Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/tzKlU4YVyfeV0ZwUFH62pvN1-Kc.roa
File: tzKlU4YVyfeV0ZwUFH62pvN1-Kc.roa (raw, json)
Hash identifier: 1RuJ8T1Py6swmvjkqDS9lAp0kpb5euGkBjCSV/i8vEg=
Subject key identifier: B7:32:A5:53:86:15:C9:F7:95:D1:9C:14:14:7E:B6:A6:F3:75:F8:A7
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 06E807C8
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/tzKlU4YVyfeV0ZwUFH62pvN1-Kc.roa
Signing time: Sat 01 Jan 2022 07:00:22 +0000
ROA not before: Sat 01 Jan 2022 07:00:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 77.90.187.0/24 maxlen: 24
213.209.132.0/24 maxlen: 24
213.209.148.0/24 maxlen: 24
77.90.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115869640 (0x6e807c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 1 07:00:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b732a5538615c9f795d19c14147eb6a6f375f8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9d:54:8c:9c:2a:10:24:75:87:ed:92:a5:5b:
55:4f:68:2e:61:3f:e8:51:50:1c:91:19:5f:a2:bd:
75:d0:77:73:69:c4:9e:a1:55:64:f8:a5:f5:13:b1:
dd:d7:95:47:3a:b5:97:95:6b:ce:48:c5:6e:a3:20:
0f:17:55:e4:54:a4:bb:76:b8:d7:74:66:01:29:43:
d0:af:d5:24:8e:5a:2e:b7:34:2a:65:3c:73:cd:47:
bd:98:da:17:51:c8:08:70:f0:98:ca:53:7e:cd:5a:
29:50:83:3d:d3:f6:a9:e8:b9:ff:a2:5b:5f:7c:b0:
2e:9b:e4:8f:e7:ad:65:d5:df:1f:c0:d3:13:26:4f:
fa:7f:dc:f8:93:63:67:87:16:60:58:a4:c0:59:47:
12:8d:10:81:99:fd:b2:37:b1:0a:37:1e:39:fb:27:
83:cc:cb:3b:ae:54:2f:fd:bb:78:7e:6d:05:9f:18:
5a:1a:59:e9:5e:90:36:14:c9:10:23:36:4c:8c:28:
12:58:6e:4b:c2:9a:09:0e:0d:38:74:7e:25:0b:54:
48:6e:a1:c5:a2:66:e0:6a:4f:2c:42:06:3e:70:71:
30:49:13:ec:46:7e:7b:28:7f:5e:26:a5:3d:7b:d1:
c5:98:4d:d6:30:a6:10:b3:ae:11:1e:1e:dd:19:67:
7c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:32:A5:53:86:15:C9:F7:95:D1:9C:14:14:7E:B6:A6:F3:75:F8:A7
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/tzKlU4YVyfeV0ZwUFH62pvN1-Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.176.0/24
77.90.187.0/24
213.209.132.0/24
213.209.148.0/24
Signature Algorithm: sha256WithRSAEncryption
83:15:14:bd:8b:77:00:8a:d9:50:8c:6b:47:3d:a8:df:d2:ec:
7b:51:4c:d4:41:04:dd:33:f7:e1:b4:9d:1a:16:7f:82:71:27:
b6:04:98:81:20:59:ec:0f:cb:64:ec:67:6f:d4:5e:2d:bc:73:
89:f1:d0:cd:9c:3e:c0:e2:12:55:22:cb:5e:fb:b2:5b:d3:1a:
75:bf:7c:86:65:2f:f6:60:56:a6:d2:8f:69:77:7e:8a:d7:b4:
bd:54:45:76:6f:ae:65:52:3f:84:13:97:cb:f8:14:47:b1:49:
6a:f8:4a:3e:78:8f:3e:43:b3:31:70:7f:a0:42:3e:27:de:b9:
94:b2:95:2f:12:a7:2e:38:44:c2:bb:9a:d2:86:db:da:ad:18:
95:52:0b:d2:27:e9:56:3c:08:ee:81:49:1f:db:65:4f:ee:35:
d0:c3:d4:4f:d9:0f:09:55:b4:76:d7:ad:6e:f1:06:96:40:1a:
d4:3c:0c:75:92:32:c8:7e:ed:5d:1d:d5:a1:c4:cb:4c:1a:1a:
71:10:fe:b4:81:99:bc:09:0c:68:d3:f9:3c:ae:29:83:bf:44:
29:a6:c9:41:50:77:6a:18:63:15:e0:a3:d4:7c:6f:d7:e4:02:
0b:28:9e:44:7e:d8:7f:52:c8:58:db:fd:a1:f4:a9:c2:c6:b8:
be:74:97:29
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEBugHyDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjQ3NmUxMmU4OTg3ZTViMzAyY2RjMjRiZGQ5ZGIzZmU4M2M4NDQ5MB4XDTIyMDEw
MTA3MDAyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjczMmE1NTM4NjE1
YzlmNzk1ZDE5YzE0MTQ3ZWI2YTZmMzc1ZjhhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJadVIycKhAkdYftkqVbVU9oLmE/6FFQHJEZX6K9ddB3c2nE
nqFVZPil9ROx3deVRzq1l5VrzkjFbqMgDxdV5FSku3a413RmASlD0K/VJI5aLrc0
KmU8c81HvZjaF1HICHDwmMpTfs1aKVCDPdP2qei5/6JbX3ywLpvkj+etZdXfH8DT
EyZP+n/c+JNjZ4cWYFikwFlHEo0QgZn9sjexCjceOfsng8zLO65UL/27eH5tBZ8Y
WhpZ6V6QNhTJECM2TIwoElhuS8KaCQ4NOHR+JQtUSG6hxaJm4GpPLEIGPnBxMEkT
7EZ+eyh/XialPXvRxZhN1jCmELOuER4e3RlnfM8CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBS3MqVThhXJ95XRnBQUfram83X4pzAfBgNVHSMEGDAWgBQ7R24S6Jh+WzAs
3CS92ds/6DyESTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8x
L3R6S2xVNFlWeWZlVjBad1VGSDYycHZOMS1LYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
ZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8xL08wZHVFdWlZZmxz
d0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAE1asAMEAE1auwMEANXRhAMEANXR
lDANBgkqhkiG9w0BAQsFAAOCAQEAgxUUvYt3AIrZUIxrRz2o39Lse1FM1EEE3TP3
4bSdGhZ/gnEntgSYgSBZ7A/LZOxnb9ReLbxzifHQzZw+wOISVSLLXvuyW9Madb98
hmUv9mBWptKPaXd+ite0vVRFdm+uZVI/hBOXy/gUR7FJavhKPniPPkOzMXB/oEI+
J965lLKVLxKnLjhEwrua0obb2q0YlVIL0ifpVjwI7oFJH9tlT+410MPUT9kPCVW0
dtetbvEGlkAa1DwMdZIyyH7tXR3VocTLTBoacRD+tIGZvAkMaNP5PK4pg79EKabJ
QVB3ahhjFeCj1Hxv1+QCCyieRH7Yf1LIWNv9ofSpwsa4vnSXKQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:09 2023 by rpki-client on console-ams.rpki-client.org