Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/VoVnQopRqKz4Mr5p0L0S1skYmvw.roa
File: VoVnQopRqKz4Mr5p0L0S1skYmvw.roa (raw, json)
Hash identifier: P21qocsT9fG5BZdUd+iW4t/Yraqke7cy3+SjDNl2SgU=
Subject key identifier: 56:85:67:42:8A:51:A8:AC:F8:32:BE:69:D0:BD:12:D6:C9:18:9A:FC
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 096B99F6
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/VoVnQopRqKz4Mr5p0L0S1skYmvw.roa
Signing time: Fri 03 Jun 2022 16:23:20 +0000
ROA not before: Fri 03 Jun 2022 16:23:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
77.90.191.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.164.0/24 maxlen: 24
77.90.178.0/24 maxlen: 24
77.90.181.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
213.209.144.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158046710 (0x96b99f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 3 16:23:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=568567428a51a8acf832be69d0bd12d6c9189afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:a0:f5:2d:7f:6a:71:97:2e:f4:26:be:86:
21:42:95:4c:ec:ff:6c:85:b7:74:18:db:71:98:68:
bf:17:1a:b0:bc:5a:dc:34:c0:ad:d8:a3:9d:22:47:
2d:f7:2d:a3:be:ce:e6:e0:48:07:ea:be:97:cd:5e:
0b:00:42:44:dc:f1:1d:56:b3:0b:a9:19:5b:9a:a4:
b2:67:ac:86:a5:85:f0:8d:3c:56:d1:75:e3:4f:19:
6a:dd:c5:3c:77:71:02:c5:32:cf:07:80:2a:36:8a:
ef:15:5c:6d:d9:a7:bf:f4:4f:90:64:e0:e1:03:83:
01:3b:c6:19:bb:47:df:46:2d:cb:18:fe:d1:6b:6e:
79:55:6f:03:c0:e9:ab:95:95:3d:f5:91:72:99:94:
ca:20:b6:9c:ad:27:24:ab:a8:96:a4:ad:02:45:55:
23:fd:88:dc:fe:6c:e0:bd:0a:91:88:9b:19:b9:dd:
da:b5:45:99:c0:ea:a6:ef:75:6a:6d:8a:c2:11:b5:
f1:e7:cc:f9:42:05:6b:a5:37:ce:d2:3a:79:61:13:
36:65:40:55:dc:8b:a1:db:8a:60:6d:ef:21:ad:6b:
3e:13:cd:52:22:76:8b:1f:41:9a:0d:24:4d:95:f7:
bb:d6:34:dc:3b:60:be:12:4d:88:97:9f:ae:72:6b:
f8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:85:67:42:8A:51:A8:AC:F8:32:BE:69:D0:BD:12:D6:C9:18:9A:FC
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/VoVnQopRqKz4Mr5p0L0S1skYmvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.164.0/24
77.90.178.0/24
77.90.181.0/24
77.90.191.0/24
185.230.13.0/24
213.209.130.0/24
213.209.136.0/24
213.209.138.0/24
213.209.144.0/24
213.209.156.0/24
213.209.159.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
0e:60:b0:64:eb:91:fe:ff:30:87:88:8c:bc:cd:87:1d:1b:f0:
dd:54:4b:81:25:91:0f:4c:91:28:cd:ec:f8:68:3f:a9:27:4f:
c2:db:85:b2:3d:45:a5:64:f5:31:1f:f3:74:a6:13:8c:4d:d7:
f2:88:9e:e7:40:90:ea:09:4e:38:9f:be:c6:3c:4d:bf:d1:31:
eb:b1:7b:ef:4e:c4:b0:62:11:f4:cc:fd:de:a0:ba:97:7b:a2:
48:0d:cb:26:7d:27:a2:8c:47:f5:bf:b8:c3:4a:e7:6b:70:12:
33:66:c0:4c:06:2e:e3:09:13:d2:93:58:48:e8:c9:44:59:4f:
e9:4f:7d:17:e9:ab:14:bf:07:35:65:a0:49:ee:23:4f:7a:fc:
1c:8e:e2:25:5b:70:3c:6e:72:48:16:ef:91:52:22:41:35:e5:
b0:70:17:6b:cb:7c:28:6e:cc:45:c9:b4:d6:71:c0:c9:7f:6f:
4b:9b:34:7b:4b:27:d6:c8:af:d9:eb:6d:3a:47:75:40:7f:09:
8a:a3:49:3f:e8:ae:68:a2:9e:06:ba:92:0c:43:f0:35:d8:f0:
82:40:38:e8:6c:46:12:45:02:46:59:09:59:71:c8:f2:da:ac:
69:aa:e6:68:72:27:42:d7:c2:a8:2a:b4:b6:ff:5f:6b:60:6e:
59:bb:51:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org