Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/R-nmBcLnjqne9HbyE-oFxqsfHIU.roa
File: R-nmBcLnjqne9HbyE-oFxqsfHIU.roa (raw, json)
Hash identifier: V3Z6zynnZQcnZ8Wei9gvTvvK79w01sjvBbR/er54YcA=
Subject key identifier: 47:E9:E6:05:C2:E7:8E:A9:DE:F4:76:F2:13:EA:05:C6:AB:1F:1C:85
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01850FDFF3242A3F037E6019DA6F55DC135E
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/R-nmBcLnjqne9HbyE-oFxqsfHIU.roa
Signing time: Wed 14 Dec 2022 09:03:33 +0000
ROA not before: Wed 14 Dec 2022 09:03:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.151.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.156.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
77.90.184.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.151.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1280:24::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:df:f3:24:2a:3f:03:7e:60:19:da:6f:55:dc:13:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Dec 14 09:03:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47e9e605c2e78ea9def476f213ea05c6ab1f1c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:32:1e:98:e8:9a:c7:1e:3e:7f:c5:82:d9:20:
9a:60:9e:f3:95:6f:5b:65:4a:67:84:fe:81:76:9d:
9b:a7:51:21:f6:5a:6a:92:8b:eb:b7:84:cf:15:75:
a2:bc:fa:c0:c5:31:13:d5:04:f7:d0:d3:cc:a9:02:
2b:81:8f:7a:d5:fe:b6:f4:fb:44:c0:c9:4e:ac:16:
3f:d2:59:ac:ae:1a:b3:f6:d8:60:2f:97:fd:9b:64:
ab:ff:2e:21:af:5d:9a:b6:f7:9c:08:96:f9:a3:40:
75:c5:0a:e9:2e:14:38:aa:03:c2:e5:33:00:53:19:
80:3c:f4:a0:df:25:2b:17:bc:e9:cf:4f:dc:4c:6c:
66:ad:27:7d:16:84:e5:da:0b:67:78:0a:0b:74:82:
04:2b:a5:2c:a8:02:7e:05:15:4b:bb:55:c5:24:46:
50:ca:ac:51:de:1a:d6:a9:36:23:5c:94:aa:86:0f:
d5:db:9e:d0:1d:6b:31:a2:6d:65:37:b2:8f:74:4c:
0e:55:9d:87:fe:fc:d9:3b:d8:11:40:26:32:06:26:
a0:19:39:06:56:2d:f3:09:70:80:99:47:e2:66:30:
b6:31:71:e7:49:a0:47:8e:f6:42:36:0f:4a:18:a2:
45:8f:03:ab:48:eb:2c:70:d0:20:e8:47:f7:0c:57:
bd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E9:E6:05:C2:E7:8E:A9:DE:F4:76:F2:13:EA:05:C6:AB:1F:1C:85
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/R-nmBcLnjqne9HbyE-oFxqsfHIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.151.0/24
77.90.153.0/24
77.90.156.0/24
77.90.184.0/23
77.90.188.0/24
185.230.14.0/24
213.209.136.0/24
213.209.138.0/24
213.209.143.0/24
213.209.146.0/24
213.209.149.0-213.209.151.255
213.209.156.0/23
213.209.159.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
4f:9f:db:dc:ce:ab:27:31:85:2c:99:a9:de:2b:af:6f:94:a3:
2d:73:8b:bf:3b:f5:12:2b:4d:e6:d0:92:8b:cb:0f:5c:dc:8e:
bb:0d:a5:ef:2c:f3:59:61:95:f7:65:0a:f2:2d:c5:44:b3:c2:
e8:a3:3c:dc:2e:d2:71:ca:55:81:9f:71:4c:2f:9f:64:e0:90:
10:99:fe:2a:37:23:b0:a0:f0:12:d5:63:2a:fa:d6:8b:c8:d2:
29:3c:8d:c4:a6:03:06:a5:e5:31:d0:34:67:f8:f2:9e:10:73:
80:f4:04:47:db:14:20:63:ef:58:2b:43:ad:b5:56:cc:22:a6:
0a:fa:d6:bd:77:e2:ab:57:6c:6d:ed:2e:55:47:fc:0f:c5:4a:
e9:79:7b:0e:9a:6b:bd:be:19:52:c1:50:60:9f:f0:32:c9:a1:
2e:df:6d:f1:f8:13:0c:28:d2:ba:d9:1b:f4:bf:1c:8a:e7:36:
43:1b:90:8b:78:77:67:c6:f8:63:cd:d4:1d:cd:5f:c4:1c:a7:
60:11:72:b6:3b:26:06:87:fa:e8:cb:5e:90:2b:b6:e1:d4:e4:
6b:d1:a6:b1:be:37:d5:a9:29:cd:d6:b7:be:eb:ce:1f:0a:3f:
67:65:d2:e2:0a:da:15:56:3d:40:9a:a3:fb:bc:b9:1f:75:d9:
e9:e9:e4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org