Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/s8RB6dSnYhBe9c-Zakdvs7p0HoQ.roa
File: s8RB6dSnYhBe9c-Zakdvs7p0HoQ.roa (raw, json)
Hash identifier: 2FkfngjBxBvGpaDwuXQi+iHHUspDui+3XHfpx36IaSs=
Subject key identifier: B3:C4:41:E9:D4:A7:62:10:5E:F5:CF:99:6A:47:6F:B3:BA:74:1E:84
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 099B5FB7
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/s8RB6dSnYhBe9c-Zakdvs7p0HoQ.roa
Signing time: Tue 14 Jun 2022 11:56:44 +0000
ROA not before: Tue 14 Jun 2022 11:56:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 213.209.154.0/24 maxlen: 24
213.209.153.0/24 maxlen: 24
77.90.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161177527 (0x99b5fb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 14 11:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3c441e9d4a762105ef5cf996a476fb3ba741e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:b1:a3:85:ee:74:54:d3:10:86:0a:af:52:
23:7a:11:47:42:48:51:3b:2e:c9:fe:07:b9:69:91:
31:c7:95:4f:8a:a9:68:42:b6:b9:16:85:f8:fb:94:
bc:b9:48:66:ee:7b:0c:34:09:8c:76:3e:a2:e6:70:
4e:35:c4:0a:d2:e8:6b:b8:05:29:62:35:6c:97:94:
36:0f:9e:d7:80:f7:76:dc:bb:d1:7a:91:54:e1:93:
85:ab:24:66:a0:34:48:8f:85:ab:8c:fc:85:59:9f:
31:d5:f6:ae:92:d2:88:8e:08:0a:c4:45:71:e4:f3:
9d:94:ed:36:b7:6b:c5:53:9f:ec:c7:79:98:db:a4:
e5:30:4b:7e:b2:59:76:b5:fc:c7:51:9f:15:34:90:
74:f9:b0:03:bf:f7:04:a0:d6:c2:a0:b2:dd:4b:a6:
b5:32:55:b7:b9:7f:37:f2:1e:65:2f:f8:d1:9d:87:
86:0b:bf:b1:a5:5e:86:f8:0e:ea:94:e4:71:ff:ab:
50:c2:6c:76:70:f8:1b:b5:97:e3:a4:b0:58:8e:cf:
ab:39:19:a7:3b:16:27:29:79:0b:e7:44:62:49:33:
b1:d3:de:d4:0f:bc:27:fe:93:62:6a:8e:6b:28:7a:
db:da:67:a1:89:eb:9a:6f:75:83:78:f3:60:65:41:
85:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C4:41:E9:D4:A7:62:10:5E:F5:CF:99:6A:47:6F:B3:BA:74:1E:84
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/s8RB6dSnYhBe9c-Zakdvs7p0HoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.167.0/24
213.209.153.0-213.209.154.255
Signature Algorithm: sha256WithRSAEncryption
0f:3e:40:ea:ec:b2:f1:ab:29:58:d1:6b:bf:a0:33:c1:5f:22:
ba:cd:32:ba:c0:2c:39:31:a9:3f:1c:72:68:47:09:04:09:bc:
97:0a:8d:23:35:83:66:fb:31:25:a9:6a:df:b7:83:12:a3:d0:
97:32:c8:11:a5:64:a4:fe:40:c4:61:65:75:77:c9:3e:be:ca:
ee:20:a8:f7:b7:8a:14:84:a8:fd:19:4e:8f:c7:48:da:ea:13:
4c:d0:0e:a4:a2:0e:98:79:e9:55:2f:23:fc:90:97:d0:24:b2:
f1:8d:b1:37:da:60:62:fb:f6:a8:89:bf:aa:83:fa:3d:44:ed:
60:60:9f:b2:a2:00:c8:8f:8a:21:e8:45:8f:03:4b:55:58:9c:
6f:99:b6:06:26:25:90:0f:e7:e0:df:23:66:4e:29:5e:fb:08:
a7:c5:a2:2e:97:99:2d:e6:a6:af:fa:e0:d1:09:0b:1a:66:52:
28:d6:89:53:2f:77:2d:ff:b7:8d:2b:70:b6:2c:7d:38:f1:fc:
e6:25:3d:f6:d0:7a:7c:5f:52:40:28:b3:75:53:27:49:ed:4e:
33:2d:ea:e0:5f:c0:97:5a:db:d6:e8:4d:4c:4e:b0:8e:e9:31:
df:ab:4c:c0:4f:ab:b3:70:fa:01:19:a9:d8:e7:6d:79:9c:02:
d1:21:bf:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIECZtftzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjQ3NmUxMmU4OTg3ZTViMzAyY2RjMjRiZGQ5ZGIzZmU4M2M4NDQ5MB4XDTIyMDYx
NDExNTY0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjNjNDQxZTlkNGE3
NjIxMDVlZjVjZjk5NmE0NzZmYjNiYTc0MWU4NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALoVsaOF7nRU0xCGCq9SI3oRR0JIUTsuyf4HuWmRMceVT4qp
aEK2uRaF+PuUvLlIZu57DDQJjHY+ouZwTjXECtLoa7gFKWI1bJeUNg+e14D3dty7
0XqRVOGThaskZqA0SI+Fq4z8hVmfMdX2rpLSiI4ICsRFceTznZTtNrdrxVOf7Md5
mNuk5TBLfrJZdrX8x1GfFTSQdPmwA7/3BKDWwqCy3UumtTJVt7l/N/IeZS/40Z2H
hgu/saVehvgO6pTkcf+rUMJsdnD4G7WX46SwWI7PqzkZpzsWJyl5C+dEYkkzsdPe
1A+8J/6TYmqOayh629pnoYnrmm91g3jzYGVBhZECAwEAAaOCAhcwggITMB0GA1Ud
DgQWBBSzxEHp1KdiEF71z5lqR2+zunQehDAfBgNVHSMEGDAWgBQ7R24S6Jh+WzAs
3CS92ds/6DyESTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8x
L3M4UkI2ZFNuWWhCZTljLVpha2R2czdwMEhvUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
ZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8xL08wZHVFdWlZZmxz
d0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt
BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAE1apzAMAwQA1dGZAwQA1dGaMA0G
CSqGSIb3DQEBCwUAA4IBAQAPPkDq7LLxqylY0Wu/oDPBXyK6zTK6wCw5Mak/HHJo
RwkECbyXCo0jNYNm+zElqWrft4MSo9CXMsgRpWSk/kDEYWV1d8k+vsruIKj3t4oU
hKj9GU6Px0ja6hNM0A6kog6YeelVLyP8kJfQJLLxjbE32mBi+/aoib+qg/o9RO1g
YJ+yogDIj4oh6EWPA0tVWJxvmbYGJiWQD+fg3yNmTile+winxaIul5kt5qav+uDR
CQsaZlIo1olTL3ct/7eNK3C2LH048fzmJT320Hp8X1JAKLN1UydJ7U4zLergX8CX
WtvW6E1MTrCO6THfq0zAT6uzcPoBGanY5215nALRIb+v
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org