Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/UfDVs8P8T3q7CwhTF7OLutQaX_E.roa
File: UfDVs8P8T3q7CwhTF7OLutQaX_E.roa (raw, json)
Hash identifier: gFZTY1veGuPpsbB5mMdtcpSbjNQXn6TF4F9fiuTH30A=
Subject key identifier: 51:F0:D5:B3:C3:FC:4F:7A:BB:0B:08:53:17:B3:8B:BA:D4:1A:5F:F1
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 083E2121
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/UfDVs8P8T3q7CwhTF7OLutQaX_E.roa
Signing time: Tue 22 Mar 2022 10:40:33 +0000
ROA not before: Tue 22 Mar 2022 10:40:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 77.90.191.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
77.90.152.0/24 maxlen: 24
77.90.149.0/24 maxlen: 24
77.90.179.0/24 maxlen: 24
77.90.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138289441 (0x83e2121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Mar 22 10:40:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51f0d5b3c3fc4f7abb0b085317b38bbad41a5ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:4b:76:ac:df:f8:b0:26:bf:bc:da:fd:d9:
42:de:78:66:75:94:f9:d2:aa:0d:cf:13:9f:05:83:
e9:d7:92:23:cf:d5:8a:7e:40:ad:cf:c6:80:bb:83:
81:2d:d1:e5:ff:4a:e2:9c:96:2e:99:e8:d6:8b:59:
07:75:d0:15:bc:af:d7:60:a6:fb:9f:ee:d6:93:2c:
66:30:38:f3:af:32:eb:55:6d:05:20:69:39:77:ca:
dc:e8:0e:bf:e8:53:2e:be:ba:7b:24:2c:e2:03:22:
6e:e0:17:e4:ea:21:22:56:bb:f9:13:a1:47:3b:4c:
d7:58:77:51:ae:7d:29:44:21:72:66:06:32:dc:c9:
2b:e7:ee:9c:42:21:4e:98:73:86:4e:e5:88:95:9c:
42:f6:49:e0:78:72:41:fa:4d:4d:62:67:10:c4:67:
5a:6a:67:00:13:a0:02:2c:f3:a3:24:32:cb:74:34:
a6:95:db:63:1a:3e:29:12:c0:5b:18:2d:0e:0b:35:
98:6f:f5:95:d7:3d:a9:dc:09:f4:0c:6c:fc:90:62:
2a:49:14:77:71:22:7a:77:87:cd:95:f2:e1:10:e8:
6a:8a:f5:8e:91:c1:c1:0c:c5:4d:43:51:6a:d2:86:
d4:ce:b5:00:08:91:c9:c9:5d:d8:e2:5f:c6:c9:e9:
b0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F0:D5:B3:C3:FC:4F:7A:BB:0B:08:53:17:B3:8B:BA:D4:1A:5F:F1
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/UfDVs8P8T3q7CwhTF7OLutQaX_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.149.0/24
77.90.152.0/24
77.90.179.0-77.90.180.255
77.90.191.0/24
213.209.134.0/24
213.209.143.0/24
213.209.145.0/24
213.209.149.0/24
213.209.156.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:87:c9:2f:56:16:ac:85:2b:28:0f:66:d9:51:ab:b8:08:6f:
a7:05:e1:85:62:7d:34:4e:b7:49:b6:d7:45:5f:df:3f:3e:12:
78:f3:f9:e4:10:b0:7c:c0:11:69:8b:f4:09:e8:8d:ed:b6:9b:
e3:b0:44:00:db:1a:d5:b1:e4:24:03:1b:72:9c:b5:3b:8d:4a:
22:91:57:21:7a:29:28:d7:c5:a5:53:b9:6b:4f:41:ad:9f:1a:
5a:78:2a:cb:44:25:ab:80:86:44:9d:6f:05:1e:3c:f7:cc:47:
07:7d:26:a3:11:f2:49:75:c8:c5:75:7a:61:37:9c:45:96:90:
2c:7d:ac:95:cf:9b:54:ad:4f:07:2c:29:63:0e:2a:e8:5c:4c:
6d:ae:21:17:8c:20:97:70:8c:86:a7:d0:9d:3b:47:18:ce:79:
17:47:1a:90:97:d0:4c:92:4e:50:b5:79:b6:1b:07:97:09:3f:
e4:9c:df:6a:77:59:55:12:12:e4:53:f2:0e:42:4a:28:dd:1f:
14:cf:f3:0e:36:94:64:45:24:e7:0a:d4:a6:9e:a6:61:a5:4f:
89:e3:8c:58:cb:7f:7d:4d:fb:1f:53:ef:c0:8d:21:b7:51:27:
b7:63:52:21:9e:1d:4c:8a:e7:fd:fd:63:06:70:b0:d9:a6:8f:
99:93:44:61
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIECD4hITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjQ3NmUxMmU4OTg3ZTViMzAyY2RjMjRiZGQ5ZGIzZmU4M2M4NDQ5MB4XDTIyMDMy
MjEwNDAzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTFmMGQ1YjNjM2Zj
NGY3YWJiMGIwODUzMTdiMzhiYmFkNDFhNWZmMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMebS3as3/iwJr+82v3ZQt54ZnWU+dKqDc8TnwWD6deSI8/V
in5Arc/GgLuDgS3R5f9K4pyWLpno1otZB3XQFbyv12Cm+5/u1pMsZjA4868y61Vt
BSBpOXfK3OgOv+hTLr66eyQs4gMibuAX5OohIla7+ROhRztM11h3Ua59KUQhcmYG
MtzJK+funEIhTphzhk7liJWcQvZJ4HhyQfpNTWJnEMRnWmpnABOgAizzoyQyy3Q0
ppXbYxo+KRLAWxgtDgs1mG/1ldc9qdwJ9Axs/JBiKkkUd3EieneHzZXy4RDoaor1
jpHBwQzFTUNRatKG1M61AAiRycld2OJfxsnpsDECAwEAAaOCAkEwggI9MB0GA1Ud
DgQWBBRR8NWzw/xPersLCFMXs4u61Bpf8TAfBgNVHSMEGDAWgBQ7R24S6Jh+WzAs
3CS92ds/6DyESTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8x
L1VmRFZzOFA4VDNxN0N3aFRGN09MdXRRYVhfRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
ZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8xL08wZHVFdWlZZmxz
d0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBX
BggrBgEFBQcBBwEB/wRIMEYwRAQCAAEwPgMEAE1alQMEAE1amDAMAwQATVqzAwQA
TVq0AwQATVq/AwQA1dGGAwQA1dGPAwQA1dGRAwQA1dGVAwQB1dGcMA0GCSqGSIb3
DQEBCwUAA4IBAQC0h8kvVhashSsoD2bZUau4CG+nBeGFYn00TrdJttdFX98/PhJ4
8/nkELB8wBFpi/QJ6I3ttpvjsEQA2xrVseQkAxtynLU7jUoikVcheiko18WlU7lr
T0GtnxpaeCrLRCWrgIZEnW8FHjz3zEcHfSajEfJJdcjFdXphN5xFlpAsfayVz5tU
rU8HLCljDiroXExtriEXjCCXcIyGp9CdO0cYznkXRxqQl9BMkk5QtXm2GweXCT/k
nN9qd1lVEhLkU/IOQkoo3R8Uz/MONpRkRSTnCtSmnqZhpU+J44xYy399TfsfU+/A
jSG3USe3Y1Ihnh1Miuf9/WMGcLDZpo+Zk0Rh
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org