Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/o00jhvN6fUUnY1-aeQ0z4w4_JQQ.roa
File: o00jhvN6fUUnY1-aeQ0z4w4_JQQ.roa (raw, json)
Hash identifier: fUTGumYrpHQXRA0lqCgFe3uuLXIbaPgqyckgUGKOh60=
Subject key identifier: A3:4D:23:86:F3:7A:7D:45:27:63:5F:9A:79:0D:33:E3:0E:3F:25:04
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 094A37BA
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/o00jhvN6fUUnY1-aeQ0z4w4_JQQ.roa
Signing time: Mon 23 May 2022 10:26:30 +0000
ROA not before: Mon 23 May 2022 10:26:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 213.209.129.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.147.0/24 maxlen: 24
213.209.158.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
77.90.149.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
77.90.179.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155858874 (0x94a37ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: May 23 10:26:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a34d2386f37a7d4527635f9a790d33e30e3f2504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:d4:3f:0d:31:55:81:ef:90:d1:a7:65:d6:
a1:5c:2a:db:6c:04:34:62:9e:1a:9e:8d:aa:19:91:
5f:eb:ad:f5:a8:b1:2b:92:4d:70:90:29:34:58:fe:
80:ad:0f:a7:f0:5e:05:08:9a:ac:bb:de:aa:8e:4b:
27:11:30:09:ea:2f:89:a6:c6:8e:28:85:6f:e7:e7:
34:fd:93:44:fc:10:fd:6e:a3:36:9a:6c:ff:1d:e1:
d9:ee:81:71:c9:46:24:a6:5a:2f:b7:f0:58:c3:59:
7e:a1:82:02:67:f9:83:e2:60:3d:d3:46:c0:90:7d:
df:db:49:ab:dc:61:41:3c:6d:c1:8a:ba:d8:8f:52:
fa:11:40:32:dc:08:e5:55:cf:1c:f0:b3:f0:b1:5a:
66:8c:ba:fa:a6:d7:24:5a:8b:21:a6:7f:af:b0:8d:
96:96:ff:36:72:d8:cd:14:d5:aa:5a:0d:83:c8:8c:
da:67:ec:a3:83:73:2b:e9:f2:8f:f1:74:49:cf:bb:
22:22:3b:2b:3b:e6:58:0c:0b:8e:41:c9:e8:8d:1c:
bc:53:64:12:e1:51:38:9d:7e:82:ee:3a:68:b7:ef:
4f:9b:28:f3:19:25:b3:46:13:da:64:bc:88:0d:ea:
e1:47:f4:c6:9e:17:13:24:6d:c6:81:45:95:39:ce:
8e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4D:23:86:F3:7A:7D:45:27:63:5F:9A:79:0D:33:E3:0E:3F:25:04
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/o00jhvN6fUUnY1-aeQ0z4w4_JQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.138.0/24
77.90.149.0/24
77.90.153.0/24
77.90.179.0/24
77.90.185.0/24
185.230.14.0/24
213.209.129.0/24
213.209.143.0/24
213.209.145.0-213.209.147.255
213.209.158.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c4:07:f6:48:5c:3d:3e:3b:6a:9e:f4:bf:31:4d:eb:c5:28:
bf:87:9f:fc:99:4b:07:cb:c5:dc:d3:09:64:2e:83:e3:ff:b1:
2a:33:35:55:7f:ea:e4:e1:34:16:00:df:bf:46:bb:af:be:6a:
12:bd:c1:54:71:99:5e:e5:3c:cd:0c:a0:ee:c8:3d:0c:d0:da:
8f:a7:ea:9f:1e:45:07:05:2f:a5:dc:7a:9f:68:5d:e5:ce:5c:
89:e2:78:71:29:fb:dd:77:58:72:90:c6:c6:bd:63:cd:59:9f:
9a:0a:b6:9b:72:bc:03:54:93:7c:d7:28:36:62:17:50:50:be:
15:eb:f0:e0:37:a5:3e:b3:c7:55:eb:7f:a1:60:d3:9d:9c:52:
60:37:b1:06:64:fa:6a:d2:02:cc:c4:8e:1a:0a:19:45:04:15:
95:69:ca:b8:6a:ad:a0:94:c7:ca:3e:6a:88:ff:8b:d3:64:39:
4c:20:98:98:5e:18:45:d4:71:61:ed:37:27:88:eb:b0:2a:fe:
a0:5a:3e:c4:1e:9f:ed:b2:e3:de:f4:fb:37:67:6d:8c:f9:bd:
af:ed:ad:b3:f3:f2:24:38:8b:4d:2d:af:cc:7c:bc:5f:6f:f4:
6d:6c:e5:b2:d1:ec:fc:d4:ab:0c:b0:5f:70:ed:32:e3:b3:6a:
85:e2:53:e6
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIECUo3ujANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjQ3NmUxMmU4OTg3ZTViMzAyY2RjMjRiZGQ5ZGIzZmU4M2M4NDQ5MB4XDTIyMDUy
MzEwMjYzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTM0ZDIzODZmMzdh
N2Q0NTI3NjM1ZjlhNzkwZDMzZTMwZTNmMjUwNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMbq1D8NMVWB75DRp2XWoVwq22wENGKeGp6NqhmRX+ut9aix
K5JNcJApNFj+gK0Pp/BeBQiarLveqo5LJxEwCeoviabGjiiFb+fnNP2TRPwQ/W6j
Npps/x3h2e6BcclGJKZaL7fwWMNZfqGCAmf5g+JgPdNGwJB939tJq9xhQTxtwYq6
2I9S+hFAMtwI5VXPHPCz8LFaZoy6+qbXJFqLIaZ/r7CNlpb/NnLYzRTVqloNg8iM
2mfso4NzK+nyj/F0Sc+7IiI7KzvmWAwLjkHJ6I0cvFNkEuFROJ1+gu46aLfvT5so
8xkls0YT2mS8iA3q4Uf0xp4XEyRtxoFFlTnOjhcCAwEAAaOCAkcwggJDMB0GA1Ud
DgQWBBSjTSOG83p9RSdjX5p5DTPjDj8lBDAfBgNVHSMEGDAWgBQ7R24S6Jh+WzAs
3CS92ds/6DyESTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8x
L28wMGpodk42ZlVVblkxLWFlUTB6NHc0X0pRUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
ZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8xL08wZHVFdWlZZmxz
d0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBd
BggrBgEFBQcBBwEB/wROMEwwSgQCAAEwRAMEAE1aigMEAE1alQMEAE1amQMEAE1a
swMEAE1auQMEALnmDgMEANXRgQMEANXRjzAMAwQA1dGRAwQC1dGQAwQA1dGeMA0G
CSqGSIb3DQEBCwUAA4IBAQCTxAf2SFw9PjtqnvS/MU3rxSi/h5/8mUsHy8Xc0wlk
LoPj/7EqMzVVf+rk4TQWAN+/RruvvmoSvcFUcZle5TzNDKDuyD0M0NqPp+qfHkUH
BS+l3HqfaF3lzlyJ4nhxKfvdd1hykMbGvWPNWZ+aCrabcrwDVJN81yg2YhdQUL4V
6/DgN6U+s8dV63+hYNOdnFJgN7EGZPpq0gLMxI4aChlFBBWVacq4aq2glMfKPmqI
/4vTZDlMIJiYXhhF1HFh7TcniOuwKv6gWj7EHp/tsuPe9Ps3Z22M+b2v7a2z8/Ik
OItNLa/MfLxfb/RtbOWy0ez81KsMsF9w7TLjs2qF4lPm
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:09 2023 by rpki-client on console-ams.rpki-client.org