Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/QjcbFni4itF2pRDMZ_x0SH8xASQ.roa
File: QjcbFni4itF2pRDMZ_x0SH8xASQ.roa (raw, json)
Hash identifier: ZMUstuCr/F27VqOcIlscwJrmlFhGoizeDB97hCEH4+M=
Subject key identifier: 42:37:1B:16:78:B8:8A:D1:76:A5:10:CC:67:FC:74:48:7F:31:01:24
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0878E3BB
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/QjcbFni4itF2pRDMZ_x0SH8xASQ.roa
Signing time: Thu 07 Apr 2022 06:54:40 +0000
ROA not before: Thu 07 Apr 2022 06:54:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208911
IP address blocks: 213.209.151.0/24 maxlen: 24
185.230.12.0/24 maxlen: 24
77.90.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142140347 (0x878e3bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 7 06:54:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42371b1678b88ad176a510cc67fc74487f310124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:90:9a:5b:85:10:29:af:b2:f4:e7:66:9b:
46:e4:de:c2:7b:81:11:84:80:15:b4:95:5a:48:c4:
ed:cc:c6:88:f6:37:ad:e8:76:8b:80:85:04:fd:0f:
c6:58:36:6f:4a:5f:70:89:6b:84:29:f8:60:24:24:
3e:07:2d:61:25:5b:a3:63:bc:29:24:57:8d:10:45:
e0:bd:a9:be:3a:f4:99:3a:b2:8d:22:7b:c2:d2:e3:
32:4d:07:35:e9:78:a4:f8:41:8a:58:27:f7:2a:5e:
ca:c0:82:0b:e5:01:72:ed:53:71:41:ab:ff:02:eb:
f3:26:3b:bd:4f:c7:60:13:7c:c3:05:a4:72:5e:4c:
b2:cd:dd:f7:cf:be:b6:72:10:48:41:97:63:82:20:
b8:1d:44:7d:bc:5a:31:fa:1b:b3:a5:d5:37:50:f6:
f4:6b:53:aa:85:46:01:b3:f1:ef:c5:4a:38:fa:92:
93:a4:a6:d7:96:fd:63:e5:96:32:3c:35:66:3d:cf:
2d:23:a5:03:4d:38:5b:6e:99:6f:59:71:2d:20:20:
d4:85:b9:21:89:0e:ae:3f:a7:ab:2c:43:b1:9b:f0:
f7:07:ba:4e:4c:bc:cb:b6:bf:14:99:81:75:81:ad:
dd:7f:07:58:cd:90:08:51:f6:be:ed:40:6f:dc:17:
bd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:37:1B:16:78:B8:8A:D1:76:A5:10:CC:67:FC:74:48:7F:31:01:24
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/QjcbFni4itF2pRDMZ_x0SH8xASQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.181.0/24
185.230.12.0/24
213.209.151.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:7d:fb:74:ec:c2:4c:6c:ee:9f:de:75:ff:0d:e3:77:78:3d:
58:67:d0:0c:98:a2:0f:6b:7e:c4:9d:06:e3:f4:2c:fb:a6:18:
38:f5:da:c1:ed:3a:28:ae:d7:2c:c9:0e:4b:94:4c:a2:a5:98:
d3:d6:96:57:0e:b8:4f:b9:b8:25:3d:7c:32:34:d8:c6:72:18:
48:b6:5f:5a:61:18:51:69:53:e0:c1:1f:13:39:2f:97:2b:a7:
78:43:56:1d:2e:30:f4:db:c1:d0:fb:22:aa:c9:df:3f:c5:b3:
57:f6:93:16:b6:1b:7a:52:a4:48:2e:28:95:8a:2c:b6:83:1d:
68:a8:f0:80:88:d7:61:0f:3d:a9:27:2e:ad:36:69:b3:1a:53:
99:3a:c2:b5:fc:45:72:9d:32:d3:db:1f:7e:fd:43:4b:1b:c1:
9f:c5:b1:0e:1d:de:66:41:bd:06:62:b2:b9:3e:93:d8:ff:df:
db:37:58:20:ed:f7:bb:22:fb:c4:0e:2d:6a:08:ef:ea:97:51:
38:eb:59:2c:4f:cf:93:f8:0f:cb:c7:30:2c:05:76:9e:b0:17:
8b:ff:e6:7d:ed:be:81:de:bc:74:89:86:b9:8a:10:e0:fc:8c:
60:11:cc:3f:18:1b:29:d6:f3:a6:b5:d7:94:1c:3a:84:dc:a9:
28:42:86:23
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIECHjjuzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjQ3NmUxMmU4OTg3ZTViMzAyY2RjMjRiZGQ5ZGIzZmU4M2M4NDQ5MB4XDTIyMDQw
NzA2NTQ0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDIzNzFiMTY3OGI4
OGFkMTc2YTUxMGNjNjdmYzc0NDg3ZjMxMDEyNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKmKkJpbhRApr7L052abRuTewnuBEYSAFbSVWkjE7czGiPY3
reh2i4CFBP0Pxlg2b0pfcIlrhCn4YCQkPgctYSVbo2O8KSRXjRBF4L2pvjr0mTqy
jSJ7wtLjMk0HNel4pPhBilgn9ypeysCCC+UBcu1TcUGr/wLr8yY7vU/HYBN8wwWk
cl5Mss3d98++tnIQSEGXY4IguB1EfbxaMfobs6XVN1D29GtTqoVGAbPx78VKOPqS
k6Sm15b9Y+WWMjw1Zj3PLSOlA004W26Zb1lxLSAg1IW5IYkOrj+nqyxDsZvw9we6
Tky8y7a/FJmBdYGt3X8HWM2QCFH2vu1Ab9wXvbMCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBRCNxsWeLiK0XalEMxn/HRIfzEBJDAfBgNVHSMEGDAWgBQ7R24S6Jh+WzAs
3CS92ds/6DyESTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8x
L1FqY2JGbmk0aXRGMnBSRE1aX3gwU0g4eEFTUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
ZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8xL08wZHVFdWlZZmxz
d0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAE1atQMEALnmDAMEANXRlzANBgkq
hkiG9w0BAQsFAAOCAQEApX37dOzCTGzun951/w3jd3g9WGfQDJiiD2t+xJ0G4/Qs
+6YYOPXawe06KK7XLMkOS5RMoqWY09aWVw64T7m4JT18MjTYxnIYSLZfWmEYUWlT
4MEfEzkvlyuneENWHS4w9NvB0PsiqsnfP8WzV/aTFrYbelKkSC4olYostoMdaKjw
gIjXYQ89qScurTZpsxpTmTrCtfxFcp0y09sffv1DSxvBn8WxDh3eZkG9BmKyuT6T
2P/f2zdYIO33uyL7xA4tagjv6pdROOtZLE/Pk/gPy8cwLAV2nrAXi//mfe2+gd68
dImGuYoQ4PyMYBHMPxgbKdbzprXXlBw6hNypKEKGIw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org