Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Njh4_6pGJTUSn8XxbkhaJC1bF3E.roa
File: Njh4_6pGJTUSn8XxbkhaJC1bF3E.roa (raw, json)
Hash identifier: 99FUiYvdQgdQVlQIlOpWkIb0TxRGJ52YCq+PErbljfI=
Subject key identifier: 36:38:78:FF:AA:46:25:35:12:9F:C5:F1:6E:48:5A:24:2D:5B:17:71
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 09A8C0C0
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Njh4_6pGJTUSn8XxbkhaJC1bF3E.roa
Signing time: Thu 16 Jun 2022 19:17:45 +0000
ROA not before: Thu 16 Jun 2022 19:17:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 213.209.129.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
77.90.150.0/24 maxlen: 24
77.90.149.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
77.90.178.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162054336 (0x9a8c0c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 16 19:17:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=363878ffaa462535129fc5f16e485a242d5b1771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:00:75:e0:f5:b3:5a:c9:62:83:60:86:65:ba:
44:4e:6b:2e:09:05:4b:68:a2:77:a3:ea:01:3f:49:
6b:d1:a0:c8:33:af:b1:1b:fd:16:cb:ea:54:55:b6:
fb:33:44:86:09:68:08:03:3c:ef:69:8d:bb:83:2a:
09:27:ce:4d:18:38:b0:3f:ee:3b:4e:39:bd:a7:2b:
af:06:f2:ec:50:36:b0:26:5c:e4:b2:55:f6:6c:e5:
ce:4e:91:c2:54:ce:82:e9:11:f7:af:02:95:96:34:
42:f7:b9:2e:f1:26:61:f3:41:10:31:dd:d5:b1:88:
4a:3d:9d:54:0b:d3:0c:10:9a:b0:f5:03:2c:89:26:
32:09:89:23:35:be:0f:62:5a:99:51:ec:98:d6:0d:
2b:91:3f:32:40:66:41:11:cf:90:30:1c:6e:1f:1a:
15:61:04:09:30:a4:a7:41:0b:06:25:fa:5d:10:9b:
d2:98:4b:c9:04:cc:89:d8:44:96:91:e7:f9:e6:96:
ea:3e:b7:a7:67:6e:59:30:f6:a2:f2:2d:19:e9:d4:
ca:97:dc:4b:b3:06:10:16:e1:6e:47:e3:fc:ac:57:
6e:5f:3e:77:bc:5f:20:32:47:87:9c:53:ec:a5:12:
96:1e:00:70:b1:b7:eb:36:0f:de:14:fc:93:22:c1:
48:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:38:78:FF:AA:46:25:35:12:9F:C5:F1:6E:48:5A:24:2D:5B:17:71
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Njh4_6pGJTUSn8XxbkhaJC1bF3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.149.0-77.90.150.255
77.90.178.0/24
77.90.185.0/24
185.230.13.0-185.230.14.255
213.209.129.0/24
213.209.145.0-213.209.146.255
213.209.156.0/24
Signature Algorithm: sha256WithRSAEncryption
52:68:f2:b8:82:9f:8e:4c:27:b3:f9:45:37:69:8a:af:4b:88:
1a:c8:82:3c:51:89:92:58:2d:93:9a:0b:a0:5e:35:db:ee:96:
f0:b7:cf:8a:6c:fd:db:78:d3:9e:17:a3:9c:18:78:03:97:95:
a6:63:e2:c8:6c:1d:a4:b6:bb:b5:97:65:0d:9e:b2:ae:1e:39:
0e:79:11:01:dc:0e:15:95:87:2e:9e:d4:e3:6a:b6:43:7f:6f:
24:12:c3:45:e8:16:6b:6f:c7:ee:3f:e9:22:0a:30:80:32:6a:
72:81:41:0e:f5:78:fa:5a:5a:06:46:ea:19:61:25:e9:bd:70:
d3:e4:ec:b4:d2:7e:e9:ae:e7:33:d4:b3:0a:ea:07:dc:c4:ff:
b7:6e:61:4b:6d:a5:9b:b6:8f:ae:7f:a4:8d:21:64:be:26:1f:
dd:a8:77:32:ca:24:cf:19:58:2f:2a:21:1a:00:df:07:15:53:
98:8b:f7:df:1c:a6:29:f5:64:08:46:40:ad:1f:ab:35:92:c1:
a6:ec:73:e9:63:f4:2a:6f:d4:e9:3e:d9:83:78:bf:22:a7:7f:
d5:1a:53:be:95:2c:27:a6:b8:e5:7e:e4:19:54:f2:61:08:fd:
cc:99:c5:28:0c:90:c6:fc:5f:9b:be:db:ae:2e:93:17:26:73:
05:78:12:d1
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIECajAwDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjQ3NmUxMmU4OTg3ZTViMzAyY2RjMjRiZGQ5ZGIzZmU4M2M4NDQ5MB4XDTIyMDYx
NjE5MTc0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzYzODc4ZmZhYTQ2
MjUzNTEyOWZjNWYxNmU0ODVhMjQyZDViMTc3MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIkAdeD1s1rJYoNghmW6RE5rLgkFS2iid6PqAT9Ja9GgyDOv
sRv9FsvqVFW2+zNEhgloCAM872mNu4MqCSfOTRg4sD/uO045vacrrwby7FA2sCZc
5LJV9mzlzk6RwlTOgukR968ClZY0Qve5LvEmYfNBEDHd1bGISj2dVAvTDBCasPUD
LIkmMgmJIzW+D2JamVHsmNYNK5E/MkBmQRHPkDAcbh8aFWEECTCkp0ELBiX6XRCb
0phLyQTMidhElpHn+eaW6j63p2duWTD2ovItGenUypfcS7MGEBbhbkfj/KxXbl8+
d7xfIDJHh5xT7KUSlh4AcLG36zYP3hT8kyLBSFkCAwEAAaOCAkUwggJBMB0GA1Ud
DgQWBBQ2OHj/qkYlNRKfxfFuSFokLVsXcTAfBgNVHSMEGDAWgBQ7R24S6Jh+WzAs
3CS92ds/6DyESTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8x
L05qaDRfNnBHSlRVU244WHhia2hhSkMxYkYzRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
ZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8xL08wZHVFdWlZZmxz
d0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBb
BggrBgEFBQcBBwEB/wRMMEowSAQCAAEwQjAMAwQATVqVAwQATVqWAwQATVqyAwQA
TVq5MAwDBAC55g0DBAC55g4DBADV0YEwDAMEANXRkQMEANXRkgMEANXRnDANBgkq
hkiG9w0BAQsFAAOCAQEAUmjyuIKfjkwns/lFN2mKr0uIGsiCPFGJklgtk5oLoF41
2+6W8LfPimz923jTnhejnBh4A5eVpmPiyGwdpLa7tZdlDZ6yrh45DnkRAdwOFZWH
Lp7U42q2Q39vJBLDRegWa2/H7j/pIgowgDJqcoFBDvV4+lpaBkbqGWEl6b1w0+Ts
tNJ+6a7nM9SzCuoH3MT/t25hS22lm7aPrn+kjSFkviYf3ah3MsokzxlYLyohGgDf
BxVTmIv33xymKfVkCEZArR+rNZLBpuxz6WP0Km/U6T7Zg3i/Iqd/1RpTvpUsJ6a4
5X7kGVTyYQj9zJnFKAyQxvxfm77bri6TFyZzBXgS0Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org