Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/VT1lt2MMq9_sucVKBvdetHb-OGw.roa
File: VT1lt2MMq9_sucVKBvdetHb-OGw.roa (raw, json)
Hash identifier: A+65hGlqpnkyvOufMEcC2rzp5oT16xZ3BUGdeh99GmE=
Subject key identifier: 55:3D:65:B7:63:0C:AB:DF:EC:B9:C5:4A:06:F7:5E:B4:76:FE:38:6C
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01822AA79AF2DC875506458EA135A987C613
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/VT1lt2MMq9_sucVKBvdetHb-OGw.roa
Signing time: Sat 23 Jul 2022 10:43:23 +0000
ROA not before: Sat 23 Jul 2022 10:43:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 213.209.136.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
77.90.164.0/24 maxlen: 24
77.90.166.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
77.90.178.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:2a:a7:9a:f2:dc:87:55:06:45:8e:a1:35:a9:87:c6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 23 10:43:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=553d65b7630cabdfecb9c54a06f75eb476fe386c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4a:90:f1:aa:07:de:dd:74:eb:37:0f:e7:fe:
8a:fd:55:ad:12:60:eb:f2:a5:40:3e:74:aa:56:15:
f4:d3:5a:04:08:3b:98:b7:db:8c:2b:fa:0b:8f:7a:
46:c6:44:c4:5b:03:92:c5:18:3b:a5:4d:6a:ad:bd:
36:d8:4a:b7:a1:16:be:c5:92:25:f2:89:9c:37:34:
df:d9:09:94:76:5f:ce:0a:56:70:62:a5:16:e7:a6:
c5:a5:28:8a:1b:f9:e9:b0:2d:92:1c:62:07:19:49:
43:7d:a9:58:72:f3:1d:68:f0:44:d3:76:c5:32:3b:
6e:a0:96:68:8b:6d:73:22:b1:08:ec:fb:0c:23:0e:
7c:2b:e7:5f:71:bd:37:48:c5:c1:80:07:f6:a8:86:
68:7c:59:b4:68:67:a3:53:c0:5a:5a:fa:7e:9f:29:
15:6a:fe:bb:6b:da:55:2e:2a:db:75:cb:c5:0e:6e:
da:bc:ab:d9:34:89:07:42:68:29:e2:86:c4:45:62:
c5:37:b9:df:9c:07:ab:90:51:81:c0:62:39:5f:56:
2c:44:ff:cd:ae:37:d1:79:26:df:a4:72:09:bd:9c:
e7:cb:b6:ae:81:be:e6:ab:11:49:4b:c8:5d:49:88:
1a:d5:2c:eb:42:b6:5e:04:9b:df:6a:84:b0:82:47:
0c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3D:65:B7:63:0C:AB:DF:EC:B9:C5:4A:06:F7:5E:B4:76:FE:38:6C
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/VT1lt2MMq9_sucVKBvdetHb-OGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.164.0/24
77.90.166.0/24
77.90.178.0/24
77.90.185.0/24
185.230.13.0-185.230.14.255
213.209.136.0/24
213.209.143.0/24
213.209.146.0/24
213.209.156.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:5c:b1:dd:bf:bc:31:5e:59:cd:1f:0c:cf:16:18:91:0a:18:
d2:58:a2:1b:65:31:94:3c:6b:7a:24:bb:60:da:51:53:6d:04:
6b:7f:24:a9:30:f5:d0:39:42:1d:56:f0:55:c6:1c:5a:b4:d0:
45:a1:30:48:bb:d9:42:a2:3a:1a:b3:6d:47:23:95:10:e3:fc:
a8:8d:0f:c9:07:42:fd:38:a8:21:42:dd:55:3f:42:61:c4:c0:
1a:e2:13:df:46:20:75:10:f6:14:75:4b:04:24:9d:62:62:02:
a0:52:bd:9c:dd:b5:2d:09:97:9e:aa:00:2b:f6:3f:18:bf:d5:
51:64:3d:e0:23:40:2e:88:f5:3b:df:3e:2d:71:e4:53:59:d8:
7c:74:73:1a:71:02:82:b9:76:24:39:a1:ac:8e:b4:a6:72:2a:
6e:1a:4a:0d:18:7a:5d:d4:5d:4a:56:ee:c3:7a:8e:8b:d1:d9:
4c:44:e1:08:01:bc:7a:88:b5:c3:76:58:51:77:b0:b6:58:ca:
11:63:24:68:3e:e0:2c:64:06:66:78:31:04:72:e2:2e:0e:d7:
a5:3d:0a:f4:ff:72:0a:55:2a:80:59:2f:f6:dc:c5:a1:d0:7b:
56:81:69:6d:c1:b4:84:c7:3f:94:84:c2:aa:34:8b:a4:d7:5c:
e5:72:93:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org