Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/zyL69zK-cetbmXA-2PpyenUbXKU.roa
File: zyL69zK-cetbmXA-2PpyenUbXKU.roa (raw, json)
Hash identifier: E1Zs45ifauR+Md62DG78VPvmaV0cQpaZISwoPAAG1DM=
Subject key identifier: CF:22:FA:F7:32:BE:71:EB:5B:99:70:3E:D8:FA:72:7A:75:1B:5C:A5
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018499A2C1030CAA4BB9764A5103A1125474
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/zyL69zK-cetbmXA-2PpyenUbXKU.roa
Signing time: Mon 21 Nov 2022 10:01:31 +0000
ROA not before: Mon 21 Nov 2022 10:01:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.139.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.156.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
77.90.178.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
77.90.184.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1280:24::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:99:a2:c1:03:0c:aa:4b:b9:76:4a:51:03:a1:12:54:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Nov 21 10:01:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf22faf732be71eb5b99703ed8fa727a751b5ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:65:38:9c:bf:ed:76:c0:3f:69:9d:51:e9:
69:d1:27:74:29:fd:d4:d5:10:0e:3a:3e:b9:b7:17:
e6:31:07:07:b7:d3:f0:ca:23:c9:3d:6c:06:3a:2a:
10:cd:7d:61:45:6d:cb:bc:7f:22:78:05:1d:16:79:
d4:3f:19:a6:f5:5e:54:9c:d0:cc:17:61:00:8d:bb:
6f:86:4e:f5:1e:12:88:75:e0:76:b1:76:c5:f9:e5:
a1:39:cd:ce:7e:c7:b3:4a:4a:c4:da:c7:67:2d:cc:
51:c2:11:07:60:fd:1e:bb:d5:81:6b:0a:80:cd:98:
5f:2c:97:6e:60:05:db:65:d5:5c:6d:c7:7a:58:7d:
98:3d:b2:33:a0:91:fb:da:11:61:59:81:a4:fe:04:
d7:bf:58:c8:4f:df:71:3e:e6:8b:bb:4a:1d:d3:cd:
50:d9:ff:64:30:d2:25:e1:ff:19:62:18:b8:cb:22:
3a:39:26:59:90:26:1a:25:fc:9b:5d:07:00:14:52:
8c:dc:4e:a4:d9:4d:68:31:bf:56:9b:f0:91:6e:c0:
47:0b:d6:03:2f:1d:c9:a2:34:c1:2b:ee:e3:6f:68:
2f:d0:12:01:64:49:bd:69:b9:b7:77:21:6d:ec:aa:
a6:5b:89:7c:a1:2b:c5:c2:41:57:72:93:d1:d6:cc:
21:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:22:FA:F7:32:BE:71:EB:5B:99:70:3E:D8:FA:72:7A:75:1B:5C:A5
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/zyL69zK-cetbmXA-2PpyenUbXKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.139.0-77.90.140.255
77.90.142.0-77.90.148.255
77.90.154.0/24
77.90.156.0/24
77.90.178.0/24
77.90.184.0/23
77.90.188.0/24
185.230.14.0/24
213.209.138.0/24
213.209.143.0/24
213.209.149.0/24
