Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/U1lxCUW82UR5nkm1T7Y48_Y3HAs.roa
File: U1lxCUW82UR5nkm1T7Y48_Y3HAs.roa (raw, json)
Hash identifier: UHaKgBWCb7+67jxoYLLtSw5s/Ljtn02qGRsEVLBrkME=
Subject key identifier: 53:59:71:09:45:BC:D9:44:79:9E:49:B5:4F:B6:38:F3:F6:37:1C:0B
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 07FFAFB4
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/U1lxCUW82UR5nkm1T7Y48_Y3HAs.roa
Signing time: Thu 10 Mar 2022 19:09:08 +0000
ROA not before: Thu 10 Mar 2022 19:09:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207795
IP address blocks: 213.209.131.0/24 maxlen: 24
213.209.139.0/24 maxlen: 24
213.209.152.0/24 maxlen: 24
77.90.159.0/24 maxlen: 24
77.90.160.0/22 maxlen: 22
77.90.169.0/24 maxlen: 24
77.90.170.0/24 maxlen: 24
77.90.171.0/24 maxlen: 24
77.90.172.0/24 maxlen: 24
77.90.175.0/24 maxlen: 24
77.90.177.0/24 maxlen: 24
77.90.183.0/24 maxlen: 24
77.90.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134197172 (0x7ffafb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Mar 10 19:09:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5359710945bcd944799e49b54fb638f3f6371c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:26:49:09:49:78:1f:fd:30:38:12:fd:ca:6a:
81:c7:9c:12:ea:33:b2:0c:33:af:5b:6b:c7:e8:23:
63:e8:83:16:0a:d2:11:a7:18:f2:78:20:6f:81:61:
8c:3a:bf:6f:48:f4:26:37:71:11:e4:dc:0d:8e:e9:
92:ee:bb:92:ea:51:41:6c:99:2e:09:5f:36:87:21:
08:8a:75:85:4d:87:68:9b:51:e8:fe:87:c4:cb:1b:
a1:51:34:54:39:2e:3d:43:45:14:d1:76:06:de:cc:
84:b0:7e:3c:37:60:05:b7:77:63:e2:f4:de:d9:93:
19:87:fc:e9:48:f5:0e:20:f7:40:25:04:80:c6:82:
0d:26:88:a1:1a:db:24:20:fc:cf:38:d7:91:04:8d:
fb:9b:20:55:3b:8f:47:c9:d9:14:82:30:de:99:74:
27:12:9b:98:dc:69:e8:52:81:68:7f:72:92:22:e8:
37:4d:9d:03:62:3c:b9:8c:3d:cf:b5:1f:d5:6d:83:
ac:39:96:4e:d0:27:66:9c:86:5f:1a:a6:87:54:c7:
6f:3a:7f:56:b5:f8:5e:3c:fb:58:63:cd:89:9d:58:
02:2b:42:8a:91:82:c1:3c:a1:a1:04:40:9c:6e:2f:
5a:26:ce:38:58:28:8e:45:ac:e4:ec:e0:3b:96:a7:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:59:71:09:45:BC:D9:44:79:9E:49:B5:4F:B6:38:F3:F6:37:1C:0B
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/U1lxCUW82UR5nkm1T7Y48_Y3HAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.159.0-77.90.163.255
77.90.169.0-77.90.172.255
77.90.175.0/24
77.90.177.0/24
77.90.183.0/24
77.90.186.0/24
213.209.131.0/24
213.209.139.0/24
213.209.152.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:21:a3:c8:2d:81:5f:96:9e:71:b5:6a:e9:15:e5:38:65:2e:
35:a4:11:2b:93:5c:63:49:af:ea:20:91:ae:1c:9b:4b:3d:ce:
a1:70:93:dc:c9:f5:af:37:fa:37:5f:d3:5c:d4:97:32:9d:8b:
28:74:ee:3b:ca:20:26:d1:b9:01:dd:4a:f5:47:73:fc:f5:c0:
30:d0:f3:62:4b:32:5d:91:92:b3:d3:3f:6f:34:f1:1e:0c:28:
1c:0e:f7:71:98:56:bc:c2:55:50:20:b1:a2:f9:b3:6b:83:a8:
95:d6:b4:53:ab:26:28:5e:4b:0a:56:ae:21:6f:3c:f0:5b:5d:
6d:0b:19:01:bd:5a:5d:c8:ea:3b:19:32:f2:13:4c:b4:55:ac:
15:60:b7:51:13:48:8d:e3:74:4c:62:e2:b3:80:17:44:f2:f0:
20:87:1c:21:c7:d8:66:a4:13:75:97:7e:d0:b4:ce:79:ee:d9:
fb:04:39:11:48:36:39:48:3a:7b:05:3c:be:e2:7b:dd:b8:87:
7e:fc:ab:40:61:ec:e5:9c:81:c0:05:57:56:bd:a2:03:73:e3:
83:b2:fe:19:bf:a0:67:a8:c4:5f:24:47:73:5a:2a:e1:c4:01:
58:0f:33:42:be:4a:09:8a:29:24:bd:7e:98:ea:e8:92:3d:bc:
e6:1b:7a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org