Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/bO3laZo19EMgLywT0gZeeMkop4s.roa
File: bO3laZo19EMgLywT0gZeeMkop4s.roa (raw, json)
Hash identifier: ehBipcdRzh4ehEju1k1ClUPOYxIbj3fzDV3MFHcjCik=
Subject key identifier: 6C:ED:E5:69:9A:35:F4:43:20:2F:2C:13:D2:06:5E:78:C9:28:A7:8B
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 078156BB
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/bO3laZo19EMgLywT0gZeeMkop4s.roa
Signing time: Fri 18 Feb 2022 15:19:44 +0000
ROA not before: Fri 18 Feb 2022 15:19:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.147.0/24 maxlen: 24
213.209.151.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125916859 (0x78156bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Feb 18 15:19:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cede5699a35f443202f2c13d2065e78c928a78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9f:31:1b:b0:c2:33:71:cd:ec:61:07:d0:00:
83:7f:5a:dd:0f:b8:4e:2b:d2:86:d3:21:7b:38:bc:
83:e1:c8:9d:b2:f4:96:1c:54:66:46:29:f6:8f:49:
aa:2b:e7:3c:88:aa:93:ef:fb:75:9e:42:2d:fb:92:
da:33:ef:5b:f6:60:4e:44:93:32:b8:c1:cc:a8:63:
e8:76:80:0c:5d:c7:c0:f6:e2:6b:03:c6:df:a5:3d:
51:0e:75:fb:3b:f2:55:b3:f1:10:0a:1b:be:b2:ac:
d9:22:7d:18:5e:5a:46:75:a6:85:cd:d7:2c:2a:7c:
38:b8:1d:af:91:87:20:5c:1e:cd:57:4f:03:85:66:
6d:e0:95:c5:71:c4:20:dc:7b:b1:2c:8d:57:b2:69:
b6:09:72:11:6a:b4:84:87:a1:d6:a0:75:84:aa:03:
bf:4a:f4:c8:8a:7e:c8:f1:f9:7d:b6:45:8e:1d:f9:
82:8d:ee:27:ba:ab:57:2e:87:39:05:c9:62:97:c7:
01:25:95:11:21:83:55:c5:91:d3:8b:c1:c9:a4:fe:
08:6e:9f:cb:87:cf:4b:2a:af:ed:44:58:0f:47:91:
74:73:93:dc:c8:20:25:e4:22:4a:b3:e4:7a:cd:eb:
40:4c:ab:90:b2:74:d8:52:22:10:eb:bf:7f:9f:12:
3b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:ED:E5:69:9A:35:F4:43:20:2F:2C:13:D2:06:5E:78:C9:28:A7:8B
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/bO3laZo19EMgLywT0gZeeMkop4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.153.0/24
213.209.130.0/24
213.209.138.0/24
213.209.147.0/24
213.209.151.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
04:39:89:af:fd:8d:0b:6f:fe:cf:c5:c0:9b:f0:07:10:da:24:
2e:05:59:3f:15:48:eb:74:c7:31:0f:36:6c:61:dd:a5:0e:6c:
4a:fe:05:51:59:54:0a:fa:6a:df:72:99:f7:78:73:d2:4e:47:
e2:98:9d:b5:48:0a:65:74:08:aa:7d:f1:ca:b8:68:d0:aa:2f:
c1:30:f0:78:4e:db:44:a4:03:35:83:37:73:7b:a1:86:0f:6d:
fe:76:12:0d:a2:67:a7:72:3e:7e:d4:ca:31:95:e3:02:d2:e4:
d1:c2:f8:4b:e3:4e:a5:83:dc:7a:be:6a:ac:af:6d:15:02:37:
ca:c1:66:61:1c:1a:67:a9:81:e6:7f:f9:61:ed:99:47:30:cb:
5e:ed:e9:4d:5a:79:14:25:65:92:53:53:51:9e:c5:1c:5d:b1:
85:ce:40:7e:1b:f1:aa:8e:5c:4f:f0:51:0e:7e:0d:8a:5f:fc:
bb:80:bc:45:4b:7f:dc:73:da:b8:02:96:fc:71:f7:3d:4d:a8:
21:99:29:bd:c1:17:ad:64:16:09:78:a4:90:1f:74:75:78:9c:
50:83:27:11:71:b5:b6:30:ff:e3:ac:b0:21:99:6d:67:28:dc:
de:a3:35:f3:11:dc:51:10:e2:4b:93:c2:66:bf:40:e8:e3:0a:
6b:c6:dd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org