Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/v44_sobWac1iR4NRJWA937Zs5Dc.roa
File: v44_sobWac1iR4NRJWA937Zs5Dc.roa (raw, json)
Hash identifier: j3oDIuSvYu6gYS8fQfMR5DoK6zsvEP+BjiTekDRu+PY=
Subject key identifier: BF:8E:3F:B2:86:D6:69:CD:62:47:83:51:25:60:3D:DF:B6:6C:E4:37
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 07D21F63
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/v44_sobWac1iR4NRJWA937Zs5Dc.roa
Signing time: Wed 09 Mar 2022 20:27:13 +0000
ROA not before: Wed 09 Mar 2022 20:27:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.12.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.179.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131211107 (0x7d21f63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Mar 9 20:27:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf8e3fb286d669cd6247835125603ddfb66ce437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ee:00:3e:b6:81:b4:a3:52:60:56:1f:79:89:
ac:82:a4:e7:44:5b:f6:03:88:d7:20:d2:4f:d0:ec:
57:47:ce:d1:c2:7f:a6:9f:da:a4:56:2e:14:68:c0:
90:d2:6b:c2:ea:a9:6b:f4:e4:a2:4f:95:0b:b7:72:
34:fc:cc:f9:6b:f2:a2:e0:2f:19:eb:dc:d2:a5:16:
41:a1:9c:76:e4:f2:ad:e3:41:62:b3:1e:77:88:4f:
fb:a9:e5:a1:aa:99:f3:5e:b9:cb:69:83:34:69:9a:
af:8f:b1:89:ff:21:1d:0f:f1:15:e7:97:99:14:0e:
a9:86:75:3f:9e:11:5e:cf:97:c3:81:50:9a:54:17:
ba:6d:4b:18:9c:e6:ef:d0:d9:61:1a:fd:bc:31:5c:
e2:d2:de:93:80:94:e8:e1:d0:96:84:de:7d:03:15:
3b:52:16:f5:a5:c3:a9:66:93:21:ca:bd:c0:73:81:
c4:fb:23:6c:63:0a:58:b3:c4:3f:2d:ed:4c:fe:87:
c1:3e:07:3e:6d:47:0e:3c:37:8d:39:f1:e2:3f:27:
fc:99:31:1a:c9:7a:d5:34:b8:4a:5f:85:d7:ac:40:
b4:2e:cb:13:9d:33:7c:e6:be:3e:ea:f7:fe:6f:e9:
b8:1d:55:07:98:d3:5a:8a:8c:2a:59:e5:66:22:ea:
3d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8E:3F:B2:86:D6:69:CD:62:47:83:51:25:60:3D:DF:B6:6C:E4:37
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/v44_sobWac1iR4NRJWA937Zs5Dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.179.0/24
185.230.12.0/24
213.209.130.0/24
213.209.133.0/24
213.209.136.0/24
213.209.138.0/24
213.209.145.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
1b:e8:a6:be:ce:a9:da:57:9e:83:04:3d:5f:2d:fb:c3:7f:7c:
e7:4a:1a:85:ec:bb:6a:a2:0d:61:a0:ef:1e:67:b9:8f:8d:88:
4a:da:5e:64:1e:54:1e:fe:99:cb:4b:59:df:ee:c5:d2:e2:b9:
15:08:27:46:91:fe:b4:14:74:19:82:58:9d:4a:04:6c:6c:9d:
8f:52:90:1e:8c:ba:c5:f8:4e:28:38:a5:93:03:85:97:4f:cf:
f8:05:c8:11:ae:78:af:47:9e:7a:08:cc:9c:00:72:d3:70:47:
27:7a:76:17:63:84:de:6a:32:40:3a:56:4d:35:b0:7d:73:b0:
23:26:97:ce:be:59:fb:e8:fd:26:48:ae:d7:e0:74:45:cf:81:
7d:e4:15:70:f7:96:49:ef:6f:bd:51:bd:19:49:76:16:f0:22:
ab:73:55:0b:7f:23:0e:ce:83:b4:e2:2c:23:1f:e0:ee:19:8d:
ca:4b:9e:a9:d8:95:eb:b6:c2:c1:14:c4:8c:cb:0f:39:d1:de:
a0:2f:fd:9b:a6:b5:56:32:0c:c3:4a:3f:e7:da:b2:28:91:d7:
99:93:2e:b3:34:a6:29:d7:e4:3f:cd:dd:46:a3:95:45:ff:5a:
3e:fd:2e:b2:c9:f1:1d:52:7f:a1:57:9b:7c:04:79:bd:be:b6:
12:40:c7:a0
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgIEB9IfYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjQ3NmUxMmU4OTg3ZTViMzAyY2RjMjRiZGQ5ZGIzZmU4M2M4NDQ5MB4XDTIyMDMw
OTIwMjcxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmY4ZTNmYjI4NmQ2
NjljZDYyNDc4MzUxMjU2MDNkZGZiNjZjZTQzNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMruAD62gbSjUmBWH3mJrIKk50Rb9gOI1yDST9DsV0fO0cJ/
pp/apFYuFGjAkNJrwuqpa/Tkok+VC7dyNPzM+WvyouAvGevc0qUWQaGcduTyreNB
YrMed4hP+6nloaqZ8165y2mDNGmar4+xif8hHQ/xFeeXmRQOqYZ1P54RXs+Xw4FQ
mlQXum1LGJzm79DZYRr9vDFc4tLek4CU6OHQloTefQMVO1IW9aXDqWaTIcq9wHOB
xPsjbGMKWLPEPy3tTP6HwT4HPm1HDjw3jTnx4j8n/JkxGsl61TS4Sl+F16xAtC7L
E50zfOa+Pur3/m/puB1VB5jTWoqMKlnlZiLqPUMCAwEAAaOCAoQwggKAMB0GA1Ud
DgQWBBS/jj+yhtZpzWJHg1ElYD3ftmzkNzAfBgNVHSMEGDAWgBQ7R24S6Jh+WzAs
3CS92ds/6DyESTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8x
L3Y0NF9zb2JXYWMxaVI0TlJKV0E5MzdaczVEYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
ZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8xL08wZHVFdWlZZmxz
d0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
mQYIKwYBBQUHAQcBAf8EgYkwgYYwbgQCAAEwaDAMAwQHTVqAAwQATVqCMAwDBAJN
WoQDBAFNWogDBABNWowwDAMEAU1ajgMEAE1akDAMAwQBTVqSAwQATVqUAwQATVqz
AwQAueYMAwQA1dGCAwQA1dGFAwQA1dGIAwQA1dGKAwQA1dGRMBQEAgACMA4DBQAq
BCnCAwUAKgQpxzANBgkqhkiG9w0BAQsFAAOCAQEAG+imvs6p2leegwQ9Xy37w398
50oahey7aqINYaDvHme5j42IStpeZB5UHv6Zy0tZ3+7F0uK5FQgnRpH+tBR0GYJY
nUoEbGydj1KQHoy6xfhOKDilkwOFl0/P+AXIEa54r0eeegjMnABy03BHJ3p2F2OE
3moyQDpWTTWwfXOwIyaXzr5Z++j9Jkiu1+B0Rc+BfeQVcPeWSe9vvVG9GUl2FvAi
q3NVC38jDs6DtOIsIx/g7hmNykueqdiV67bCwRTEjMsPOdHeoC/9m6a1VjIMw0o/
59qyKJHXmZMuszSmKdfkP83dRqOVRf9aPv0ussnxHVJ/oVebfAR5vb62EkDHoA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org