Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/wamgFgDmW_G-sRtohztjNeFB8cI.roa
File: wamgFgDmW_G-sRtohztjNeFB8cI.roa (raw, json)
Hash identifier: ++BCeA8u4nKn1EDIAIt6l4YSRQid5/y9x4TZu5fWObw=
Subject key identifier: C1:A9:A0:16:00:E6:5B:F1:BE:B1:1B:68:87:3B:63:35:E1:41:F1:C2
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 091E6C29
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/wamgFgDmW_G-sRtohztjNeFB8cI.roa
Signing time: Sat 14 May 2022 10:36:41 +0000
ROA not before: Sat 14 May 2022 10:36:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 185.230.14.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.147.0/24 maxlen: 24
213.209.158.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
77.90.150.0/24 maxlen: 24
77.90.149.0/24 maxlen: 24
77.90.157.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.179.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152988713 (0x91e6c29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: May 14 10:36:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1a9a01600e65bf1beb11b68873b6335e141f1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:92:ec:6b:46:50:94:c1:31:63:ab:c9:a5:
65:3c:0c:fb:d8:de:4a:f6:0a:e7:1e:6f:45:e9:54:
d5:5c:01:13:17:d7:e3:85:af:41:51:bb:01:fd:d3:
37:ff:3f:db:82:10:ea:48:83:6c:84:20:bb:eb:bb:
be:1a:d2:9f:c1:ed:18:f7:1c:2e:96:d6:60:de:3d:
02:94:de:cb:b5:4e:42:27:3c:11:3a:b8:36:b9:be:
78:6e:3d:c5:d6:9b:26:94:a8:7e:53:6f:0c:b0:42:
46:f5:6c:6e:7f:0f:6d:83:65:ac:44:4a:27:a2:3b:
09:e8:4d:df:4d:5f:97:13:f1:06:17:3c:04:2f:74:
0d:27:c0:c6:83:8e:57:1d:3e:c9:a2:02:a2:14:9a:
30:5e:06:7c:85:48:bc:39:d6:72:67:e1:a6:8e:79:
a2:0e:1a:36:64:6e:bc:73:08:43:4f:16:a6:4f:d4:
0d:8c:34:dc:04:dd:36:c5:60:dc:4b:84:eb:55:8a:
aa:be:8d:d4:93:e0:9c:ae:58:87:5e:bb:0c:ba:ff:
8f:6f:f8:b2:f9:ab:47:d2:fd:31:e8:cf:23:0c:93:
8b:47:4e:dc:af:04:01:5b:f3:ac:0c:9e:fd:4f:40:
61:a1:04:71:26:92:06:ac:aa:e8:82:0f:87:c2:29:
cf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A9:A0:16:00:E6:5B:F1:BE:B1:1B:68:87:3B:63:35:E1:41:F1:C2
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/wamgFgDmW_G-sRtohztjNeFB8cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.138.0/24
77.90.149.0-77.90.150.255
77.90.153.0/24
77.90.157.0/24
77.90.179.0/24
77.90.185.0/24
185.230.14.0/24
213.209.129.0/24
213.209.143.0/24
213.209.145.0/24
213.209.147.0/24
213.209.158.0/24
Signature Algorithm: sha256WithRSAEncryption
93:71:cd:a7:7d:23:04:1c:78:41:d4:6f:3a:ac:09:28:16:c7:
b2:25:53:75:6e:ce:19:e2:b9:1b:f5:9d:3a:53:3b:bc:f6:de:
5d:17:24:1e:4f:93:37:3c:09:7e:2d:c8:9d:51:78:99:db:aa:
55:13:45:13:6e:87:da:2b:d8:3c:c3:e3:f2:f0:93:9c:d8:db:
49:11:ca:5b:cd:00:48:ab:82:4b:5e:3c:86:fb:0f:e2:f6:c4:
db:fb:f3:ff:9d:3c:d2:16:4a:8f:c8:0d:24:0f:6d:57:a9:6f:
c5:44:22:05:51:af:16:79:4a:8d:dc:25:c2:45:dc:d4:1b:30:
ca:a8:7b:30:09:02:70:bf:7d:9c:cf:bc:40:42:8c:41:43:f1:
0e:8f:30:ca:92:d7:4e:76:ec:7d:02:92:9d:09:39:77:1e:55:
61:c6:a4:69:aa:9a:42:35:81:4f:9a:b9:45:9d:19:6f:e1:6b:
d9:ac:31:46:87:5f:d7:7f:0b:20:98:b1:d3:b5:f4:70:6e:38:
6a:34:c2:15:bf:8a:51:a3:b3:85:1c:d0:5c:be:66:73:84:5f:
59:24:25:73:bb:7e:8e:50:4f:33:2e:11:8f:31:91:fb:f1:f5:
16:fe:3d:ef:5b:9a:75:ba:f6:6e:50:d8:dd:c8:3d:ec:f1:1c:
9a:0f:e2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:09 2023 by rpki-client on console-ams.rpki-client.org