Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/n5I-Of9UHcR06uJXZYYA-w0t3eY.roa
File: n5I-Of9UHcR06uJXZYYA-w0t3eY.roa (raw, json)
Hash identifier: eFQKbamxWWN639vEyvWBnmRXT9MMxldo/1s+LJGvZD0=
Subject key identifier: 9F:92:3E:39:FF:54:1D:C4:74:EA:E2:57:65:86:00:FB:0D:2D:DD:E6
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0181D8107FDD090BD17AE872C509E5381F53
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/n5I-Of9UHcR06uJXZYYA-w0t3eY.roa
Signing time: Thu 07 Jul 2022 09:49:28 +0000
ROA not before: Thu 07 Jul 2022 09:49:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.191.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.139.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.157.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
77.90.179.0/24 maxlen: 24
77.90.181.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.147.0/24 maxlen: 24
213.209.151.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.158.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:10:7f:dd:09:0b:d1:7a:e8:72:c5:09:e5:38:1f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 7 09:49:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f923e39ff541dc474eae257658600fb0d2ddde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:45:ce:d9:1a:26:3e:db:f6:f8:e8:f8:32:d1:
d1:b8:8c:94:8b:d7:04:70:88:2e:8a:97:98:33:f4:
55:3c:8d:5a:67:87:61:91:84:91:84:40:16:53:6d:
05:4c:85:38:40:b9:0d:97:1b:4b:6f:64:56:37:cf:
ee:5f:b9:cf:0c:a1:7b:cb:9b:72:26:05:19:65:d2:
c2:e8:71:63:3b:cc:05:2f:e2:c5:b1:c3:18:2d:e5:
67:b6:68:86:dc:06:18:53:3e:f2:ff:88:0d:65:cc:
cd:ec:af:09:6e:5f:30:99:28:8c:fc:1c:88:2e:35:
8b:fd:5e:54:06:06:61:e2:10:ab:60:f0:43:29:df:
6a:2b:be:d7:15:3b:09:0d:74:c0:42:db:5b:b7:36:
47:2c:54:e0:f7:44:bb:5f:d7:c8:a3:03:c7:47:4f:
27:ac:4b:f2:5e:e3:53:d0:50:bf:32:55:7c:38:d8:
de:56:7c:fe:5a:ca:fd:22:6c:79:f6:53:c6:55:43:
c9:0d:99:0a:fe:89:9d:55:ae:87:d4:15:17:a8:bc:
10:50:d5:10:66:26:6f:45:b1:58:4c:6b:88:ff:94:
4b:65:3f:f6:e5:10:03:02:59:b8:d4:3e:64:5b:3d:
f2:ee:52:8b:91:6e:ca:3f:98:bd:4c:8b:7d:20:29:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:92:3E:39:FF:54:1D:C4:74:EA:E2:57:65:86:00:FB:0D:2D:DD:E6
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/n5I-Of9UHcR06uJXZYYA-w0t3eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.140.255
77.90.142.0-77.90.148.255
77.90.153.0-77.90.154.255
77.90.157.0/24
77.90.179.0/24
77.90.181.0/24
77.90.191.0/24
213.209.130.0/24
213.209.133.0-213.209.134.255
213.209.138.0/24
213.209.147.0/24
213.209.149.0/24
213.209.151.0/24
213.209.158.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
66:54:f2:49:56:a2:4c:67:7d:50:f5:50:62:f7:a0:dd:6e:07:
de:c5:7b:08:64:09:b1:e5:b5:92:20:5b:ab:8b:09:35:31:ac:
be:4b:48:ad:45:3c:34:39:dc:f9:89:4e:d6:3c:48:2a:9e:cc:
b8:32:5d:ec:04:d3:6b:97:e0:d4:73:ef:8a:ec:ea:c6:2e:58:
35:e3:1d:5e:45:6c:26:11:fa:89:6b:76:bd:bf:0a:78:b9:f7:
b7:63:28:3d:fc:a6:1b:5c:af:12:50:0e:7c:ff:55:74:d1:df:
2b:58:58:17:10:46:95:80:13:39:e4:57:7f:87:91:0a:68:97:
0e:fb:d2:07:2d:79:98:01:a2:f2:c9:e4:19:93:0d:49:f4:d4:
ba:a6:8f:19:58:a3:e4:6e:95:bb:9e:4c:44:2b:bb:ae:5c:d6:
c7:49:a7:44:11:56:04:bd:a8:2a:73:8e:d8:20:1f:96:a5:ae:
95:53:45:82:e6:c1:f6:7f:0d:9b:98:59:74:a8:b7:a1:34:17:
e0:45:d2:5b:ca:fd:7b:bb:0a:64:e2:be:8f:e9:a0:bb:dc:4d:
3b:7e:99:22:42:fb:32:b6:15:85:68:3c:a4:18:a8:4f:cb:61:
33:fc:3e:c5:72:e6:e0:b5:fa:b4:c4:7a:4d:84:97:d9:cc:f6:
4d:75:7e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:09 2023 by rpki-client on console-ams.rpki-client.org