Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/_jd7c3lJjzfJZ2q0h3tPfaSYjxs.roa
File: _jd7c3lJjzfJZ2q0h3tPfaSYjxs.roa (raw, json)
Hash identifier: B87uqnXXXYW9JxDy+g4psi9volRq/TPWDgQ5rEsxVOA=
Subject key identifier: FE:37:7B:73:79:49:8F:37:C9:67:6A:B4:87:7B:4F:7D:A4:98:8F:1B
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0887ABF9
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/_jd7c3lJjzfJZ2q0h3tPfaSYjxs.roa
Signing time: Mon 11 Apr 2022 10:40:50 +0000
ROA not before: Mon 11 Apr 2022 10:40:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.188.0/24 maxlen: 24
213.209.158.0/24 maxlen: 24
77.90.173.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143109113 (0x887abf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 11 10:40:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe377b7379498f37c9676ab4877b4f7da4988f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:b1:fe:fb:b4:df:6e:a4:9e:ca:44:63:dd:
d0:9a:91:8b:c0:d9:77:14:d0:0c:07:fe:06:4d:e3:
6e:cf:d7:31:40:a4:f6:3e:d3:ac:2f:61:88:d9:e0:
91:c8:19:1c:10:cd:27:ba:0a:ed:0a:9f:81:09:d5:
ce:17:dd:e6:61:2d:d0:3e:a8:96:2c:20:05:b4:77:
9f:88:3c:48:9b:cb:9d:fd:92:8b:33:b8:b7:24:3a:
45:b0:55:bf:c3:ae:7c:c2:41:de:e5:49:98:b9:a9:
4b:e8:72:18:3b:89:c0:f2:14:ff:a6:95:72:da:43:
97:e2:82:4a:32:fc:58:e4:43:41:6b:b5:7a:87:72:
77:3d:fb:b7:0c:c0:db:19:a6:f6:37:0c:89:2d:3e:
75:b4:5e:c6:c5:28:fa:b9:6a:d2:bc:9b:09:05:1a:
95:03:94:d8:b5:78:bc:74:e2:25:93:b6:d4:8b:2c:
2b:16:2a:d1:5c:e8:4d:9e:60:11:e8:62:6a:34:42:
1a:40:e6:72:62:0c:c0:4e:a7:6f:23:0e:80:46:ed:
ce:21:8a:b3:df:5e:c7:47:68:5a:85:5b:00:df:38:
45:4e:96:77:bc:4b:7c:20:5c:53:d6:b6:be:d9:b1:
48:ba:de:69:46:d6:0a:4c:51:b6:4c:ba:5f:67:8c:
2a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:37:7B:73:79:49:8F:37:C9:67:6A:B4:87:7B:4F:7D:A4:98:8F:1B
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/_jd7c3lJjzfJZ2q0h3tPfaSYjxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.173.0/24
77.90.188.0/24
185.230.15.0/24
213.209.158.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:c7:33:4c:ec:ee:25:04:ff:47:07:bd:55:7a:b5:93:2f:9a:
54:f0:cf:ab:1f:25:28:0e:42:21:da:67:cb:c1:96:e3:32:e3:
ab:b9:a3:6b:e4:e5:c9:ad:31:91:2a:1f:a0:c9:89:30:0c:aa:
2b:b9:94:7b:1a:57:ac:1e:43:07:46:c4:08:9c:c2:e5:35:f7:
ca:00:18:7f:bd:a4:03:16:b5:cb:ae:85:23:f9:17:d3:a4:b1:
84:0c:d2:b8:ab:38:91:1d:48:f3:91:c8:57:59:6f:93:20:3c:
31:32:e1:e1:c6:75:07:e1:91:55:9f:3a:7f:13:05:50:56:53:
b6:22:03:ab:e9:8d:be:bd:be:17:30:71:42:cb:ea:0c:ab:e1:
8d:a6:7e:5c:48:2f:4e:22:05:de:15:30:f1:0a:d1:59:d0:7b:
85:58:d9:9e:9f:0f:b8:e0:50:9a:6d:70:14:74:79:b2:4d:89:
97:30:06:de:b7:8b:31:15:e8:f6:b5:31:5d:24:2a:30:b8:ea:
c0:82:55:bf:fa:9f:d2:13:a8:52:77:13:72:dc:a8:7a:ba:c3:
93:9f:6a:3a:0c:98:54:62:d1:1a:48:97:1a:7b:5e:74:bc:ee:
cd:b4:97:96:43:5b:5d:c7:ee:77:c3:72:49:bf:76:93:59:75:
66:a4:82:d1
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIECIer+TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjQ3NmUxMmU4OTg3ZTViMzAyY2RjMjRiZGQ5ZGIzZmU4M2M4NDQ5MB4XDTIyMDQx
MTEwNDA1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmUzNzdiNzM3OTQ5
OGYzN2M5Njc2YWI0ODc3YjRmN2RhNDk4OGYxYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALVTsf77tN9upJ7KRGPd0JqRi8DZdxTQDAf+Bk3jbs/XMUCk
9j7TrC9hiNngkcgZHBDNJ7oK7QqfgQnVzhfd5mEt0D6oliwgBbR3n4g8SJvLnf2S
izO4tyQ6RbBVv8OufMJB3uVJmLmpS+hyGDuJwPIU/6aVctpDl+KCSjL8WORDQWu1
eodydz37twzA2xmm9jcMiS0+dbRexsUo+rlq0rybCQUalQOU2LV4vHTiJZO21Iss
KxYq0VzoTZ5gEehiajRCGkDmcmIMwE6nbyMOgEbtziGKs99ex0doWoVbAN84RU6W
d7xLfCBcU9a2vtmxSLreaUbWCkxRtky6X2eMKscCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBT+N3tzeUmPN8lnarSHe099pJiPGzAfBgNVHSMEGDAWgBQ7R24S6Jh+WzAs
3CS92ds/6DyESTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8x
L19qZDdjM2xKanpmSloycTBoM3RQZmFTWWp4cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
ZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8xL08wZHVFdWlZZmxz
d0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAE1arQMEAE1avAMEALnmDwMEANXR
njANBgkqhkiG9w0BAQsFAAOCAQEADcczTOzuJQT/Rwe9VXq1ky+aVPDPqx8lKA5C
Idpny8GW4zLjq7mja+Tlya0xkSofoMmJMAyqK7mUexpXrB5DB0bECJzC5TX3ygAY
f72kAxa1y66FI/kX06SxhAzSuKs4kR1I85HIV1lvkyA8MTLh4cZ1B+GRVZ86fxMF
UFZTtiIDq+mNvr2+FzBxQsvqDKvhjaZ+XEgvTiIF3hUw8QrRWdB7hVjZnp8PuOBQ
mm1wFHR5sk2JlzAG3reLMRXo9rUxXSQqMLjqwIJVv/qf0hOoUncTctyoerrDk59q
OgyYVGLRGkiXGntedLzuzbSXlkNbXcfud8NySb92k1l1ZqSC0Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:25 2024 by rpki-client on console-ams.rpki-client.org