Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/b4y9iSBsE7XNpu60HbnN9bObVPw.roa
File: b4y9iSBsE7XNpu60HbnN9bObVPw.roa (raw, json)
Hash identifier: Wme6x9KpYvZ2z8oTardxXVnxqTRBl6571Ol9mf9TldI=
Subject key identifier: 6F:8C:BD:89:20:6C:13:B5:CD:A6:EE:B4:1D:B9:CD:F5:B3:9B:54:FC
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0950ECBF
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/b4y9iSBsE7XNpu60HbnN9bObVPw.roa
Signing time: Thu 26 May 2022 15:32:13 +0000
ROA not before: Thu 26 May 2022 15:32:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
77.90.191.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.157.0/24 maxlen: 24
77.90.164.0/24 maxlen: 24
77.90.178.0/24 maxlen: 24
77.90.181.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
213.209.144.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156298431 (0x950ecbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: May 26 15:32:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f8cbd89206c13b5cda6eeb41db9cdf5b39b54fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:0c:50:3d:78:a5:41:8e:4b:ce:e7:d1:7e:
d7:d9:58:0a:68:93:c4:0b:f1:20:ef:51:df:bf:de:
0e:52:23:a0:6a:07:4e:f9:1f:07:32:f9:21:91:8c:
d2:e4:34:2b:d6:43:64:f9:cb:16:00:69:61:e3:c3:
c5:d1:23:99:92:05:3f:06:45:f2:51:cd:14:68:b6:
be:2f:08:b7:fa:f9:4a:37:47:56:81:8d:69:02:1e:
5b:31:93:4e:cc:88:17:6d:35:8b:e5:f8:d5:fc:3d:
55:cb:13:37:0d:ce:3a:75:66:45:27:09:56:81:fa:
fc:9a:c9:cc:8a:cb:f4:29:e1:6f:0c:cc:2d:88:1b:
38:b5:28:92:91:9a:cf:af:63:d8:3c:bf:97:3a:f6:
22:6a:b6:c5:b7:ce:b2:1c:3c:92:60:35:83:7c:a0:
1a:e3:75:92:eb:e6:be:1c:08:a0:77:ad:13:fd:ab:
1d:ec:af:0a:ad:a3:68:90:ee:8d:3b:ba:21:3c:95:
da:8c:77:da:55:b2:5c:0f:e2:9a:fa:fa:77:d7:d1:
08:36:90:10:44:2b:e2:0c:69:ab:c3:73:5a:a3:46:
75:87:a3:5b:89:91:7c:43:27:bd:d7:01:d1:19:23:
8e:66:ce:53:a9:1f:7a:63:97:bb:68:fb:67:f2:9d:
d7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8C:BD:89:20:6C:13:B5:CD:A6:EE:B4:1D:B9:CD:F5:B3:9B:54:FC
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/b4y9iSBsE7XNpu60HbnN9bObVPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.140.0/24
77.90.142.0-77.90.148.255
77.90.157.0/24
77.90.164.0/24
77.90.178.0/24
77.90.181.0/24
77.90.191.0/24
185.230.13.0/24
213.209.130.0/24
213.209.133.0-213.209.134.255
213.209.136.0/24
213.209.138.0/24
213.209.144.0/24
213.209.156.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
7c:e4:14:49:5b:2f:f8:06:a7:e4:56:12:0f:c4:08:3e:c9:b7:
50:44:b8:04:82:26:61:d1:dc:01:5e:d1:9b:49:2e:f4:81:b6:
31:89:b6:f5:f5:b8:45:4c:b4:9f:8b:f5:85:2f:f0:b0:61:c9:
e2:04:73:51:a3:1e:b2:d8:7f:09:63:99:54:9e:d8:bb:77:6e:
6e:9f:fc:9d:cb:0e:2f:10:43:72:6e:9a:d0:1c:a7:08:38:a3:
10:85:b7:f4:3e:97:88:74:5d:f1:21:9c:db:83:07:b8:9d:5f:
e1:e2:e3:6e:5b:f0:df:3b:d4:6b:21:4b:a2:e1:c5:56:51:01:
f3:18:22:f4:02:00:86:62:80:61:00:87:73:ff:f7:9d:0e:59:
c2:dc:f3:7d:6f:25:fd:44:72:02:5d:da:36:c1:f5:d7:96:b1:
57:9e:f4:22:66:d5:26:f9:2e:d0:40:6c:11:c8:ce:13:af:cd:
94:64:2a:6d:79:e2:a8:fd:b5:c7:dc:61:69:8a:42:a2:17:38:
0b:f2:21:f8:8d:2c:13:92:90:83:71:67:77:02:2c:13:28:6f:
13:59:05:87:e1:6f:2a:9d:ed:1d:92:44:c8:93:39:35:2d:c6:
f5:8b:8a:3d:c5:41:7a:92:c9:ae:e8:44:37:a3:5f:2e:b9:86:
de:16:f0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org