Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/tk1cnhpUqEaFELvjNmCHhKs_ZMo.roa
File: tk1cnhpUqEaFELvjNmCHhKs_ZMo.roa (raw, json)
Hash identifier: QWkg8uvktAaTRPJQ7dgUBsK7Ds0rrR8ww5xVc6UKQts=
Subject key identifier: B6:4D:5C:9E:1A:54:A8:46:85:10:BB:E3:36:60:87:84:AB:3F:64:CA
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 088C9607
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/tk1cnhpUqEaFELvjNmCHhKs_ZMo.roa
Signing time: Mon 11 Apr 2022 14:29:16 +0000
ROA not before: Mon 11 Apr 2022 14:29:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 77.90.191.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
77.90.152.0/24 maxlen: 24
77.90.149.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.155.0/24 maxlen: 24
77.90.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143431175 (0x88c9607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 11 14:29:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b64d5c9e1a54a8468510bbe336608784ab3f64ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d8:b4:64:19:1e:0a:79:7f:9d:13:2d:c3:3a:
ef:ba:a3:64:63:7a:af:b4:ac:eb:82:db:59:fa:3a:
55:2b:83:54:14:7b:75:2c:a0:31:90:14:14:79:07:
a4:a8:3d:af:8f:c8:98:74:06:eb:25:81:7d:b1:9e:
53:f5:d2:47:8e:81:9d:b0:c0:57:23:f9:e8:fa:94:
81:84:ed:9c:fb:55:28:01:cd:bc:66:bb:92:12:4d:
d5:41:7a:8b:95:88:82:66:64:bc:e5:df:ea:48:7b:
f1:f4:15:e9:61:ca:86:14:39:48:a2:a3:e9:f8:eb:
52:98:a4:eb:bc:2d:94:18:ba:d3:61:26:16:d5:64:
f5:98:a3:a2:46:53:f2:a6:00:2f:50:91:c4:6a:4d:
a8:e0:d5:ac:4e:96:a5:54:b8:b9:22:5c:25:93:d3:
07:37:37:56:5d:30:ca:da:7a:c0:f4:86:a5:43:ad:
2d:f5:4e:40:4c:01:83:bf:84:b6:17:59:1a:d9:7c:
6f:49:14:e1:5e:5c:e4:d1:87:52:8a:63:3d:c9:49:
8b:c7:57:fa:df:21:8e:7e:2d:aa:a4:92:db:b6:9c:
fc:81:9e:86:7c:46:b9:1d:13:b7:30:86:1f:56:a8:
2a:ed:09:11:f2:56:9b:a0:be:17:50:e6:9a:fa:da:
fe:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4D:5C:9E:1A:54:A8:46:85:10:BB:E3:36:60:87:84:AB:3F:64:CA
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/tk1cnhpUqEaFELvjNmCHhKs_ZMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.149.0/24
77.90.152.0/22
77.90.179.0/24
77.90.191.0/24
213.209.129.0/24
213.209.133.0-213.209.134.255
213.209.143.0/24
213.209.145.0/24
213.209.149.0-213.209.150.255
213.209.156.0/23
Signature Algorithm: sha256WithRSAEncryption
51:db:d5:ff:e7:15:32:26:8d:47:67:2f:9f:32:21:0e:61:66:
af:a7:a5:b8:c0:89:d2:93:48:27:b0:1a:2c:3d:b8:b5:44:e7:
8c:f3:d0:71:18:68:dd:d7:b7:54:d6:8c:6f:91:e1:05:c2:76:
c8:9d:98:de:41:c7:01:8c:e5:2d:81:e9:69:88:40:92:2a:72:
62:1b:7d:d2:0b:86:d7:05:96:86:56:d2:a2:92:d0:0f:68:f8:
32:c6:e3:cf:95:87:63:8a:3b:a6:e7:98:2f:dd:c9:db:39:a3:
d2:d3:d7:05:00:8e:2d:9d:fe:be:24:d4:95:ce:c3:94:52:e0:
4d:59:c0:d3:d4:a5:50:a2:ab:5f:6f:c4:29:74:80:84:6f:5e:
9e:2a:72:c5:05:57:5e:55:af:3a:72:79:c2:3c:a8:4d:5e:2b:
cb:7d:43:05:1f:f2:bc:02:4b:49:c5:4f:44:ea:d8:56:e7:c9:
f5:1d:b4:36:22:9f:05:42:53:e1:e1:1c:02:19:53:df:74:67:
48:ec:4c:70:a7:c5:2b:65:53:5c:7d:35:fa:50:e5:31:77:e7:
aa:89:ab:4c:61:fc:5d:79:9b:92:52:2a:d6:7d:5c:a9:f7:fe:
31:03:78:35:52:32:0f:0f:ee:f1:46:62:59:e0:a7:d0:1d:d0:
f4:0f:8a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org