Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/gxogtR4w6_LByrfGTakWSh93LpQ.roa
File: gxogtR4w6_LByrfGTakWSh93LpQ.roa (raw, json)
Hash identifier: z6aqzsk3cuW4uGjijgm86Zmjhl7D5GdbXb0rT6tODKM=
Subject key identifier: 83:1A:20:B5:1E:30:EB:F2:C1:CA:B7:C6:4D:A9:16:4A:1F:77:2E:94
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0930E043
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/gxogtR4w6_LByrfGTakWSh93LpQ.roa
Signing time: Wed 18 May 2022 11:47:18 +0000
ROA not before: Wed 18 May 2022 11:47:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
185.230.12.0/24 maxlen: 24
77.90.191.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.152.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
77.90.164.0/24 maxlen: 24
77.90.178.0/24 maxlen: 24
77.90.180.0/24 maxlen: 24
77.90.181.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
213.209.144.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154198083 (0x930e043)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: May 18 11:47:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=831a20b51e30ebf2c1cab7c64da9164a1f772e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0d:dd:16:94:7e:12:3e:82:a9:66:71:fa:df:
aa:88:8e:a0:81:0a:75:96:da:13:9b:04:27:b5:18:
bb:a3:fd:ca:5e:10:5b:6b:35:9a:7b:f0:7e:99:96:
f4:e2:6d:49:9f:c1:c3:12:62:34:05:a4:bb:3e:31:
49:1b:89:5a:96:48:f4:26:e9:7f:3f:9f:b7:54:4e:
f7:9b:04:a9:cf:67:7c:ad:de:24:30:a0:30:46:dd:
6e:60:f2:a2:43:7a:3e:81:bc:64:60:49:f2:f9:31:
7c:67:6f:61:f2:29:4b:a1:ee:eb:a1:bf:dc:7a:4f:
65:25:42:64:77:95:63:8b:39:44:4b:d8:ae:96:d1:
ed:02:34:02:31:27:af:e6:77:bc:26:f1:3d:0f:ef:
69:71:74:52:a5:a4:b2:1e:35:56:d8:65:f3:17:3a:
a9:33:54:1c:5f:00:a4:9e:e9:f5:55:93:c8:5c:21:
39:19:f3:2e:1d:de:dd:1b:d8:51:58:fd:4b:a3:18:
aa:3f:13:68:24:f9:2b:8e:aa:20:83:17:d8:60:87:
47:83:1d:ba:7f:53:3f:7d:58:e8:b3:72:c2:87:3a:
77:f3:07:40:d5:53:65:1d:3b:83:54:e6:0d:f5:8d:
6e:85:b7:c6:dd:5d:ea:dd:c9:6d:fd:fc:3c:9d:46:
9a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1A:20:B5:1E:30:EB:F2:C1:CA:B7:C6:4D:A9:16:4A:1F:77:2E:94
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/gxogtR4w6_LByrfGTakWSh93LpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.140.0/24
77.90.142.0-77.90.148.255
77.90.152.0/24
77.90.154.0/24
77.90.164.0/24
77.90.178.0/24
77.90.180.0/23
77.90.191.0/24
185.230.12.0/23
213.209.130.0/24
213.209.133.0/24
213.209.136.0/24
213.209.138.0/24
213.209.144.0/24
213.209.150.0/24
213.209.156.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
8d:35:41:8c:3b:9d:06:ad:94:35:66:57:19:4b:62:9b:61:24:
ed:15:8b:02:43:83:a4:11:95:76:bd:99:4f:75:cb:6a:02:43:
3d:07:11:c1:e8:1b:9f:0b:0c:b4:6e:e1:27:2b:e0:94:c0:51:
7f:64:da:6e:70:4a:d6:3d:2e:c8:f0:9d:ed:5a:ad:c7:7f:d2:
65:c8:4d:3f:56:3f:d8:41:a5:81:24:09:68:dc:a5:98:11:6c:
e2:04:7a:0b:17:8d:c9:d4:a5:16:8d:ac:9c:da:2c:09:ea:93:
00:b6:f7:06:36:6c:35:98:bb:46:c2:2e:bf:81:1d:a3:19:67:
03:41:8d:d7:8d:e0:a0:27:2f:b9:b5:d8:6a:34:21:68:c4:76:
cf:b3:8c:f2:f5:36:5b:54:56:63:b4:f9:89:d7:30:8b:c5:88:
ef:1e:04:c1:78:0b:5c:94:01:88:54:4d:c3:c9:f1:af:3d:e2:
cf:a4:85:01:a6:7c:2f:b6:c7:18:93:f1:a0:b6:fc:15:50:63:
b8:ab:38:de:76:42:33:96:c9:b7:99:c8:0a:2c:aa:c0:32:3a:
f0:91:ec:1f:69:03:b2:8c:5f:3e:b6:64:fb:8e:bc:af:91:8a:
54:6e:f9:0b:ea:a7:c4:f6:a7:91:10:d2:6a:f5:83:d5:cd:17:
01:76:05:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org