Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/weGIIW6tl8WdAWfjWjP-AEj3_Qg.roa
File: weGIIW6tl8WdAWfjWjP-AEj3_Qg.roa (raw, json)
Hash identifier: i3koq40nVN3gkchf6xwWiOpHudPJ5zzdlZC7UeP1dX8=
Subject key identifier: C1:E1:88:21:6E:AD:97:C5:9D:01:67:E3:5A:33:FE:00:48:F7:FD:08
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01851D6A2BBD66CFCCBED0F58F29C1225F04
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/weGIIW6tl8WdAWfjWjP-AEj3_Qg.roa
Signing time: Sat 17 Dec 2022 00:09:35 +0000
ROA not before: Sat 17 Dec 2022 00:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6830
IP address blocks: 77.90.188.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
77.90.151.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1d:6a:2b:bd:66:cf:cc:be:d0:f5:8f:29:c1:22:5f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Dec 17 00:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1e188216ead97c59d0167e35a33fe0048f7fd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4a:44:b1:c2:c2:2e:cc:67:ce:1f:a0:5e:66:
31:13:30:91:9f:d7:5c:ff:06:51:98:b2:95:35:e3:
6e:e4:ae:c8:4f:a5:4c:ea:e8:a1:4e:99:79:bc:df:
36:21:28:0a:5a:ea:dc:c0:60:e7:8d:82:b6:c2:50:
e3:33:3e:48:64:5f:48:b2:b9:02:2c:0c:31:53:7d:
a5:ac:02:b2:a5:28:1e:57:bb:59:84:70:b2:7d:e5:
78:dd:57:16:f6:f4:25:42:ff:f8:ad:0e:95:92:ef:
ee:47:5e:26:41:95:d0:74:a6:59:20:2b:f5:07:70:
ca:0e:18:af:6a:7f:c0:fe:11:f8:fa:f6:a8:9b:7b:
06:dd:9e:fa:a6:01:35:c8:23:5b:95:a8:19:c4:e6:
6d:bd:1a:e3:12:ce:1f:47:bb:aa:96:1b:25:4b:9a:
4b:83:c1:b3:c6:98:87:d7:87:25:13:13:50:66:de:
96:bf:ca:70:80:8f:b1:13:3d:08:7a:0e:cb:a7:80:
7c:f7:40:98:b6:35:f6:64:1b:5f:39:5b:64:30:03:
ec:4e:fd:b6:73:a8:03:da:ba:a0:21:15:ec:cc:a6:
3f:55:43:3c:e6:98:5e:b2:82:07:45:8d:d9:c7:30:
80:ad:15:48:8c:01:75:c8:98:0f:7c:35:0c:d5:52:
90:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E1:88:21:6E:AD:97:C5:9D:01:67:E3:5A:33:FE:00:48:F7:FD:08
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/weGIIW6tl8WdAWfjWjP-AEj3_Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.151.0/24
77.90.185.0/24
77.90.188.0/24
213.209.143.0/24
213.209.146.0/24
213.209.149.0/24
213.209.156.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:16:e8:e4:86:c2:1f:3d:f8:27:b9:84:17:ca:2c:b2:ab:82:
04:4f:e1:9f:6d:52:dd:28:4f:6f:f7:49:93:b3:19:c0:47:0f:
17:9d:32:94:5b:3e:55:1f:46:06:87:d8:c5:63:f7:01:81:6e:
bf:29:b6:5e:a3:c0:ac:32:c6:92:52:ec:6a:4e:d4:d5:46:61:
96:da:d3:96:b8:87:02:a3:4a:d6:bd:58:7f:0c:4d:c4:aa:a5:
e6:84:a3:df:c7:45:39:1b:44:2b:59:82:14:e6:70:c8:b1:fb:
a1:ed:cc:82:2b:d8:39:16:c9:a6:fa:f1:ae:f3:96:b1:75:80:
ca:7a:80:8a:04:d0:c8:fd:41:ac:3c:30:ea:ea:f8:1f:4a:22:
6c:2a:fa:cd:66:fe:27:a5:c5:47:4d:d6:09:f8:d3:a1:0f:31:
36:d1:de:ab:f9:75:fc:57:11:93:11:74:37:4b:5c:f4:ab:5f:
bc:a7:61:51:82:24:64:7a:b8:c9:f5:db:b0:cc:d4:38:ff:0b:
0f:93:c0:5d:2a:9a:4c:f5:86:55:36:f6:ae:24:6a:9a:1f:10:
d9:88:10:7b:a7:9e:27:36:fa:78:74:52:a8:69:b3:f2:7e:aa:
69:f3:8b:53:16:4a:9e:69:4b:ab:bf:61:73:37:99:5b:ee:6b:
bf:ad:f1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org