Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/URvtQ5MVR0e636qG4q6oTpLqH9k.roa
File: URvtQ5MVR0e636qG4q6oTpLqH9k.roa (raw, json)
Hash identifier: qPo0cdqq9a/fH1Z1OlW5NoMNYm1O3i6F6x2YgOU8XxE=
Subject key identifier: 51:1B:ED:43:93:15:47:47:BA:DF:AA:86:E2:AE:A8:4E:92:EA:1F:D9
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 08A0637C
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/URvtQ5MVR0e636qG4q6oTpLqH9k.roa
Signing time: Thu 14 Apr 2022 11:39:43 +0000
ROA not before: Thu 14 Apr 2022 11:39:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.157.0/24 maxlen: 24
77.90.180.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
77.90.184.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
213.209.147.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.158.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144728956 (0x8a0637c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 14 11:39:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=511bed4393154747badfaa86e2aea84e92ea1fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:eb:f7:d1:91:4c:98:da:55:4b:71:fc:64:ca:
c5:1d:58:d5:51:15:eb:9c:3f:0e:e4:a6:7c:d1:ea:
cb:fb:05:18:ca:ad:c1:f3:29:c1:79:7e:d3:18:75:
53:e0:33:ad:c7:64:95:7e:ab:77:0c:96:c2:24:78:
f7:aa:13:79:c3:9e:82:6f:a9:aa:ec:ba:6b:3d:bc:
26:1b:5d:54:d1:af:74:30:bd:86:e4:79:fe:56:4f:
2e:d4:d1:a6:64:ce:90:40:61:0b:51:0e:32:ab:3f:
59:1a:9b:4c:b4:a6:09:68:7d:6a:da:87:c0:27:29:
54:58:d9:72:d1:97:92:80:f5:d4:16:df:13:62:f0:
4a:d6:3c:76:65:fa:a5:48:b5:78:9b:99:d9:d3:8e:
4c:ec:87:7d:45:24:53:7e:a9:d3:9c:b0:0a:d8:64:
3b:b1:b2:c8:27:47:7b:19:64:c4:5d:07:20:4b:40:
2b:48:e6:56:d8:7c:8c:74:98:d6:84:6d:08:aa:1a:
ef:ac:49:96:ce:52:23:37:15:cb:19:da:4a:5f:70:
75:2d:2a:49:8f:b1:12:cd:6c:e8:04:6e:61:c6:51:
75:9c:aa:84:d7:93:4f:0b:ec:51:3c:f3:73:ec:5e:
a6:77:5d:d8:14:ce:29:f3:23:2d:5e:50:d1:a1:29:
3f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1B:ED:43:93:15:47:47:BA:DF:AA:86:E2:AE:A8:4E:92:EA:1F:D9
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/URvtQ5MVR0e636qG4q6oTpLqH9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.138.255
77.90.140.0/24
77.90.142.0-77.90.148.255
77.90.157.0/24
77.90.180.0/24
77.90.184.0/23
185.230.13.0-185.230.14.255
213.209.130.0/24
213.209.134.0/24
213.209.136.0/24
213.209.138.0/24
213.209.146.0/23
213.209.156.0-213.209.158.255
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
9d:33:7b:b3:ca:15:b6:d5:a1:e5:d5:35:36:18:1c:f1:1b:a5:
23:65:f8:8d:6e:12:17:50:d6:2f:a1:ed:28:be:a4:89:b7:f3:
0d:3b:52:71:63:64:a9:fa:cc:fa:97:79:b9:9d:b2:ac:16:14:
a3:23:4d:69:cf:04:04:e9:7d:db:5a:63:c0:ba:05:88:70:6f:
e3:26:a2:3a:15:d8:8e:64:ea:51:f0:30:11:85:17:34:df:55:
02:6b:61:c3:dc:7c:53:4d:9f:b2:e5:0d:8c:1a:83:3b:c4:05:
b1:b7:ce:80:38:9d:82:70:57:3c:77:8d:0a:50:78:19:40:d4:
9c:1a:57:01:b9:5e:41:55:78:17:f4:c8:f5:b3:3c:b6:f1:ef:
8b:09:31:bb:ba:be:b4:c2:74:33:ec:c7:a9:fa:0b:12:52:d7:
c3:e2:fc:b3:b9:d1:0e:73:70:50:d6:f5:ae:5a:a0:e3:89:46:
7d:56:5a:5a:38:c1:fe:e5:d1:1b:92:7c:24:21:53:ee:00:7f:
ad:54:9b:b3:9b:9f:09:1e:cf:b4:c1:f0:8c:57:6c:54:f7:f8:
79:c7:53:8a:03:f8:1d:41:57:89:13:9a:b5:57:91:a0:0e:c6:
83:b4:ee:90:b5:06:35:4e:10:89:05:f4:92:ed:b1:79:99:6e:
ee:75:93:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org