Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/OsR6srAYhFZtc3hdCv7QbDilizw.roa
File: OsR6srAYhFZtc3hdCv7QbDilizw.roa (raw, json)
Hash identifier: 2kaOB2qlBeMBJ5c+DOH96v/iGP/fi8AYMjOAKPJyozs=
Subject key identifier: 3A:C4:7A:B2:B0:18:84:56:6D:73:78:5D:0A:FE:D0:6C:38:A5:8B:3C
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 080AE04D
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/OsR6srAYhFZtc3hdCv7QbDilizw.roa
Signing time: Fri 11 Mar 2022 18:06:09 +0000
ROA not before: Fri 11 Mar 2022 18:06:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134930509 (0x80ae04d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Mar 11 18:06:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ac47ab2b01884566d73785d0afed06c38a58b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b9:c2:84:6c:ce:76:48:97:be:96:6b:6a:19:
e8:ed:67:83:e6:05:b1:68:8b:b6:d4:75:ff:3e:31:
10:65:3d:f1:98:fe:ce:69:ab:1f:c2:3a:94:0b:d3:
13:17:05:c9:ab:b6:ae:6e:5d:79:23:df:f5:fe:9b:
0a:3c:bd:f1:9d:25:72:09:47:15:99:ae:b4:c0:4a:
a0:51:18:7f:5d:2c:a6:f3:c6:a9:9a:2a:80:b8:8f:
b6:7a:ec:a5:69:c6:9c:99:93:41:d7:a5:3d:bd:f9:
f5:a4:47:7a:5d:39:b1:ea:57:2b:bb:5f:c2:df:0e:
4f:2a:90:69:58:1d:25:f9:3e:11:3b:05:f9:66:e4:
bf:a1:e3:8d:54:10:09:29:e6:fd:55:07:fc:ef:63:
9f:29:73:0d:6b:73:07:6c:5c:a0:fe:c5:e1:fe:7a:
dd:58:b9:a1:f3:50:9f:80:25:f3:6f:c1:04:d3:6f:
51:06:16:9a:71:e6:88:df:d9:f1:9f:63:f6:28:14:
cb:09:26:bc:94:6c:d6:5f:22:be:01:fb:6a:25:0d:
62:be:95:a5:80:d8:18:e5:39:cf:19:73:24:8c:9f:
ab:90:7c:6b:10:51:cd:13:e5:4a:b8:6f:7d:a1:a8:
1d:ae:11:37:00:96:e2:1e:a5:cb:ec:93:05:87:69:
32:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C4:7A:B2:B0:18:84:56:6D:73:78:5D:0A:FE:D0:6C:38:A5:8B:3C
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/OsR6srAYhFZtc3hdCv7QbDilizw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
213.209.130.0/24
213.209.133.0/24
213.209.136.0/24
213.209.138.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
8f:d5:c1:1b:60:74:c4:1a:b6:56:2c:be:5d:96:ab:05:bf:bf:
04:91:b9:c0:0c:94:36:dd:ef:e7:37:6c:31:6e:87:26:2b:f4:
7d:7d:c8:00:e0:bf:91:1b:6c:5e:69:f4:bf:62:5c:04:13:23:
f0:62:9d:65:c3:d2:8f:cb:26:55:c9:73:1f:76:8b:a4:75:a8:
ef:a6:fa:59:80:c5:5e:f8:13:27:d5:f9:6f:f3:12:b3:2a:07:
2d:cd:1b:77:a3:93:79:f7:84:ea:60:94:3b:81:43:93:2e:7b:
bb:c3:83:fc:62:9b:2f:0c:1e:6b:b8:09:bc:76:ac:cd:58:9d:
12:1f:5d:2f:ce:3d:8e:b6:1c:b4:53:4f:f7:f7:0a:0c:b9:5c:
9b:95:bc:04:2c:36:9f:2f:32:c5:06:86:d4:42:d3:95:5f:d3:
87:39:a8:2c:2b:38:e4:26:6b:30:e8:02:59:00:7b:ec:44:fd:
c4:29:58:06:c2:62:66:4f:89:d1:6c:e1:c2:4f:90:cb:af:ae:
33:92:54:6d:79:1c:86:47:19:10:dc:22:cf:f5:18:22:e1:12:
4f:b3:b8:b2:fe:a6:9c:61:95:0c:ff:3e:4a:12:50:32:83:49:
db:2f:e5:87:56:a6:53:fd:7a:ed:65:ca:62:ae:cc:c2:e8:73:
fe:10:93:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org