Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/wtYfpvFxmLQKdIawZozpT2Yn2CA.roa
File: wtYfpvFxmLQKdIawZozpT2Yn2CA.roa (raw, json)
Hash identifier: 5mZbPVPB/ka25MHEKMlb9A76RKG1Z6qsC9tXvPHHDnY=
Subject key identifier: C2:D6:1F:A6:F1:71:98:B4:0A:74:86:B0:66:8C:E9:4F:66:27:D8:20
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0900C114
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/wtYfpvFxmLQKdIawZozpT2Yn2CA.roa
Signing time: Wed 11 May 2022 18:34:02 +0000
ROA not before: Wed 11 May 2022 18:34:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.188.0/24 maxlen: 24
213.209.134.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
77.90.173.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
77.90.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151044372 (0x900c114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: May 11 18:34:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2d61fa6f17198b40a7486b0668ce94f6627d820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:21:c1:9a:47:1b:77:35:49:e1:fc:23:35:95:
ec:ee:2a:99:02:24:c7:43:90:98:09:97:62:dc:62:
b4:09:88:46:f5:27:98:db:c0:71:13:08:89:41:07:
9d:db:12:92:aa:68:ae:85:78:5a:8a:c2:f3:a0:2f:
7f:f3:af:c9:22:80:25:38:ca:72:56:db:d1:46:8e:
bc:d5:92:7c:e0:46:ab:3f:c7:62:6c:d9:49:94:40:
f0:c0:1e:59:9d:96:ad:61:5f:81:3c:b9:af:7b:c8:
72:ea:2c:75:41:b4:43:74:ae:a0:2e:f3:7d:8f:55:
9a:01:74:ef:bd:98:1e:a4:62:4d:68:96:d2:f0:15:
f8:33:ec:cf:de:ef:e0:9b:14:ef:b6:2f:ff:12:0e:
b5:e7:08:e5:2f:01:cb:0f:2f:64:83:f5:70:13:2b:
12:71:f4:04:88:0f:0a:75:09:ed:82:53:3d:e8:4a:
eb:f1:92:46:8d:e2:9e:a9:30:79:8c:e4:bf:8e:da:
65:ea:29:d1:85:dd:c9:71:f5:12:3e:f1:c4:05:4a:
e1:eb:b0:09:4e:f6:9b:17:ed:0f:00:e2:3f:a6:7f:
dc:84:ac:a7:4e:3b:e8:25:f9:6f:72:54:50:7d:bc:
b7:71:16:fa:17:7b:9d:31:35:f1:fc:82:68:91:4a:
be:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D6:1F:A6:F1:71:98:B4:0A:74:86:B0:66:8C:E9:4F:66:27:D8:20
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/wtYfpvFxmLQKdIawZozpT2Yn2CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.173.0/24
77.90.184.0/24
77.90.188.0/24
185.230.15.0/24
213.209.134.0/24
213.209.157.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:19:b6:d4:3b:d8:65:8c:b1:60:b1:1e:92:95:91:c5:b4:06:
a9:fe:e3:91:3f:42:53:b4:5c:7c:d4:c7:33:db:8c:b3:49:4d:
04:cf:fb:01:ee:05:9e:00:d6:a1:c0:0d:fc:31:7f:3d:f3:df:
9d:05:86:70:0b:6d:58:50:5a:72:04:7c:d1:5e:87:67:62:af:
53:ff:ea:2a:98:42:f5:c1:74:22:eb:90:7a:05:b2:9c:10:fc:
ca:99:54:05:47:da:24:47:81:20:dc:ef:82:d1:a8:2d:aa:1b:
30:48:94:04:83:a2:ee:84:0a:82:e1:12:e4:cf:34:28:83:e0:
6b:2a:b2:88:c1:46:46:b7:8e:a3:56:6d:1d:16:ed:c3:d0:2d:
a7:9e:c7:0f:b6:0b:33:10:a1:af:f4:a8:a7:77:35:33:ca:7c:
04:53:0f:8b:e6:61:dc:87:5e:a0:84:58:32:00:1d:bc:14:27:
34:10:14:36:ea:d8:59:a6:4d:b4:c2:49:a9:a0:ba:58:dd:b8:
3e:75:ed:da:ec:58:db:a7:cd:59:a8:f6:13:71:4d:af:07:c6:
24:7d:d7:df:a5:c6:71:d8:ff:61:13:80:bd:d5:f6:09:c9:18:
cf:f2:b3:fb:0e:43:5b:22:0e:a7:0a:09:41:ba:4f:40:e7:92:
14:5a:d4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org