Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/z-uQyXqgUpIOvm_236ky8n5UV4s.roa
File: z-uQyXqgUpIOvm_236ky8n5UV4s.roa (raw, json)
Hash identifier: VLgvnCHLrAXA4DpUWM36uRvhkbyc5mj3OJPIVobTYJ4=
Subject key identifier: CF:EB:90:C9:7A:A0:52:92:0E:BE:6F:F6:DF:A9:32:F2:7E:54:57:8B
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0816AF44
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/z-uQyXqgUpIOvm_236ky8n5UV4s.roa
Signing time: Fri 11 Mar 2022 19:47:49 +0000
ROA not before: Fri 11 Mar 2022 19:47:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135704388 (0x816af44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Mar 11 19:47:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfeb90c97aa052920ebe6ff6dfa932f27e54578b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:e2:05:44:d7:bd:9b:23:8f:b8:bc:97:5b:
fc:d6:49:55:4d:49:09:e2:44:19:b3:d5:ad:89:8f:
31:a9:e7:6d:28:d8:a0:38:c2:4b:1f:6a:bf:f3:20:
84:d6:e8:44:e1:7d:86:4f:b6:3e:32:f8:48:b2:67:
47:79:18:47:5a:28:49:5e:6f:aa:28:de:6c:c3:35:
1f:7d:fa:f2:d0:ca:97:2b:78:53:58:83:40:11:cb:
f7:b4:a7:74:a5:d7:1d:5f:0a:a4:69:03:ba:c6:cd:
f2:66:aa:52:81:76:ec:ae:01:b2:b0:25:9e:1a:a4:
44:e7:cb:3d:45:7f:dd:a2:55:0e:01:07:1b:1f:f4:
57:4e:c9:fe:17:09:89:20:08:2a:76:89:01:85:64:
57:f2:d3:39:66:c1:01:12:e3:22:45:45:e2:e4:73:
07:c2:61:a0:d7:6d:74:bb:2c:e4:45:67:c6:e2:52:
ae:8a:50:ea:37:8d:7f:5e:49:06:37:58:0e:40:5d:
68:61:83:3a:8a:35:9a:f1:b5:02:72:71:0a:bd:72:
63:c6:bc:68:7e:ce:54:e9:b3:36:7d:5c:65:ab:67:
03:5d:9f:7d:a8:f5:2c:1b:40:85:a8:1d:e8:d2:c2:
58:ac:d9:f5:dd:e6:db:8e:e2:82:5d:5a:00:ea:29:
4a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EB:90:C9:7A:A0:52:92:0E:BE:6F:F6:DF:A9:32:F2:7E:54:57:8B
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/z-uQyXqgUpIOvm_236ky8n5UV4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
213.209.130.0/24
213.209.133.0/24
213.209.136.0/24
213.209.138.0/24
213.209.145.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
aa:c0:5e:b3:cf:42:84:19:27:2f:f6:02:65:da:84:c4:d7:e2:
4d:bd:f3:2f:24:08:17:5f:af:aa:66:b7:03:8f:91:9a:2a:fd:
e5:dd:40:90:bb:63:c1:d4:64:ae:a6:8c:4d:78:50:09:d2:b8:
b4:57:3f:c3:4a:f0:58:c8:cc:82:50:42:a8:82:0b:6f:17:09:
39:ef:10:37:e3:63:1d:55:b2:9d:11:db:8f:6e:a0:e3:bf:aa:
8a:4f:f4:70:ae:64:b9:dc:db:2e:45:63:fd:6c:8b:09:a9:60:
f1:24:b6:89:c6:35:68:91:8e:bb:eb:b4:85:9a:2f:66:6f:d7:
a0:44:67:2e:f2:c2:a3:9a:96:e6:29:62:0f:33:67:3f:06:49:
50:69:18:5f:95:b7:e7:96:4c:ee:8a:8e:7c:22:ce:be:12:a6:
87:a4:28:71:59:c1:dc:1d:15:0f:83:d4:3b:46:4e:47:0a:3e:
be:a8:c6:41:6e:1c:37:d3:b3:95:26:50:9a:4b:71:ef:8b:2c:
2f:e7:a1:5a:51:25:36:69:9d:e7:82:23:6a:ae:28:50:88:b2:
d1:d0:7e:c9:f2:ad:0d:8e:6e:39:e5:dc:2b:f7:d6:3e:2b:6f:
85:46:7b:b3:77:da:53:3c:5f:0c:bc:d1:e5:5f:c6:57:63:d0:
11:7d:a1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:06 2024 by rpki-client on console-fra.rpki-client.org