Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/NyxsUrszYjOGf3nXAE7ASN7aysU.roa
File: NyxsUrszYjOGf3nXAE7ASN7aysU.roa (raw, json)
Hash identifier: Y5bb+nDPevBR8StBNI0vYZdy9kPMkCDr1p36jILg6/o=
Subject key identifier: 37:2C:6C:52:BB:33:62:33:86:7F:79:D7:00:4E:C0:48:DE:DA:CA:C5
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0768E979
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/NyxsUrszYjOGf3nXAE7ASN7aysU.roa
Signing time: Thu 10 Feb 2022 11:34:00 +0000
ROA not before: Thu 10 Feb 2022 11:34:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49870
IP address blocks: 185.230.13.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
77.90.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124316025 (0x768e979)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Feb 10 11:34:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=372c6c52bb336233867f79d7004ec048dedacac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:e0:ff:26:c7:ac:0b:15:f0:b5:d4:ec:0c:
ab:85:2c:7a:d9:f0:da:f6:55:8d:e2:71:4f:db:54:
00:64:46:a6:28:a1:0e:28:2e:ba:ad:12:57:84:73:
6f:03:98:e2:90:25:24:69:06:0a:63:63:cc:fd:50:
0a:9d:f1:e7:b7:fa:e8:0a:f6:01:db:3d:35:b1:6a:
d7:80:b4:15:1e:b1:05:3e:71:5b:c9:2d:6a:4c:36:
fe:17:7e:dd:28:8c:05:4a:03:03:26:e6:7d:e4:cb:
02:92:da:d0:01:be:4c:14:42:61:9a:6f:6e:5f:1b:
f6:f0:e4:8a:f5:3b:79:ca:11:54:93:bb:23:92:88:
fe:b4:6d:02:bb:e5:e8:c2:32:ee:23:a2:e8:23:82:
a5:1b:8b:45:0e:dd:e6:f1:50:85:31:4b:ee:cc:df:
d5:24:dd:e1:c2:38:e6:90:32:18:e7:40:a7:9e:19:
94:cf:47:0b:15:13:84:30:76:73:41:72:63:1f:76:
3f:de:76:c4:77:15:6e:16:aa:f9:0b:df:4c:d5:d3:
2f:26:cc:1c:d3:71:4b:6c:91:ac:2b:8a:5b:0d:14:
9b:a4:7f:d4:e6:d6:2d:a6:1c:21:8e:24:e1:4a:83:
b3:2b:ca:12:bc:39:2c:92:3f:12:09:70:de:8d:fd:
45:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2C:6C:52:BB:33:62:33:86:7F:79:D7:00:4E:C0:48:DE:DA:CA:C5
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/NyxsUrszYjOGf3nXAE7ASN7aysU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.181.0/24
77.90.185.0/24
185.230.13.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c5:2c:fe:c7:27:fc:59:0b:bc:ea:25:db:1f:56:3e:77:f9:
f0:f2:4e:2e:08:d5:86:38:b7:07:a0:bf:26:da:52:37:b5:82:
bc:07:be:e5:19:1b:cc:b4:2b:d3:26:ca:7c:53:73:d5:f1:28:
15:3a:90:f7:8b:32:18:9b:ee:de:42:7a:4e:a0:d5:81:17:7b:
05:3d:d2:3a:76:3e:fd:bc:df:c9:95:20:0c:4e:84:13:0a:c3:
98:72:d1:20:da:06:8d:0e:4d:f4:82:48:53:52:88:71:36:bd:
cc:c6:eb:0b:06:bc:ad:6e:3f:ac:35:67:bf:67:8a:4f:a4:44:
35:2a:47:ed:b4:9d:f6:7a:5e:af:fb:36:db:f1:03:f1:bf:44:
9c:7c:7d:9e:52:33:2a:f1:e4:fc:fc:61:8c:52:19:34:44:1b:
45:44:e2:74:b6:e5:11:2e:0c:6b:1b:b3:b8:b7:19:9f:dd:59:
ec:05:ab:32:25:77:79:16:cb:be:a4:a4:b5:59:34:3e:20:50:
cc:2b:f6:c3:65:c7:44:eb:8a:51:09:52:1b:a6:1a:a9:dd:90:
ae:91:c9:44:89:71:87:e3:14:e0:f7:48:ee:1a:37:72:1f:8b:
02:35:64:52:f7:04:82:1c:17:83:93:9a:a1:a0:a0:96:a2:7a:
a2:22:96:af
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEB2jpeTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjQ3NmUxMmU4OTg3ZTViMzAyY2RjMjRiZGQ5ZGIzZmU4M2M4NDQ5MB4XDTIyMDIx
MDExMzQwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzcyYzZjNTJiYjMz
NjIzMzg2N2Y3OWQ3MDA0ZWMwNDhkZWRhY2FjNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMov4P8mx6wLFfC11OwMq4Usetnw2vZVjeJxT9tUAGRGpiih
Diguuq0SV4RzbwOY4pAlJGkGCmNjzP1QCp3x57f66Ar2Ads9NbFq14C0FR6xBT5x
W8ktakw2/hd+3SiMBUoDAybmfeTLApLa0AG+TBRCYZpvbl8b9vDkivU7ecoRVJO7
I5KI/rRtArvl6MIy7iOi6COCpRuLRQ7d5vFQhTFL7szf1STd4cI45pAyGOdAp54Z
lM9HCxUThDB2c0FyYx92P952xHcVbhaq+QvfTNXTLybMHNNxS2yRrCuKWw0Um6R/
1ObWLaYcIY4k4UqDsyvKErw5LJI/Eglw3o39RWUCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQ3LGxSuzNiM4Z/edcATsBI3trKxTAfBgNVHSMEGDAWgBQ7R24S6Jh+WzAs
3CS92ds/6DyESTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8x
L055eHNVcnN6WWpPR2YzblhBRTdBU043YXlzVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
ZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8xL08wZHVFdWlZZmxz
d0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAE1atQMEAE1auQMEALnmDTANBgkq
hkiG9w0BAQsFAAOCAQEAMcUs/scn/FkLvOol2x9WPnf58PJOLgjVhji3B6C/JtpS
N7WCvAe+5RkbzLQr0ybKfFNz1fEoFTqQ94syGJvu3kJ6TqDVgRd7BT3SOnY+/bzf
yZUgDE6EEwrDmHLRINoGjQ5N9IJIU1KIcTa9zMbrCwa8rW4/rDVnv2eKT6RENSpH
7bSd9nper/s22/ED8b9EnHx9nlIzKvHk/PxhjFIZNEQbRUTidLblES4MaxuzuLcZ
n91Z7AWrMiV3eRbLvqSktVk0PiBQzCv2w2XHROuKUQlSG6Yaqd2QrpHJRIlxh+MU
4PdI7ho3ch+LAjVkUvcEghwXg5OaoaCglqJ6oiKWrw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org