213.209.156.0/23
213.209.159.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
82:67:7c:67:41:fb:45:44:ec:17:c1:54:f6:9f:4a:e8:d9:81:
2a:13:45:bb:ba:88:28:82:a2:ef:8f:41:85:58:eb:0d:97:64:
a2:cd:43:73:d2:fa:9c:61:2d:be:90:14:dc:98:d1:0c:7e:82:
da:78:5d:2f:0e:d5:4d:ff:b5:f1:d5:c8:be:af:79:28:a5:4d:
07:98:7b:ae:4f:88:3e:c7:5c:b5:f8:37:7f:fd:d8:f0:0a:fc:
c0:a2:a7:c0:67:82:c6:dc:90:2d:4e:7a:e5:e7:2c:17:98:35:
68:cb:e6:20:d5:c6:bc:ed:84:7a:da:77:e2:8d:a2:0a:3a:aa:
bd:be:1b:88:f0:d6:8d:fd:27:7e:aa:72:69:8d:32:eb:a9:1f:
69:a5:b8:b1:6a:fc:13:af:02:a6:31:7c:0f:ac:f0:4e:12:3e:
5e:cf:72:30:62:67:04:84:20:b5:c1:f6:09:02:ed:eb:32:40:
b1:01:85:42:0b:d4:cb:2d:cc:28:e2:bf:e9:5f:ec:02:2a:d1:
e9:ac:c4:d2:a1:71:49:9e:7c:fd:44:ec:c3:b0:a8:99:f4:6a:
ce:94:57:c1:6c:4a:6f:b3:1f:29:80:e7:f5:c0:80:dd:e7:c5:
e3:20:f5:e7:e9:b6:fd:c1:03:f8:31:e6:2a:22:19:f3:d2:41:
f0:b6:d9:5c
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgISAYSZosEDDKpLuXZKUQOhElR0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjIxMTIxMTAwMTMxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjIyZmFmNzMyYmU3MWViNWI5OTcwM2VkOGZhNzI3YTc1MWI1Y2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3JlOJy/7XbAP2mdUelp0Sd0Kf3U
1RAOOj65txfmMQcHt9PwyiPJPWwGOioQzX1hRW3LvH8ieAUdFnnUPxmm9V5UnNDM
F2EAjbtvhk71HhKIdeB2sXbF+eWhOc3OfsezSkrE2sdnLcxRwhEHYP0eu9WBawqA
zZhfLJduYAXbZdVcbcd6WH2YPbIzoJH72hFhWYGk/gTXv1jIT99xPuaLu0od081Q
2f9kMNIl4f8ZYhi4yyI6OSZZkCYaJfybXQcAFFKM3E6k2U1oMb9Wm/CRbsBHC9YD
Lx3JojTBK+7jb2gv0BIBZEm9abm3dyFt7KqmW4l8oSvFwkFXcpPR1swhwwIDAQAB
o4IClzCCApMwHQYDVR0OBBYEFM8i+vcyvnHrW5lwPtj6cnp1G1ylMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvenlMNjl6Sy1jZXRibVhBLTJQcHllblViWEtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGsBggrBgEFBQcBBwEB/wSBnDCBmTCBgAQCAAEwejAMAwQH
TVqAAwQATVqCMAwDBAJNWoQDBAFNWogwDAMEAE1aiwMEAE1ajDAMAwQBTVqOAwQA
TVqUAwQATVqaAwQATVqcAwQATVqyAwQBTVq4AwQATVq8AwQAueYOAwQA1dGKAwQA
1dGPAwQA1dGVAwQB1dGcAwQA1dGfMBQEAgACMA4DBQAqBCnCAwUAKgQpxzANBgkq
hkiG9w0BAQsFAAOCAQEAgmd8Z0H7RUTsF8FU9p9K6NmBKhNFu7qIKIKi749BhVjr
DZdkos1Dc9L6nGEtvpAU3JjRDH6C2nhdLw7VTf+18dXIvq95KKVNB5h7rk+IPsdc
tfg3f/3Y8Ar8wKKnwGeCxtyQLU565ecsF5g1aMvmINXGvO2Eetp34o2iCjqqvb4b
iPDWjf0nfqpyaY0y66kfaaW4sWr8E68CpjF8D6zwThI+Xs9yMGJnBIQgtcH2CQLt
6zJAsQGFQgvUyy3MKOK/6V/sAirR6azE0qFxSZ58/UTsw7ComfRqzpRXwWxKb7Mf
KYDn9cCA3efF4yD15+m2/cED+DHmKiIZ89JB8LbZXA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org