Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/RLv5VUQsY06tvbMPpdXM_AmVFCY.roa
File: RLv5VUQsY06tvbMPpdXM_AmVFCY.roa (raw, json)
Hash identifier: 0+lWMtJLN8TCpBMWNtbhlhXcwcfsj1YCh0QCWJTyJCI=
Subject key identifier: 44:BB:F9:55:44:2C:63:4E:AD:BD:B3:0F:A5:D5:CC:FC:09:95:14:26
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 084900EC
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/RLv5VUQsY06tvbMPpdXM_AmVFCY.roa
Signing time: Thu 24 Mar 2022 07:13:08 +0000
ROA not before: Thu 24 Mar 2022 07:13:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.188.0/24 maxlen: 24
213.209.147.0/24 maxlen: 24
213.209.158.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.173.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
77.90.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139002092 (0x84900ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Mar 24 07:13:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44bbf955442c634eadbdb30fa5d5ccfc09951426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:59:40:13:e5:9d:8f:77:33:05:ba:1e:fa:58:
c8:34:7f:c9:f5:50:ce:d0:5d:33:cf:ee:e6:08:a4:
fb:ec:47:b6:5c:98:cd:1e:df:49:8c:44:23:72:52:
ba:78:5a:c4:ff:f7:7d:e1:ec:70:fa:46:ae:ca:04:
ee:0c:6c:fb:2a:02:93:dc:b0:d2:18:17:22:f2:26:
26:5e:90:60:5a:e0:c2:ff:75:df:1b:a2:f3:27:3b:
30:88:44:02:11:ec:55:48:68:5f:6b:f9:ee:18:84:
13:cf:9d:18:1b:f7:21:7f:e6:80:b8:42:42:ad:e5:
64:a8:28:67:19:06:54:cd:ac:60:19:91:9e:aa:de:
34:11:c5:6c:79:72:31:f7:14:65:13:f1:2f:17:ec:
95:eb:40:f7:e5:d7:13:37:4f:f6:d4:0e:d9:5f:9a:
db:a2:ef:35:ca:50:e4:e0:27:1d:37:31:9d:91:09:
76:71:f5:a7:30:05:b3:7b:57:8a:cd:18:a5:fd:2e:
2f:30:e7:2e:8f:78:6d:61:cc:b0:6e:e1:2d:b3:59:
03:5e:c9:76:23:cd:25:8a:38:c4:fb:5e:a4:38:bd:
f3:34:a5:51:cd:f6:d2:f4:0b:b5:dc:36:ac:5c:6e:
3c:6d:32:8f:59:eb:c4:ce:93:8f:84:79:c2:ba:fa:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BB:F9:55:44:2C:63:4E:AD:BD:B3:0F:A5:D5:CC:FC:09:95:14:26
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/RLv5VUQsY06tvbMPpdXM_AmVFCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.153.0/24
77.90.173.0/24
77.90.184.0/24
77.90.188.0/24
185.230.15.0/24
213.209.147.0/24
213.209.158.0/24
Signature Algorithm: sha256WithRSAEncryption
44:ed:bc:6b:ad:fb:36:28:95:3d:bd:73:dd:98:94:0b:5e:21:
3a:70:e9:b7:81:9e:b8:82:0e:e8:81:8e:62:a0:28:c8:23:41:
ef:ac:88:0a:34:0b:e2:36:20:44:88:05:1f:7d:8b:46:51:12:
f1:a5:72:ee:2a:e7:e9:8b:19:b8:5a:da:e1:6c:e6:45:5a:21:
eb:9f:be:79:c0:09:6a:2e:57:f1:cf:e3:00:24:7a:44:31:be:
74:d7:f4:5c:b7:02:61:11:44:31:27:b8:88:19:e4:b7:c1:11:
17:0b:71:58:42:0b:6f:57:14:b0:01:33:8d:c2:5b:61:08:aa:
a7:ca:9c:20:a1:ee:86:bc:95:76:bb:41:75:15:4e:7a:46:52:
35:ac:76:09:cf:be:bd:ef:dc:95:59:81:95:01:df:01:aa:c9:
00:b8:b5:7e:11:35:31:bf:83:23:59:de:73:d7:c9:ca:a4:d8:
4c:56:9e:11:bc:40:f0:8b:7d:dd:2a:9d:5d:86:86:0e:73:97:
6f:8c:af:de:4f:d8:17:5b:d7:0e:a0:2d:2c:73:db:d8:7a:26:
a4:d8:32:c4:fc:7d:33:13:cd:ff:ca:a3:06:40:57:71:cb:3e:
69:91:0b:d3:11:58:0a:41:fc:21:0b:31:da:99:6c:c5:c9:a3:
61:b4:c4:70
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIECEkA7DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjQ3NmUxMmU4OTg3ZTViMzAyY2RjMjRiZGQ5ZGIzZmU4M2M4NDQ5MB4XDTIyMDMy
NDA3MTMwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDRiYmY5NTU0NDJj
NjM0ZWFkYmRiMzBmYTVkNWNjZmMwOTk1MTQyNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ9ZQBPlnY93MwW6HvpYyDR/yfVQztBdM8/u5gik++xHtlyY
zR7fSYxEI3JSunhaxP/3feHscPpGrsoE7gxs+yoCk9yw0hgXIvImJl6QYFrgwv91
3xui8yc7MIhEAhHsVUhoX2v57hiEE8+dGBv3IX/mgLhCQq3lZKgoZxkGVM2sYBmR
nqreNBHFbHlyMfcUZRPxLxfsletA9+XXEzdP9tQO2V+a26LvNcpQ5OAnHTcxnZEJ
dnH1pzAFs3tXis0Ypf0uLzDnLo94bWHMsG7hLbNZA17JdiPNJYo4xPtepDi98zSl
Uc320vQLtdw2rFxuPG0yj1nrxM6Tj4R5wrr6Tk8CAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBREu/lVRCxjTq29sw+l1cz8CZUUJjAfBgNVHSMEGDAWgBQ7R24S6Jh+WzAs
3CS92ds/6DyESTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8x
L1JMdjVWVVFzWTA2dHZiTVBwZFhNX0FtVkZDWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
ZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8xL08wZHVFdWlZZmxz
d0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAE1amQMEAE1arQMEAE1auAMEAE1a
vAMEALnmDwMEANXRkwMEANXRnjANBgkqhkiG9w0BAQsFAAOCAQEARO28a637NiiV
Pb1z3ZiUC14hOnDpt4GeuIIO6IGOYqAoyCNB76yICjQL4jYgRIgFH32LRlES8aVy
7irn6YsZuFra4WzmRVoh65++ecAJai5X8c/jACR6RDG+dNf0XLcCYRFEMSe4iBnk
t8ERFwtxWEILb1cUsAEzjcJbYQiqp8qcIKHuhryVdrtBdRVOekZSNax2Cc++ve/c
lVmBlQHfAarJALi1fhE1Mb+DI1nec9fJyqTYTFaeEbxA8It93SqdXYaGDnOXb4yv
3k/YF1vXDqAtLHPb2HompNgyxPx9MxPN/8qjBkBXccs+aZEL0xFYCkH8IQsx2pls
xcmjYbTEcA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org