Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/yzfYPz3XQQ_6v2NWleZLwXA4Fww.roa
File: yzfYPz3XQQ_6v2NWleZLwXA4Fww.roa (raw, json)
Hash identifier: xhI+KzPFQQD0OixWVt+LMZLRz6k27M91RnFtiRvk4MU=
Subject key identifier: CB:37:D8:3F:3D:D7:41:0F:FA:BF:63:56:95:E6:4B:C1:70:38:17:0C
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0791BAEB
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/yzfYPz3XQQ_6v2NWleZLwXA4Fww.roa
Signing time: Wed 23 Feb 2022 16:50:58 +0000
ROA not before: Wed 23 Feb 2022 16:50:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.132.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126991083 (0x791baeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Feb 23 16:50:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb37d83f3dd7410ffabf635695e64bc17038170c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:59:0d:53:27:37:47:4e:3a:92:81:00:29:
fb:ec:3e:d8:1d:32:e4:16:de:2c:73:b5:4b:fd:3e:
bb:2e:af:71:53:d6:b2:70:3e:23:82:c3:34:6f:78:
65:61:6a:c3:7f:52:d2:d3:11:ed:e4:0e:45:c5:47:
8c:48:b7:ca:41:03:ed:f8:c2:69:38:f5:bf:58:a0:
19:b8:9e:e8:1b:15:81:03:4d:01:82:6c:29:cc:f1:
1a:20:e6:e8:1c:b1:b6:55:73:4b:7a:ed:ac:9d:5f:
08:f3:33:12:79:df:3c:24:37:b1:98:a5:3b:d0:2f:
a0:f4:f5:51:9c:dc:f8:f8:4b:86:e6:03:98:26:6f:
64:bf:b3:9e:80:12:17:33:4c:00:ee:74:d9:0f:a9:
b7:80:6b:6c:43:e0:6d:3d:3b:d8:b8:ff:60:3a:79:
3e:cc:e4:ea:4e:ff:24:cd:89:85:4f:2d:8d:27:ef:
7f:ec:8a:92:fa:70:63:23:c3:e4:91:ec:de:78:17:
8d:b9:6e:3a:9f:bc:ab:e6:16:7a:98:db:e0:da:23:
9e:e2:ca:52:32:41:4e:ef:b7:43:bb:d8:76:01:62:
72:cc:6e:b1:b4:7d:02:92:e8:1a:7c:24:74:60:bf:
25:d5:18:34:2e:f2:6b:42:28:22:58:49:81:6b:93:
0f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:37:D8:3F:3D:D7:41:0F:FA:BF:63:56:95:E6:4B:C1:70:38:17:0C
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/yzfYPz3XQQ_6v2NWleZLwXA4Fww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
213.209.130.0/24
213.209.136.0/24
213.209.138.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
74:da:93:57:39:f1:e8:e3:d3:57:2e:fe:a8:90:1b:a1:af:44:
f7:cb:24:a1:7e:9d:a8:dd:03:8c:6e:62:1f:2d:45:9d:af:9d:
93:58:15:52:ff:2d:01:0c:87:1f:f6:28:0f:98:b9:7d:d7:75:
58:c6:21:28:94:c8:9e:c3:fc:dd:11:64:cf:f8:48:1d:b7:29:
20:80:6e:5c:a5:dd:cb:2e:0d:67:f0:9f:74:14:d0:99:ee:8e:
6b:69:23:73:fe:1f:dc:5e:3a:ca:66:86:64:ee:e7:01:77:cd:
65:f5:61:6f:66:13:8f:82:0c:53:88:da:ed:b4:0f:cb:05:e8:
17:20:33:25:7a:37:f4:01:21:7c:2e:e9:79:ef:52:d5:43:a1:
4d:96:74:dc:c3:12:22:1c:99:e6:7b:2c:15:27:b7:72:0d:c0:
aa:4d:da:f3:04:2a:4d:bc:2f:7b:8b:69:92:ec:fc:ae:5b:c0:
ef:e2:fb:63:8d:75:d4:a6:95:d9:60:6c:b8:25:26:9c:df:fb:
6e:54:7b:09:be:05:87:5f:1f:ba:9b:e5:af:8d:07:86:76:06:
98:7b:d2:df:20:c6:5f:c8:99:e1:0c:51:ef:94:cc:42:cc:a5:
e1:a0:de:6e:fb:bb:a5:b0:31:36:63:3d:9c:65:fd:4a:dc:6b:
eb:67:ba:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org