Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/V4X0-Rv3NWhM-rRf-az6wfmFZdg.roa
File: V4X0-Rv3NWhM-rRf-az6wfmFZdg.roa (raw, json)
Hash identifier: S00A7OCDx+ziRjUer/TPEifEKnHgeltfBUYl1vlV1R8=
Subject key identifier: 57:85:F4:F9:1B:F7:35:68:4C:FA:B4:5F:F9:AC:FA:C1:F9:85:65:D8
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 08BB7028
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/V4X0-Rv3NWhM-rRf-az6wfmFZdg.roa
Signing time: Wed 20 Apr 2022 11:59:58 +0000
ROA not before: Wed 20 Apr 2022 11:59:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 213.209.129.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
213.209.158.0/24 maxlen: 24
77.90.150.0/24 maxlen: 24
77.90.149.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.155.0/24 maxlen: 24
77.90.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146501672 (0x8bb7028)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 20 11:59:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5785f4f91bf735684cfab45ff9acfac1f98565d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9f:e0:33:ed:8b:ff:9d:06:51:e3:f8:64:f0:
1f:d0:91:79:03:76:ba:12:d3:9a:3f:22:8a:84:bc:
f7:44:d6:0f:91:b5:c0:0a:8c:23:0c:3a:f4:f5:eb:
87:94:53:fc:f2:01:b7:9d:a0:0a:6f:07:1c:21:71:
f7:7e:fc:d8:66:18:a5:08:d6:38:61:ed:26:72:2b:
6a:f1:37:21:92:18:44:52:2b:0d:e5:02:6c:3d:d9:
0e:9a:80:77:93:5f:d3:c9:57:b8:c7:c7:3e:45:36:
52:48:e9:a9:65:9b:4c:1c:52:2f:0e:52:57:60:ae:
1e:6b:db:6d:6f:ef:ff:76:ac:8c:33:df:bf:1a:38:
5c:08:23:3e:35:0b:a2:e3:82:81:e9:e1:fa:41:73:
ee:b8:c7:04:a0:e7:b6:fa:8b:a1:e0:4e:31:72:41:
66:67:38:88:87:04:67:56:9a:b0:5f:71:54:bd:ea:
23:98:d9:bd:7c:ce:8f:c5:fd:e7:89:31:30:1b:6f:
cd:38:7f:08:90:0f:da:ec:43:60:41:e8:b1:52:65:
eb:4a:38:a7:25:3c:a0:06:78:08:46:d5:29:b3:20:
60:25:e4:d1:aa:e3:8c:37:95:eb:2d:8c:ab:48:2b:
ae:fc:4d:6b:34:3a:9c:97:1c:70:2d:3d:97:51:4d:
56:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:85:F4:F9:1B:F7:35:68:4C:FA:B4:5F:F9:AC:FA:C1:F9:85:65:D8
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/V4X0-Rv3NWhM-rRf-az6wfmFZdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.149.0-77.90.150.255
77.90.153.0-77.90.155.255
77.90.179.0/24
213.209.129.0/24
213.209.133.0/24
213.209.143.0/24
213.209.145.0/24
213.209.150.0/24
213.209.158.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:34:16:6a:dc:4c:db:22:26:b0:c5:55:00:af:d3:ed:ac:a9:
89:e8:90:fe:d6:22:2a:04:63:3f:c5:37:29:48:bf:50:19:7b:
44:72:19:e9:be:9d:cb:88:31:78:c0:05:2f:5a:88:a8:8d:8a:
d5:16:da:61:53:fc:a2:bf:8e:12:ca:0b:4a:ab:90:ea:98:83:
f1:9c:e8:f0:81:14:5e:a1:c2:99:e2:f3:54:2a:4e:ee:52:4f:
dd:16:88:ef:85:8c:65:e2:3c:9f:1d:93:b4:9b:88:c3:fe:3d:
ae:d1:b4:3a:4e:43:52:d5:95:89:0c:6a:1b:06:b2:fb:a7:83:
c6:7f:51:12:bf:36:fc:da:93:be:58:ad:d9:7d:e9:a0:3c:33:
cd:47:db:ba:5a:93:4e:51:de:5e:6c:f0:27:05:df:88:ac:aa:
4b:0b:33:b3:ca:22:1d:4f:c9:8d:1c:32:28:65:d3:60:55:ec:
38:e3:99:a5:d0:f9:0a:29:0f:a8:6c:cb:85:b2:6f:46:2d:b7:
84:63:d1:06:7f:19:a0:3d:07:a0:dc:f8:77:f8:ca:12:7d:74:
63:0b:f5:90:bc:5c:eb:e2:f8:78:2a:55:b8:e3:df:b4:5c:32:
c2:6d:3d:3e:05:9c:50:c7:10:59:7a:94:12:9d:98:d4:41:ce:
40:30:66:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org