Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/X4ho7UuDJsAplrkLHqBny_KnZjI.roa
File: X4ho7UuDJsAplrkLHqBny_KnZjI.roa (raw, json)
Hash identifier: j52rTjZnFy4jpCejWixFk+PEZOizpKkmhvuUJAWOAHQ=
Subject key identifier: 5F:88:68:ED:4B:83:26:C0:29:96:B9:0B:1E:A0:67:CB:F2:A7:66:32
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0A05E2EC
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/X4ho7UuDJsAplrkLHqBny_KnZjI.roa
Signing time: Tue 05 Jul 2022 07:18:25 +0000
ROA not before: Tue 05 Jul 2022 07:18:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.191.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.139.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.157.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
77.90.179.0/24 maxlen: 24
77.90.181.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.147.0/24 maxlen: 24
213.209.151.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.158.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1280:24::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168157932 (0xa05e2ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 5 07:18:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f8868ed4b8326c02996b90b1ea067cbf2a76632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:17:7f:6b:0f:b5:af:68:c1:f6:90:fc:ba:
63:d4:71:88:86:27:dc:84:80:40:55:f6:8b:e5:35:
6a:23:45:b9:71:c6:30:02:02:58:8a:c3:f0:a7:48:
c2:06:2f:22:73:99:78:a1:35:b8:9c:fa:a2:45:a1:
57:fb:9d:82:61:0d:23:19:50:b4:17:09:ee:5e:f2:
82:47:8f:10:de:67:4f:84:f2:e8:ab:2e:28:1a:cb:
b1:1d:e0:78:6f:72:f8:dc:97:07:e4:bd:a3:66:f5:
81:58:5b:e8:c2:c7:c7:c7:0e:cb:dc:ec:a8:f5:14:
31:8e:65:51:bc:29:07:18:4e:ff:18:a7:12:36:a2:
3e:40:72:e0:4c:70:db:3c:d1:bf:c6:b6:98:34:27:
d2:83:3e:f0:fc:f1:cc:50:6a:8e:ea:e7:f9:0c:6a:
d8:f1:c7:5f:b5:3e:30:46:f5:87:00:d5:ea:90:eb:
34:84:87:d9:ab:42:b1:aa:9b:e5:5b:33:5f:d1:be:
dc:39:4b:6f:d4:13:a0:41:e6:f7:1e:95:32:e6:5e:
84:b4:70:0b:64:90:b8:e3:c6:3f:78:7e:8a:15:03:
97:2d:14:15:d1:53:68:28:ce:7f:bb:fc:e0:c5:fd:
81:7e:a0:ed:ca:b1:d7:d5:0c:72:f6:9c:e5:22:e7:
2e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:88:68:ED:4B:83:26:C0:29:96:B9:0B:1E:A0:67:CB:F2:A7:66:32
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/X4ho7UuDJsAplrkLHqBny_KnZjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.140.255
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.153.0-77.90.154.255
77.90.157.0/24
77.90.179.0/24
77.90.181.0/24
77.90.191.0/24
213.209.130.0/24
213.209.138.0/24
213.209.147.0/24
213.209.149.0/24
213.209.151.0/24
213.209.158.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
34:7d:86:e6:a4:9c:0c:25:10:5f:90:6f:3c:3b:96:48:d0:78:
81:f3:f5:f3:4d:26:14:19:59:84:f9:4b:fe:e7:37:b2:33:02:
b3:d4:9b:8b:99:49:c4:51:e1:92:10:3d:2b:17:c4:d4:48:2d:
19:89:14:4f:1c:cf:dd:d1:e6:bd:03:fb:eb:3b:71:da:4b:72:
ad:49:ea:56:eb:b4:ab:75:2e:7b:06:4f:dd:db:27:e1:df:3c:
75:42:64:64:3b:88:60:e1:da:e3:46:8c:61:a9:08:f0:1a:ed:
f6:85:e0:d0:62:4b:d0:22:92:21:6c:09:26:6d:bd:e4:6e:a4:
08:75:52:27:27:7a:a0:3e:fb:d5:93:03:39:60:40:37:95:ee:
66:fb:06:2a:96:c4:e7:d4:70:51:0a:32:45:ab:ec:e3:7d:3b:
56:80:89:98:2a:3b:9a:d6:4b:0c:96:25:9a:25:e2:e6:67:45:
71:78:04:50:c4:5f:0b:a1:c5:ed:21:a3:33:e0:45:74:35:e1:
e7:fb:1c:68:91:f4:fd:96:1c:ca:23:5d:55:f6:da:4b:cb:9f:
5e:85:b8:05:f7:02:5e:ce:81:83:a6:f6:31:20:95:72:bf:fc:
c5:a0:bf:bd:0b:c7:f6:21:fe:d9:f4:02:7e:61:fd:0c:5b:af:
c9:6b:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org