Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/xNX8o0z8fLwjkVRj3ril830d7yM.roa
File: xNX8o0z8fLwjkVRj3ril830d7yM.roa (raw, json)
Hash identifier: wlWSNFX85inQFi98YvCzIwTYMmZPX87R2GJrp7cQR78=
Subject key identifier: C4:D5:FC:A3:4C:FC:7C:BC:23:91:54:63:DE:B8:A5:F3:7D:1D:EF:23
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018508A5B2BE4AD733555EFE1E51C8B664D2
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/xNX8o0z8fLwjkVRj3ril830d7yM.roa
Signing time: Mon 12 Dec 2022 23:22:35 +0000
ROA not before: Mon 12 Dec 2022 23:22:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 213.209.149.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:08:a5:b2:be:4a:d7:33:55:5e:fe:1e:51:c8:b6:64:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Dec 12 23:22:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4d5fca34cfc7cbc23915463deb8a5f37d1def23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ea:1c:c6:37:b1:c0:3a:14:60:5a:17:40:f9:
44:53:bb:35:bd:f9:df:66:46:a3:07:2c:00:8b:db:
1c:0f:48:3d:37:80:8e:7c:9d:61:07:d6:e9:0e:88:
ea:19:65:c9:0d:19:eb:94:d8:e8:8f:f8:c3:19:4c:
b3:17:13:03:2e:fb:30:f2:c5:c7:ab:c3:b4:88:46:
0f:89:b9:0b:00:35:1a:5a:3d:ef:b9:0f:aa:ec:88:
9e:44:d0:2e:fa:53:ee:7e:5b:d0:f8:ec:77:a5:0f:
77:d4:cf:17:d8:80:e6:c2:02:61:39:e4:84:3f:1a:
da:fc:aa:11:51:e5:1a:70:d0:08:c5:2a:d1:f1:fa:
e1:03:c1:54:62:b9:77:9c:43:c2:1b:7c:39:e1:57:
8c:19:68:44:a1:4d:91:0f:49:93:53:1d:cf:07:f1:
8e:60:d4:f8:87:71:d3:00:bf:18:66:52:3b:29:e3:
d2:90:64:39:06:7b:81:70:3e:49:f2:a2:30:60:a0:
cf:a5:4d:c6:66:dd:ed:7b:5a:93:db:ae:53:82:36:
1d:94:da:ba:94:79:be:4c:37:ee:47:5a:71:7e:67:
67:ce:1f:0e:1d:64:8d:9e:73:38:5d:4a:df:0a:a5:
ac:cd:08:be:04:4f:ef:a0:df:c6:b3:c7:67:8c:e7:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D5:FC:A3:4C:FC:7C:BC:23:91:54:63:DE:B8:A5:F3:7D:1D:EF:23
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/xNX8o0z8fLwjkVRj3ril830d7yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.138.0/24
213.209.149.0/24
213.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f7:77:7c:39:55:06:c3:ac:a1:c7:6a:25:70:31:f6:78:26:
3d:a4:2d:85:4c:1e:be:88:39:cf:dc:49:d2:80:93:ee:b7:c0:
16:32:b7:20:1f:53:23:89:7b:d0:73:cc:b2:76:ac:40:b8:a8:
59:60:81:6c:f2:42:c1:d9:19:fa:58:08:9f:8c:49:55:af:4d:
fa:94:31:ac:69:97:fb:08:bc:e4:18:6a:60:de:51:eb:fa:fc:
83:75:60:f9:a5:a1:04:ad:dd:79:f7:ab:29:5e:26:60:e2:a6:
09:85:a7:a4:f9:ac:c8:4e:20:23:7d:be:c9:ed:d1:1e:d3:4d:
90:f9:eb:db:e9:fe:ee:25:0d:e8:e5:2e:c7:89:2e:d4:b0:23:
e9:d7:03:12:2a:32:c0:e3:8d:cf:0a:eb:7c:56:83:d9:b4:40:
e1:c1:ed:f4:2a:91:df:67:f7:d1:60:7d:f8:77:d8:3d:55:97:
73:aa:7b:35:37:40:4d:49:bf:10:57:80:1f:1a:4b:89:94:65:
9b:61:44:42:39:27:ae:6d:cf:f2:96:1f:75:85:46:d8:0b:80:
1c:b9:5e:a2:06:07:95:56:24:1d:6a:c9:83:65:11:48:bd:65:
d2:2e:9f:ac:c3:de:27:a0:82:a7:2e:35:26:db:ad:b7:d3:0e:
43:3c:1c:4e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYUIpbK+StczVV7+HlHItmTSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjIxMjEyMjMyMjM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGQ1ZmNhMzRjZmM3Y2JjMjM5MTU0NjNkZWI4YTVmMzdkMWRlZjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOocxjexwDoUYFoXQPlEU7s1vfnf
ZkajBywAi9scD0g9N4COfJ1hB9bpDojqGWXJDRnrlNjoj/jDGUyzFxMDLvsw8sXH
q8O0iEYPibkLADUaWj3vuQ+q7IieRNAu+lPuflvQ+Ox3pQ931M8X2IDmwgJhOeSE
Pxra/KoRUeUacNAIxSrR8frhA8FUYrl3nEPCG3w54VeMGWhEoU2RD0mTUx3PB/GO
YNT4h3HTAL8YZlI7KePSkGQ5BnuBcD5J8qIwYKDPpU3GZt3te1qT265TgjYdlNq6
lHm+TDfuR1pxfmdnzh8OHWSNnnM4XUrfCqWszQi+BE/voN/Gs8dnjOfSkQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMTV/KNM/Hy8I5FUY964pfN9He8jMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEveE5YOG8wejhmTHdqa1ZSajNyaWw4MzBkN3lNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATVqKAwQA
1dGVAwQA1dGfMA0GCSqGSIb3DQEBCwUAA4IBAQCd93d8OVUGw6yhx2olcDH2eCY9
pC2FTB6+iDnP3EnSgJPut8AWMrcgH1MjiXvQc8yydqxAuKhZYIFs8kLB2Rn6WAif
jElVr036lDGsaZf7CLzkGGpg3lHr+vyDdWD5paEErd1596spXiZg4qYJhaek+azI
TiAjfb7J7dEe002Q+evb6f7uJQ3o5S7HiS7UsCPp1wMSKjLA443PCut8VoPZtEDh
we30KpHfZ/fRYH34d9g9VZdzqns1N0BNSb8QV4AfGkuJlGWbYURCOSeubc/ylh91
hUbYC4AcuV6iBgeVViQdasmDZRFIvWXSLp+sw94noIKnLjUm26230w5DPBxO
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org