Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ZnlSVFbe1i9sLD4EAr8gTh0Vzt4.roa
File: ZnlSVFbe1i9sLD4EAr8gTh0Vzt4.roa (raw, json)
Hash identifier: xX6/B+W4Ibif26Yq3C+6QtX7p8QLAZ/xve38bdLzzec=
Subject key identifier: 66:79:52:54:56:DE:D6:2F:6C:2C:3E:04:02:BF:20:4E:1D:15:CE:DE
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 09F13466
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ZnlSVFbe1i9sLD4EAr8gTh0Vzt4.roa
Signing time: Thu 30 Jun 2022 17:47:28 +0000
ROA not before: Thu 30 Jun 2022 17:47:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 213.209.134.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.155.0/24 maxlen: 24
185.230.12.0/24 maxlen: 24
77.90.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166802534 (0x9f13466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 30 17:47:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6679525456ded62f6c2c3e0402bf204e1d15cede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:83:e1:5e:1a:6c:9d:fc:cd:10:ff:33:03:01:
2e:ad:04:13:e3:ce:13:17:01:80:73:86:a2:f1:83:
b8:ad:e8:b2:0a:58:e0:47:fe:c7:a3:22:8d:7a:34:
01:85:99:77:8d:1a:f2:39:f7:6d:d2:8d:4f:40:78:
ae:aa:99:c5:10:05:26:7e:e7:b4:83:21:0a:b9:39:
34:4e:63:ad:8f:8a:e1:95:11:c5:c9:86:e9:4e:c7:
e9:aa:25:ce:8d:ef:74:cb:1f:8b:0c:7a:48:93:60:
03:4b:40:14:5b:91:dd:8c:64:7b:24:ac:96:1a:60:
38:2f:02:d3:84:c4:bc:df:85:cf:62:1c:bf:c8:06:
86:68:ef:5c:9d:53:c8:d6:4c:89:8a:b8:ff:73:75:
7d:ca:71:c7:93:96:2d:26:c4:b4:56:45:ce:45:d6:
68:6a:df:bf:aa:6a:86:e6:7c:09:1f:1f:ef:24:5d:
6e:6e:19:6d:70:20:9e:a3:cd:a4:b3:82:59:99:57:
77:b8:6f:3e:1b:df:96:e6:97:19:2a:c4:09:f0:69:
d3:80:ec:38:cc:68:31:7c:5c:8c:ca:9a:bd:2e:89:
dc:39:5f:4c:d8:01:9e:00:74:18:c0:ba:ca:d4:fd:
7e:1d:c4:91:13:e7:cd:37:3b:e3:d0:ea:fc:66:e5:
3a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:79:52:54:56:DE:D6:2F:6C:2C:3E:04:02:BF:20:4E:1D:15:CE:DE
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ZnlSVFbe1i9sLD4EAr8gTh0Vzt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.145.0/24
77.90.155.0/24
77.90.184.0/24
185.230.12.0/24
213.209.133.0-213.209.134.255
213.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
61:07:58:26:79:fc:eb:9e:8d:a5:05:86:70:f4:55:8a:72:35:
22:4e:ce:96:3b:fc:0d:55:4b:76:f5:d0:2a:88:10:5f:40:e3:
2f:b8:34:f5:20:af:89:44:15:3a:0c:40:e6:18:19:4a:f5:da:
37:73:77:36:0f:cb:12:0c:23:c9:29:cc:59:08:5a:9a:a5:45:
ba:13:eb:22:4d:fe:0d:b4:45:a3:00:33:2b:fe:58:61:e8:ee:
c6:0e:e1:2c:61:79:3f:87:3d:b1:75:18:55:05:a7:72:3f:2b:
1a:bd:29:31:17:f3:48:73:0f:e2:97:aa:0e:40:1b:d9:4c:88:
eb:38:75:42:4f:1e:30:93:da:bc:75:f1:b7:db:9a:fd:10:e4:
67:79:70:54:19:b5:64:e3:f4:7f:df:40:25:d7:17:ee:da:69:
c1:52:bc:27:9f:95:3d:28:55:c0:2e:ee:3d:45:3f:40:f3:f4:
eb:7a:cb:6c:6c:02:dd:11:10:bb:e9:11:80:c3:6d:9b:b3:c9:
fe:4d:ad:d8:46:ce:bb:24:b7:89:f8:59:b3:5f:6a:08:e6:2c:
40:f9:6e:0e:75:8c:c3:9c:99:3b:cf:bb:75:a7:16:eb:38:d2:
9a:e6:81:56:42:91:53:8c:2b:e2:06:e5:46:38:8e:13:6f:f9:
b6:cb:90:aa
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIECfE0ZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjQ3NmUxMmU4OTg3ZTViMzAyY2RjMjRiZGQ5ZGIzZmU4M2M4NDQ5MB4XDTIyMDYz
MDE3NDcyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjY3OTUyNTQ1NmRl
ZDYyZjZjMmMzZTA0MDJiZjIwNGUxZDE1Y2VkZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJuD4V4abJ38zRD/MwMBLq0EE+POExcBgHOGovGDuK3osgpY
4Ef+x6MijXo0AYWZd40a8jn3bdKNT0B4rqqZxRAFJn7ntIMhCrk5NE5jrY+K4ZUR
xcmG6U7H6aolzo3vdMsfiwx6SJNgA0tAFFuR3YxkeySslhpgOC8C04TEvN+Fz2Ic
v8gGhmjvXJ1TyNZMiYq4/3N1fcpxx5OWLSbEtFZFzkXWaGrfv6pqhuZ8CR8f7yRd
bm4ZbXAgnqPNpLOCWZlXd7hvPhvfluaXGSrECfBp04DsOMxoMXxcjMqavS6J3Dlf
TNgBngB0GMC6ytT9fh3EkRPnzTc749Dq/GblOhUCAwEAAaOCAi8wggIrMB0GA1Ud
DgQWBBRmeVJUVt7WL2wsPgQCvyBOHRXO3jAfBgNVHSMEGDAWgBQ7R24S6Jh+WzAs
3CS92ds/6DyESTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8x
L1pubFNWRmJlMWk5c0xENEVBcjhnVGgwVnp0NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
ZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8xL08wZHVFdWlZZmxz
d0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBF
BggrBgEFBQcBBwEB/wQ2MDQwMgQCAAEwLAMEAE1akQMEAE1amwMEAE1auAMEALnm
DDAMAwQA1dGFAwQA1dGGAwQA1dGfMA0GCSqGSIb3DQEBCwUAA4IBAQBhB1gmefzr
no2lBYZw9FWKcjUiTs6WO/wNVUt29dAqiBBfQOMvuDT1IK+JRBU6DEDmGBlK9do3
c3c2D8sSDCPJKcxZCFqapUW6E+siTf4NtEWjADMr/lhh6O7GDuEsYXk/hz2xdRhV
BadyPysavSkxF/NIcw/il6oOQBvZTIjrOHVCTx4wk9q8dfG325r9EORneXBUGbVk
4/R/30Al1xfu2mnBUrwnn5U9KFXALu49RT9A8/TrestsbALdERC76RGAw22bs8n+
Ta3YRs67JLeJ+FmzX2oI5ixA+W4OdYzDnJk7z7t1pxbrONKa5oFWQpFTjCviBuVG
OI4Tb/m2y5Cq
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org