Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/TdWifXJcUDuTDde9PQU1jlflck0.roa
File: TdWifXJcUDuTDde9PQU1jlflck0.roa (raw, json)
Hash identifier: 1dLkkUVL5aHK014hu+nHeejPvIWGtZJ8ZZkYJMb34z0=
Subject key identifier: 4D:D5:A2:7D:72:5C:50:3B:93:0D:D7:BD:3D:05:35:8E:57:E5:72:4D
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 097BEBD5
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/TdWifXJcUDuTDde9PQU1jlflck0.roa
Signing time: Tue 07 Jun 2022 08:47:20 +0000
ROA not before: Tue 07 Jun 2022 08:47:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
77.90.191.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.164.0/24 maxlen: 24
77.90.181.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
213.209.144.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159116245 (0x97bebd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 7 08:47:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4dd5a27d725c503b930dd7bd3d05358e57e5724d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:75:c2:68:63:9d:b7:e9:6f:c4:9b:6a:08:
ba:4a:f2:dd:d7:49:fb:25:d0:fa:d9:6a:2b:16:49:
5c:05:c6:5a:b5:f1:4a:81:f0:1a:e3:55:9c:5d:d8:
8a:44:78:16:fd:51:aa:cd:12:d0:8a:39:29:9d:ed:
64:34:4f:95:68:48:b1:69:33:cf:f7:d8:9e:34:7a:
af:f0:b4:5a:ee:3a:52:87:53:42:31:80:49:83:f3:
f9:1a:b1:8b:7e:8a:01:a8:9e:49:f2:fc:a1:62:a8:
42:96:cc:7e:47:65:48:06:a1:4f:22:45:e8:ef:dc:
31:be:e2:ca:76:f2:e3:7d:ec:34:00:3d:bb:c8:b6:
ed:1d:81:7a:58:c6:4d:90:61:62:e8:4e:c5:be:ed:
93:4e:f0:21:48:50:a9:16:32:10:bc:d7:16:78:a5:
67:70:26:44:95:32:d7:56:73:25:c0:da:36:33:03:
d3:c3:cb:52:8a:40:f5:3b:8c:ce:e5:ce:4a:3f:28:
6f:4b:7f:3b:9a:66:47:39:75:77:49:84:ad:5f:8a:
0a:2d:6a:00:a8:96:fe:b2:05:e4:ea:d8:1d:96:20:
11:44:9e:a1:5a:ae:77:24:27:7b:9f:03:bf:8b:6f:
45:bc:61:56:ce:c8:54:64:5d:4d:e2:af:ab:79:cc:
68:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D5:A2:7D:72:5C:50:3B:93:0D:D7:BD:3D:05:35:8E:57:E5:72:4D
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/TdWifXJcUDuTDde9PQU1jlflck0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.164.0/24
77.90.181.0/24
77.90.191.0/24
185.230.15.0/24
213.209.130.0/24
213.209.136.0/24
213.209.138.0/24
213.209.144.0/24
213.209.159.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
20:20:55:f7:5c:23:2c:b4:6b:21:cb:63:17:8c:a4:53:eb:19:
35:a4:20:54:b2:6f:f0:41:1b:15:1b:ac:97:77:bd:4d:da:78:
eb:96:1a:e1:44:9b:e8:f4:42:e5:9b:44:f8:b0:3a:26:0e:f9:
d5:f5:ed:35:95:15:7a:29:a5:db:1b:9d:a9:c3:8a:d6:55:e2:
b5:27:01:97:54:b5:48:19:fe:df:b1:ab:34:24:cc:d1:0d:8b:
f2:79:43:2a:4d:7d:0a:00:24:8f:ea:9b:c1:5c:61:84:b2:e3:
56:bf:b7:74:05:f1:38:91:65:ac:c9:e4:41:54:a2:2f:4f:83:
21:4b:04:d8:78:9f:3a:23:f6:3d:bf:27:e7:9e:ed:84:bb:c4:
f9:1b:63:35:02:02:1d:a2:16:70:92:18:7e:52:2a:59:51:ac:
9e:e5:05:fc:71:10:aa:6d:8b:83:ab:44:55:d3:6d:73:ad:ae:
a0:47:2b:af:28:b5:e0:1f:ea:f1:ca:09:f5:eb:28:e8:df:01:
60:58:74:fc:7b:85:dc:b5:c5:1e:02:2e:a8:a9:ac:29:3a:95:
96:ec:04:ba:df:c8:c0:a3:19:85:8e:37:a0:2d:6e:95:38:38:
da:87:d2:cf:c5:3e:dd:1b:b8:cf:e8:03:8b:46:76:b9:3e:41:
e5:dd:12:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org