Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ZdAPTwzRPcR9kRAgLHhvhWEH49g.roa
File: ZdAPTwzRPcR9kRAgLHhvhWEH49g.roa (raw, json)
Hash identifier: V7TLabI0oY74wXUCenhBMiQSz36Td47I3839A9mqRjc=
Subject key identifier: 65:D0:0F:4F:0C:D1:3D:C4:7D:91:10:20:2C:78:6F:85:61:07:E3:D8
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0813E1CF
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ZdAPTwzRPcR9kRAgLHhvhWEH49g.roa
Signing time: Fri 11 Mar 2022 19:46:52 +0000
ROA not before: Fri 11 Mar 2022 19:46:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49870
IP address blocks: 213.209.146.0/24 maxlen: 24
77.90.164.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
77.90.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135520719 (0x813e1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Mar 11 19:46:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65d00f4f0cd13dc47d9110202c786f856107e3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:b9:6f:f9:67:56:35:95:fd:0a:f3:88:43:
71:c2:15:24:3c:56:7d:21:0d:47:11:31:f0:3b:dc:
eb:f9:f3:12:32:88:d6:12:27:f2:27:62:ce:df:7d:
4f:dd:6a:4f:6a:27:33:15:14:ba:77:f9:d5:a0:fc:
d3:30:7e:c7:b4:27:7b:b5:c3:fd:a0:58:e6:7c:a3:
57:31:74:87:18:2a:89:75:ce:b5:f3:f8:56:23:71:
d4:0b:bb:80:ca:0b:3d:cd:3e:5c:c6:ff:aa:13:f7:
ae:00:44:ad:97:a6:4d:56:aa:37:e1:e0:16:b4:c7:
26:12:9f:94:1a:d4:ad:34:7f:ef:41:fa:d7:24:a0:
d1:54:5a:5a:d3:5e:b0:56:88:01:d0:57:e6:77:63:
86:29:d2:66:75:19:9f:19:9f:62:61:56:6a:31:66:
bd:83:d2:c8:53:2e:8d:fb:ee:ca:06:5b:dc:d9:f2:
4c:43:23:89:86:b2:c8:ce:c6:47:e7:0e:d7:05:e9:
07:65:9d:c1:aa:2a:ae:c7:bd:da:64:af:3c:6c:b4:
b9:a2:5d:75:33:82:39:fa:42:f2:2f:73:00:b5:0c:
57:00:5a:c3:f9:4c:c5:ee:18:f2:21:00:d5:1b:42:
9c:8f:3d:cd:f3:f4:76:e3:18:32:72:3f:80:23:70:
f0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D0:0F:4F:0C:D1:3D:C4:7D:91:10:20:2C:78:6F:85:61:07:E3:D8
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ZdAPTwzRPcR9kRAgLHhvhWEH49g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.164.0/24
77.90.181.0/24
185.230.13.0/24
213.209.146.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:11:2f:d1:27:78:0b:f6:0a:05:6d:0e:36:eb:cf:34:e0:2c:
5a:42:22:fa:96:8d:da:30:be:bc:f1:db:fc:58:f7:20:30:23:
ee:b7:fc:4e:ac:93:98:5a:6e:ed:ed:78:5a:83:df:a2:6f:38:
0b:d3:f4:f4:ef:e4:3b:cc:22:ef:f2:a8:fc:d2:4a:d2:f0:a9:
02:aa:c9:bb:b6:03:82:15:57:dc:86:d4:a3:0f:26:d9:d1:88:
28:4b:49:5c:b7:b7:6f:fe:e1:3a:42:19:1a:d6:33:01:d4:73:
37:f7:78:e6:c7:b2:f7:ed:40:fb:28:8c:f6:d1:e9:9b:ff:ad:
58:23:37:85:68:65:3e:29:60:53:dd:41:6d:59:f9:dd:b5:68:
52:86:44:17:a5:b3:34:93:77:63:b7:8a:4f:64:10:8d:c9:07:
22:6e:da:a8:f9:4b:8c:3b:f8:3c:f5:c3:9d:38:21:08:b1:ef:
c1:1c:a9:bf:4c:e0:df:67:fa:36:75:87:09:b3:c1:53:08:bb:
92:fa:37:eb:aa:1c:59:9e:b1:e8:1e:69:77:75:6c:7d:1f:f3:
fc:42:a4:31:75:2c:da:3a:50:a4:0a:7c:5c:fa:63:df:55:92:
b4:10:a0:a8:72:7c:f3:43:6e:7c:50:02:23:f3:d4:17:68:98:
36:a9:10:3c
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIECBPhzzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjQ3NmUxMmU4OTg3ZTViMzAyY2RjMjRiZGQ5ZGIzZmU4M2M4NDQ5MB4XDTIyMDMx
MTE5NDY1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjVkMDBmNGYwY2Qx
M2RjNDdkOTExMDIwMmM3ODZmODU2MTA3ZTNkODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMrwuW/5Z1Y1lf0K84hDccIVJDxWfSENRxEx8Dvc6/nzEjKI
1hIn8idizt99T91qT2onMxUUunf51aD80zB+x7Qne7XD/aBY5nyjVzF0hxgqiXXO
tfP4ViNx1Au7gMoLPc0+XMb/qhP3rgBErZemTVaqN+HgFrTHJhKflBrUrTR/70H6
1ySg0VRaWtNesFaIAdBX5ndjhinSZnUZnxmfYmFWajFmvYPSyFMujfvuygZb3Nny
TEMjiYayyM7GR+cO1wXpB2Wdwaoqrse92mSvPGy0uaJddTOCOfpC8i9zALUMVwBa
w/lMxe4Y8iEA1RtCnI89zfP0duMYMnI/gCNw8E0CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBRl0A9PDNE9xH2RECAseG+FYQfj2DAfBgNVHSMEGDAWgBQ7R24S6Jh+WzAs
3CS92ds/6DyESTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8x
L1pkQVBUd3pSUGNSOWtSQWdMSGh2aFdFSDQ5Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
ZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8xL08wZHVFdWlZZmxz
d0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAE1apAMEAE1atQMEALnmDQMEANXR
kjANBgkqhkiG9w0BAQsFAAOCAQEAmhEv0Sd4C/YKBW0ONuvPNOAsWkIi+paN2jC+
vPHb/Fj3IDAj7rf8TqyTmFpu7e14WoPfom84C9P09O/kO8wi7/Ko/NJK0vCpAqrJ
u7YDghVX3IbUow8m2dGIKEtJXLe3b/7hOkIZGtYzAdRzN/d45sey9+1A+yiM9tHp
m/+tWCM3hWhlPilgU91BbVn53bVoUoZEF6WzNJN3Y7eKT2QQjckHIm7aqPlLjDv4
PPXDnTghCLHvwRypv0zg32f6NnWHCbPBUwi7kvo366ocWZ6x6B5pd3VsfR/z/EKk
MXUs2jpQpAp8XPpj31WStBCgqHJ880NufFACI/PUF2iYNqkQPA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org