Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/xVCa53bhVIULyaPFEYCP_A6mVM8.roa
File: xVCa53bhVIULyaPFEYCP_A6mVM8.roa (raw, json)
Hash identifier: wr6CIJY/K5wAQ0M3xW3PeihmKnHZGXF5NItGxxuezmI=
Subject key identifier: C5:50:9A:E7:76:E1:54:85:0B:C9:A3:C5:11:80:8F:FC:0E:A6:54:CF
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0794B6D9
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/xVCa53bhVIULyaPFEYCP_A6mVM8.roa
Signing time: Thu 24 Feb 2022 10:27:49 +0000
ROA not before: Thu 24 Feb 2022 10:27:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 213.209.144.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.147.0/24 maxlen: 24
213.209.151.0/24 maxlen: 24
213.209.158.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.164.0/24 maxlen: 24
77.90.173.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127186649 (0x794b6d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Feb 24 10:27:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5509ae776e154850bc9a3c511808ffc0ea654cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:e9:bd:66:7b:0e:00:85:2b:da:85:50:86:
e7:61:37:c4:b5:06:26:8e:17:b4:fd:17:03:54:80:
79:cc:42:3f:00:ab:3b:dc:12:40:51:e2:ce:26:d5:
00:52:19:5e:83:55:83:fa:5d:4a:9c:5b:da:ff:02:
27:3e:f8:ce:6a:e0:3e:a3:48:d4:86:9c:43:05:6d:
1a:98:0d:22:09:13:b4:e5:c8:3a:85:9f:10:fb:9f:
ce:be:31:34:f4:07:bd:e3:85:d6:0a:68:e0:bf:1d:
06:0f:18:c7:ad:ab:27:4f:6d:ee:e8:27:ed:c4:0e:
a7:fe:92:16:08:72:c8:d9:e5:28:7f:26:23:af:9d:
90:82:6f:af:b8:d4:eb:5a:d2:96:43:be:f5:72:b8:
c6:33:39:31:9f:c3:2b:f6:05:5d:dd:eb:35:7e:5b:
70:59:82:4d:9b:06:1f:b1:36:ce:fc:26:f3:a0:3a:
de:33:55:35:3f:7d:bc:35:64:d3:b3:f8:a1:c8:e3:
85:2c:3a:e5:9d:fd:c2:13:21:11:5b:18:8e:7a:75:
9e:39:09:8d:fd:43:eb:01:a2:5c:9f:bb:84:13:45:
6b:16:85:61:52:19:62:10:5a:03:bd:04:54:0f:96:
dc:fc:0e:f5:7e:8b:53:a4:b2:84:b7:37:1d:6e:e3:
18:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:50:9A:E7:76:E1:54:85:0B:C9:A3:C5:11:80:8F:FC:0E:A6:54:CF
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/xVCa53bhVIULyaPFEYCP_A6mVM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.153.0/24
77.90.164.0/24
77.90.173.0/24
185.230.15.0/24
213.209.144.0/24
213.209.146.0/23
213.209.151.0/24
213.209.158.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:34:8f:e5:35:18:33:d8:1c:cf:14:8b:5f:d7:88:54:02:5f:
d3:6a:86:03:73:ae:0c:a7:5f:5e:8d:03:aa:24:6e:08:ac:d1:
28:71:2d:52:6e:61:e6:ee:9e:6f:56:e5:76:0e:e3:25:e1:e4:
fb:0b:62:87:65:1c:47:b2:1e:66:0b:17:63:fd:ee:f4:08:1d:
48:7e:bf:dd:27:39:c8:f8:c7:4f:ca:24:67:2f:8b:cc:b2:47:
95:27:5f:a6:34:5f:2d:a8:4b:77:f8:3c:9a:4c:ba:d1:04:fa:
c4:44:0e:a7:92:c4:2b:68:84:a5:40:e6:d4:c0:c1:57:6d:0f:
3c:c7:3d:e5:c2:80:ff:e1:d3:a4:7e:41:30:c3:43:fb:dc:17:
3b:95:c1:3a:f3:2e:7f:52:5b:e8:4c:bc:39:4d:b7:01:bb:cc:
eb:aa:90:4e:b7:35:ac:55:5a:1a:e3:76:14:dc:f7:6c:6d:f4:
76:8d:22:90:09:2a:d3:1f:04:b9:76:03:d3:bd:29:f9:d2:86:
36:f6:44:c4:df:6c:58:30:bf:5a:63:6c:0b:ed:87:5a:eb:4c:
68:b9:29:28:be:6c:82:f1:c4:46:72:85:ff:c6:2a:2b:3f:c0:
19:ef:43:d8:2b:79:af:f2:61:de:e2:02:86:63:e9:1c:e2:d5:
d7:85:76:41
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgIEB5S22TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjQ3NmUxMmU4OTg3ZTViMzAyY2RjMjRiZGQ5ZGIzZmU4M2M4NDQ5MB4XDTIyMDIy
NDEwMjc0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzU1MDlhZTc3NmUx
NTQ4NTBiYzlhM2M1MTE4MDhmZmMwZWE2NTRjZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKBa6b1mew4AhSvahVCG52E3xLUGJo4XtP0XA1SAecxCPwCr
O9wSQFHizibVAFIZXoNVg/pdSpxb2v8CJz74zmrgPqNI1IacQwVtGpgNIgkTtOXI
OoWfEPufzr4xNPQHveOF1gpo4L8dBg8Yx62rJ09t7ugn7cQOp/6SFghyyNnlKH8m
I6+dkIJvr7jU61rSlkO+9XK4xjM5MZ/DK/YFXd3rNX5bcFmCTZsGH7E2zvwm86A6
3jNVNT99vDVk07P4ocjjhSw65Z39whMhEVsYjnp1njkJjf1D6wGiXJ+7hBNFaxaF
YVIZYhBaA70EVA+W3PwO9X6LU6SyhLc3HW7jGLkCAwEAAaOCAjMwggIvMB0GA1Ud
DgQWBBTFUJrnduFUhQvJo8URgI/8DqZUzzAfBgNVHSMEGDAWgBQ7R24S6Jh+WzAs
3CS92ds/6DyESTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8x
L3hWQ2E1M2JoVklVTHlhUEZFWUNQX0E2bVZNOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
ZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8xL08wZHVFdWlZZmxz
d0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBJ
BggrBgEFBQcBBwEB/wQ6MDgwNgQCAAEwMAMEAE1amQMEAE1apAMEAE1arQMEALnm
DwMEANXRkAMEAdXRkgMEANXRlwMEANXRnjANBgkqhkiG9w0BAQsFAAOCAQEAfjSP
5TUYM9gczxSLX9eIVAJf02qGA3OuDKdfXo0DqiRuCKzRKHEtUm5h5u6eb1bldg7j
JeHk+wtih2UcR7IeZgsXY/3u9AgdSH6/3Sc5yPjHT8okZy+LzLJHlSdfpjRfLahL
d/g8mky60QT6xEQOp5LEK2iEpUDm1MDBV20PPMc95cKA/+HTpH5BMMND+9wXO5XB
OvMuf1Jb6Ey8OU23AbvM66qQTrc1rFVaGuN2FNz3bG30do0ikAkq0x8EuXYD070p
+dKGNvZExN9sWDC/WmNsC+2HWutMaLkpKL5sgvHERnKF/8YqKz/AGe9D2Ct5r/Jh
3uIChmPpHOLV14V2QQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:09 2023 by rpki-client on console-ams.rpki-client.org