Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/j3rMhu9iizPUQpEHydsCGEeCbxU.roa
File: j3rMhu9iizPUQpEHydsCGEeCbxU.roa (raw, json)
Hash identifier: 3ALgZCSqwO8nyy5RBCM2j+BNao6LkLJZWKAR31X93PA=
Subject key identifier: 8F:7A:CC:86:EF:62:8B:33:D4:42:91:07:C9:DB:02:18:47:82:6F:15
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 07207B53
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/j3rMhu9iizPUQpEHydsCGEeCbxU.roa
Signing time: Fri 14 Jan 2022 19:43:11 +0000
ROA not before: Fri 14 Jan 2022 19:43:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 185.230.14.0/24 maxlen: 24
185.230.12.0/24 maxlen: 24
77.90.191.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
77.90.152.0/24 maxlen: 24
77.90.149.0/24 maxlen: 24
77.90.179.0/24 maxlen: 24
77.90.184.0/24 maxlen: 24
77.90.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119569235 (0x7207b53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 14 19:43:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f7acc86ef628b33d4429107c9db021847826f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:56:39:06:f5:dc:75:2d:2f:4a:61:bf:5c:fe:
1e:7f:2c:34:9b:2f:e3:a0:df:22:5f:bf:b8:13:1b:
65:38:d9:24:4a:3a:a1:db:28:c8:ff:10:46:44:fa:
8e:b0:52:74:0b:fb:58:f1:4d:33:e8:d5:10:2f:72:
ac:e0:11:4f:24:1e:99:cb:f3:ee:74:ba:e2:61:22:
25:e1:2b:54:b2:fb:12:ec:a6:7f:52:7e:b8:b7:cb:
53:c4:54:1a:14:7d:21:a9:df:20:59:0e:3d:ef:47:
98:16:57:07:8d:7c:73:a6:c2:a9:ee:b8:d7:38:21:
c3:42:03:e9:33:05:56:93:4e:d5:46:10:c5:5d:20:
e3:85:f2:a0:6f:c8:89:d4:bf:2f:c7:9d:d8:59:ea:
52:1c:29:18:76:d8:f8:72:f4:0d:92:b0:ba:75:eb:
15:63:c0:0b:e3:1b:5f:61:3b:b5:3f:d0:a0:35:d2:
1f:35:85:11:61:0a:6c:cd:f4:fc:6c:20:05:d4:d9:
00:d5:64:41:c1:9e:88:85:5c:d9:47:67:06:e3:a6:
c3:f8:52:a8:3d:40:e1:ad:9d:eb:91:72:14:34:57:
40:8d:a5:df:01:5a:9e:db:a4:a7:9b:06:05:aa:34:
9c:af:cb:fb:d1:52:0b:be:fc:cd:f5:8a:71:ce:00:
89:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7A:CC:86:EF:62:8B:33:D4:42:91:07:C9:DB:02:18:47:82:6F:15
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/j3rMhu9iizPUQpEHydsCGEeCbxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.149.0/24
77.90.152.0/24
77.90.179.0-77.90.180.255
77.90.184.0/24
77.90.191.0/24
185.230.12.0/24
185.230.14.0/24
213.209.129.0/24
213.209.134.0/24
213.209.143.0/24
213.209.145.0/24
213.209.149.0/24
213.209.156.0/23
Signature Algorithm: sha256WithRSAEncryption
40:ce:73:a7:30:c5:a7:4c:aa:3b:dc:aa:8d:21:75:c4:cc:dd:
cf:ac:4b:9d:4e:36:52:d4:3b:63:d6:94:58:a5:41:33:fa:b2:
85:fb:11:75:33:7f:1e:6b:75:86:45:11:37:b6:83:97:29:f3:
b1:ee:e0:9f:1e:1b:dc:d1:bc:fb:43:c6:99:b8:c5:73:2c:aa:
ef:c8:ea:a1:cf:73:7e:65:0b:ed:52:f7:46:47:dd:7f:4f:ce:
7a:7f:b3:2b:f3:b1:1f:10:1a:f5:3b:2c:cc:f5:55:b4:9c:a4:
af:d8:1e:5e:ab:ca:5b:f1:9a:53:ab:32:6b:bc:17:46:96:12:
6a:3b:5f:ef:10:f5:05:6a:53:ba:af:d3:4d:1d:ad:f0:3b:e7:
9a:d0:61:2f:a1:4e:c3:c1:c5:64:26:10:56:f0:69:be:dd:4d:
04:ce:85:43:10:6d:37:74:88:19:9e:d8:6a:e3:bd:ef:00:76:
b0:00:36:19:55:3d:9c:b1:55:27:ac:4d:36:23:e8:c3:7b:a7:
d5:45:06:5a:e6:50:48:32:71:60:e0:bc:26:2f:27:49:80:a0:
09:71:a9:bf:28:b4:7b:96:9d:ef:96:9a:0d:b3:19:a3:7f:1f:
83:8b:4b:eb:f0:b5:64:6f:10:46:2b:50:09:f3:30:a5:c0:de:
fd:2b:f1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:03 2024 by rpki-client on console-fra.rpki-client.org