Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/NRbLLZ9d4-7rqjxPbAKww-U1kqY.roa
File: NRbLLZ9d4-7rqjxPbAKww-U1kqY.roa (raw, json)
Hash identifier: /OAdX5pm++Q6pMeWpcMwijgei6+edQTBBwrRYdxj1tc=
Subject key identifier: 35:16:CB:2D:9F:5D:E3:EE:EB:AA:3C:4F:6C:02:B0:C3:E5:35:92:A6
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 08B352BA
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/NRbLLZ9d4-7rqjxPbAKww-U1kqY.roa
Signing time: Mon 18 Apr 2022 12:19:21 +0000
ROA not before: Mon 18 Apr 2022 12:19:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
77.90.189.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.157.0/24 maxlen: 24
77.90.180.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
213.209.147.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145969850 (0x8b352ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 18 12:19:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3516cb2d9f5de3eeebaa3c4f6c02b0c3e53592a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:ef:1f:f4:16:ac:8e:72:da:be:90:64:7b:
1e:3d:8d:7a:0d:e4:76:10:50:f7:9b:f4:13:1b:f6:
87:71:4f:8e:6d:23:78:90:dc:2e:90:43:39:1e:cf:
a5:61:8e:3a:4c:54:ef:f1:c2:02:47:4a:8d:3a:09:
6d:d0:48:57:89:ca:43:3e:42:9a:51:1f:10:e0:ef:
c4:9f:98:a4:28:a1:d1:96:1a:bb:3e:b8:c5:72:75:
6d:1f:6d:d4:a5:18:9b:0f:bf:90:79:6b:b9:b1:88:
ab:12:4a:d1:40:00:29:85:05:e0:3e:63:73:27:f0:
be:e0:3b:2f:62:f2:e1:50:d8:24:bb:ba:57:e2:2a:
d8:ed:2c:93:d0:63:de:fb:01:fc:b7:27:54:97:6f:
4e:57:5c:d3:87:67:00:6b:28:f4:8e:a0:48:82:ff:
e0:4b:59:ef:41:a3:7f:99:98:54:b2:06:46:ec:fa:
4d:68:6a:eb:d5:df:f5:5c:5c:de:4f:8a:69:6c:aa:
65:6d:83:6e:a6:48:d4:a6:f6:77:8e:29:9b:d1:69:
41:b1:46:f2:ee:7b:87:5f:5d:d7:e3:f0:95:a4:4e:
5f:54:31:a1:da:b7:92:b9:71:ce:e9:4c:01:1e:8d:
1b:d7:7b:b2:f9:76:ce:23:a8:88:4d:a5:70:57:6c:
98:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:16:CB:2D:9F:5D:E3:EE:EB:AA:3C:4F:6C:02:B0:C3:E5:35:92:A6
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/NRbLLZ9d4-7rqjxPbAKww-U1kqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.138.255
77.90.140.0/24
77.90.142.0-77.90.148.255
77.90.157.0/24
77.90.180.0/24
77.90.185.0/24
77.90.189.0/24
185.230.13.0-185.230.14.255
213.209.130.0/24
213.209.136.0/24
213.209.138.0/24
213.209.146.0/23
213.209.156.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
3a:7b:9a:8b:da:50:c7:3e:99:37:79:ff:2b:6c:40:b1:e6:65:
8e:27:6e:8f:77:32:c7:07:75:09:9e:f3:51:d1:4d:c9:83:5b:
e8:9c:7f:3d:4d:10:8f:a5:82:4b:e7:f3:58:b8:d4:f3:e7:41:
3f:53:a8:8c:68:7a:e4:11:28:d7:36:22:c6:72:17:2e:52:26:
2c:5b:6b:2d:11:d8:bd:dc:3f:7f:ab:f7:81:cf:a3:aa:33:0e:
4d:76:33:ee:f2:88:95:9e:3b:ff:8d:f9:5a:02:b8:a2:b5:68:
7c:37:5e:94:87:6a:a5:33:b8:5c:98:c0:84:45:06:e9:2a:48:
85:76:28:c3:19:51:a0:cb:0b:70:9f:1a:bb:d2:43:52:c9:36:
af:8d:70:7f:72:2c:fc:7a:53:c3:b1:b3:89:2a:73:46:1e:c9:
8e:24:1a:3d:a2:ee:40:8b:38:0b:b7:8a:76:0a:00:5d:22:c7:
44:90:2c:cc:42:fe:a6:19:95:a9:d4:7b:d5:ac:48:d7:de:fb:
8c:81:7e:85:bb:f2:50:02:d6:13:9c:4c:c4:1b:1e:fa:b5:a9:
e2:bb:ba:5e:85:1d:d9:f0:fa:15:27:94:a2:79:19:58:b9:7e:
a7:3d:b4:3b:7b:d4:5c:ee:96:0b:22:c9:d4:79:6b:09:37:45:
91:5d:0f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org