Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/_CYdMGOhr__FDH9wc3z0VF_8BwM.roa
File: _CYdMGOhr__FDH9wc3z0VF_8BwM.roa (raw, json)
Hash identifier: JyXL57jdeozjNr2Eey30BaiYf+H65Wpx+pV4oY9OF7Q=
Subject key identifier: FC:26:1D:30:63:A1:AF:FF:C5:0C:7F:70:73:7C:F4:54:5F:FC:07:03
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 09DE03E6
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/_CYdMGOhr__FDH9wc3z0VF_8BwM.roa
Signing time: Fri 24 Jun 2022 17:16:15 +0000
ROA not before: Fri 24 Jun 2022 17:16:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 185.230.13.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.144.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
77.90.150.0/24 maxlen: 24
77.90.149.0/24 maxlen: 24
77.90.164.0/24 maxlen: 24
77.90.178.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165544934 (0x9de03e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 24 17:16:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc261d3063a1afffc50c7f70737cf4545ffc0703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:97:94:eb:8b:a6:b9:db:56:c3:7b:b3:24:76:
7c:fc:6c:2f:6e:8f:72:fd:d2:13:fb:54:3a:89:74:
9e:37:bf:ce:15:a3:02:33:0e:cd:7e:4a:3d:70:7e:
58:27:83:99:d8:94:a7:4e:ed:2c:0e:60:62:1f:40:
7a:41:e1:4d:c5:c0:c7:04:a0:0c:69:cc:fa:a1:6f:
11:18:16:3a:a6:87:8d:1a:80:00:65:c5:a1:0a:87:
0f:e9:ae:14:07:88:06:04:57:dc:36:87:f9:61:91:
ae:e6:82:5f:a8:73:bb:f1:08:7b:cc:f9:13:6f:c2:
47:1b:b9:8f:da:5a:fb:ef:89:de:d5:6e:83:10:77:
e6:d1:71:34:53:77:0d:9a:85:b2:54:cb:47:b9:cd:
1d:6a:26:3b:25:e6:1a:02:90:52:20:a9:b4:f2:2e:
83:6c:b5:cc:a3:3e:05:83:89:2f:0f:34:ea:ac:64:
6a:e0:0b:81:0d:d8:7b:40:f1:3b:f8:20:15:34:cc:
22:ed:1d:7c:7d:c8:e6:77:91:9a:d2:52:ba:d5:c3:
b5:be:1f:07:cf:9d:98:29:b6:0b:cd:20:af:0b:82:
20:91:6b:30:43:0b:99:80:fb:19:ae:c9:72:1e:82:
c1:7b:54:a5:c1:d4:46:78:8c:1d:4c:fd:3e:93:47:
38:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:26:1D:30:63:A1:AF:FF:C5:0C:7F:70:73:7C:F4:54:5F:FC:07:03
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/_CYdMGOhr__FDH9wc3z0VF_8BwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.149.0-77.90.150.255
77.90.164.0/24
77.90.178.0/24
77.90.185.0/24
77.90.188.0/24
185.230.13.0-185.230.14.255
213.209.129.0/24
213.209.136.0/24
213.209.143.0-213.209.146.255
213.209.156.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b5:69:be:e1:83:4a:53:01:68:88:ea:19:49:aa:e0:15:12:
a5:8d:3d:f9:da:b3:3c:68:f1:8f:ea:bd:46:1a:2a:44:f4:4f:
1c:51:f6:87:23:d8:ca:fd:d6:f0:03:a5:52:7c:74:44:36:df:
13:ce:5b:d1:bb:b8:62:2c:2d:c4:52:e6:d1:5e:db:ca:8b:cf:
60:b4:67:66:2c:e8:03:69:e9:e6:8d:c8:12:ac:1d:5d:7c:b3:
a2:e1:45:36:ab:dd:64:02:97:30:d5:df:65:ae:d5:31:c9:c8:
8f:ca:13:25:5c:bc:3b:ca:c8:7f:44:0d:a7:65:14:75:72:69:
c1:f6:a7:8e:1a:c6:5d:46:f4:be:d0:72:ed:10:33:f8:b4:96:
0d:cf:f1:19:22:97:ec:25:6e:52:55:0d:ee:d2:3f:0f:87:7b:
98:02:bd:61:9a:1e:6a:4d:ed:a8:44:28:79:9e:ef:30:0d:c8:
b6:b2:ad:1b:41:da:d1:d4:9e:49:05:c3:58:de:2c:29:52:5e:
49:65:77:a5:78:6b:e1:ad:32:7d:8c:6e:70:7c:a1:40:f0:ca:
fc:84:ce:2b:e4:48:74:b7:b2:d8:d9:72:16:d1:04:47:d3:4e:
0e:3c:df:d1:6c:c6:b0:fa:c3:cc:37:db:1a:6a:43:d0:bd:d5:
72:6b:ee:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:03 2024 by rpki-client on console-fra.rpki-client.org