC55g4DBADV0YEwDAMEANXRkQMEAtXRkAMEANXR
nAMEANXRnjANBgkqhkiG9w0BAQsFAAOCAQEAKC6jeW2Xwl+L051T+vxhSQlYAuRY
z/hKllH1CbE/ft1uv1tCJQk9/o+oy7t9gwDGp0E3Jplfx0t5/lXXN/gxHVTo9L+C
3JvjV/G8gwV8hFeWveArf87aoX/KU4oxa5F4Os4v3sjn//8rb3tKQSkjKyj8/RKc
E6vTjFtHPUgvnaMUZ2uOJ5u/9kUrlaYAtmEWu6i8eAEx8zoRZ4jIXfoZU9cSG508
/5S2dPTC2ondxsjy/VcVAV43Bd6xnavsMZxWDNaCVguN7tC6InXczshqwG3lIvtG
9OSffgYdwTusHGtDmi/cDwth2p89RGjZxNQ/nJjKhJLgXm2j4NRDwuK6uw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:03 2024 by rpki-client on console-fra.rpki-client.org