Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/0OUv3EH08Snf0oU9d4aTRNQ0mMU.roa
File: 0OUv3EH08Snf0oU9d4aTRNQ0mMU.roa (raw, json)
Hash identifier: eUeYA3TdDAth0SdLlSUjAEMRoG+QcRc9XKmdZgVJzbU=
Subject key identifier: D0:E5:2F:DC:41:F4:F1:29:DF:D2:85:3D:77:86:93:44:D4:34:98:C5
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 018863FADCB6265070295AB9AEE6B5FCEE35
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/0OUv3EH08Snf0oU9d4aTRNQ0mMU.roa
Signing time: Sun 28 May 2023 20:09:24 +0000
ROA not before: Sun 28 May 2023 20:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43019
IP address blocks: 77.75.91.0/24 maxlen: 24
77.75.89.0/24 maxlen: 24
77.75.90.0/24 maxlen: 24
77.75.88.0/24 maxlen: 24
77.75.94.0/24 maxlen: 24
77.75.95.0/24 maxlen: 24
77.75.93.0/24 maxlen: 24
77.75.92.0/24 maxlen: 24
185.206.203.0/24 maxlen: 24
185.206.201.0/24 maxlen: 24
185.206.202.0/24 maxlen: 24
185.206.200.0/24 maxlen: 24
185.206.201.144/28 maxlen: 28
2a0b:3f80:0:204::/64 maxlen: 64
2a0b:3f87:fc1b::/48 maxlen: 48
2a0b:3f87::/32 maxlen: 32
2a0b:3f87:fc20::/48 maxlen: 48
2a0b:3f80::/32 maxlen: 32
2a0b:3f86::/32 maxlen: 32
2a0b:3f87:fc19::/48 maxlen: 48
2a0b:3f85::/32 maxlen: 32
2a0b:3f82::/32 maxlen: 32
2a0b:3f80:0:203::/64 maxlen: 64
2a0b:3f80:3::/126 maxlen: 126
2a0b:3f80:2::/126 maxlen: 126
2a0b:3f83::/32 maxlen: 32
2a0b:3f80::/29 maxlen: 29
2a0b:3f80:15::/48 maxlen: 48
2a0b:3f87:fc1a::/48 maxlen: 48
2a0b:3f80:0:201::/64 maxlen: 64
2a0b:3f81::/32 maxlen: 32
2a0b:3f80:0:202::/64 maxlen: 64
2a0b:3f87:fc18::/48 maxlen: 48
2a0b:3f84::/32 maxlen: 32
2a0b:3f81::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:63:fa:dc:b6:26:50:70:29:5a:b9:ae:e6:b5:fc:ee:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: May 28 20:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0e52fdc41f4f129dfd2853d77869344d43498c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ec:51:e7:30:eb:05:1c:bc:e8:db:b3:a3:e9:
3e:68:4e:c4:ba:84:eb:62:1a:04:11:8d:7f:08:db:
0c:88:ec:0f:1b:64:1a:19:ed:6d:fe:e1:a5:11:75:
45:89:88:ac:4c:99:39:52:4d:d7:08:28:e8:eb:5a:
6e:c8:ff:47:42:0d:95:50:b0:05:17:ef:a1:88:65:
a0:b2:1b:b4:c4:84:95:ed:8e:ed:d9:e4:4d:d3:6c:
c9:c3:88:79:fe:72:b9:f8:b6:41:2a:da:7f:a1:f0:
8d:72:76:af:bd:f9:a8:50:32:c4:65:5f:0a:1a:8b:
e0:08:a1:99:1a:f7:05:d9:a1:a3:47:b8:e3:cf:ea:
5b:03:e6:86:e0:1d:06:38:e2:66:af:64:a9:e9:19:
c1:32:0e:67:8b:b4:69:f1:33:1a:15:1a:6b:d0:7d:
e5:7a:7a:56:cc:3f:7d:c7:65:52:b4:d8:7c:32:82:
03:23:34:ae:7e:37:97:d1:28:f2:d6:8d:da:4d:f9:
61:31:2a:a3:d5:f7:76:a0:fe:d4:7c:07:cd:1b:cf:
90:a6:f7:13:67:15:3b:4e:1a:9c:bf:d6:25:ee:41:
2a:e9:4f:a8:5f:fa:49:08:63:da:38:9c:58:2a:68:
05:6c:c4:bb:b1:4e:77:86:0e:01:e5:62:55:a2:db:
82:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E5:2F:DC:41:F4:F1:29:DF:D2:85:3D:77:86:93:44:D4:34:98:C5
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/0OUv3EH08Snf0oU9d4aTRNQ0mMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.88.0/21
185.206.200.0/22
IPv6:
2a0b:3f80::/29
Signature Algorithm: sha256WithRSAEncryption
99:9b:69:c6:9f:ce:21:75:4b:03:e3:fb:1a:28:b3:c7:cc:0c:
ca:76:6a:29:fd:01:c5:39:dc:0e:0e:f2:92:19:af:e6:c1:c5:
20:90:e8:d0:74:cc:81:18:12:9c:a0:0c:ef:ae:b9:49:c4:c3:
72:47:9c:b7:78:ae:07:a9:c4:90:9e:89:f2:57:f2:c5:6a:2f:
f0:c3:bf:b6:65:76:0d:78:3d:4c:fd:04:94:54:9e:22:0e:78:
12:2e:30:5d:e4:f0:03:f8:9a:d7:23:6b:70:34:40:67:62:41:
d7:54:81:4e:53:93:71:60:65:72:11:76:52:67:d3:f5:2c:0e:
56:2a:09:5a:03:25:18:45:d5:d4:32:72:87:56:74:92:04:c0:
95:af:31:30:15:45:76:4c:b1:98:1f:8f:96:52:25:b0:02:51:
91:e9:f9:af:2f:97:54:85:08:33:07:fb:57:10:fc:8c:af:c1:
93:0d:0d:b8:17:2c:7f:7d:4b:81:b3:16:fa:3e:66:79:63:3c:
22:df:7f:75:52:de:28:f5:eb:dc:19:4a:6d:75:13:ea:6c:34:
4f:a5:b1:99:34:9f:81:14:57:53:70:95:38:dd:70:95:69:60:
9f:1c:98:94:9e:4e:19:6e:2a:e5:cf:69:b2:4d:0c:0d:21:69:
7b:3d:e3:70
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYhj+ty2JlBwKVq5rua1/O41MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTQ2YjFmY2Q5MmI0N2Y0ZjU1ZmFkMDM4Yzk1ODEzNDBh
OWQzNzAwHhcNMjMwNTI4MjAwOTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGU1MmZkYzQxZjRmMTI5ZGZkMjg1M2Q3Nzg2OTM0NGQ0MzQ5OGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOxR5zDrBRy86Nuzo+k+aE7EuoTr
YhoEEY1/CNsMiOwPG2QaGe1t/uGlEXVFiYisTJk5Uk3XCCjo61puyP9HQg2VULAF
F++hiGWgshu0xISV7Y7t2eRN02zJw4h5/nK5+LZBKtp/ofCNcnavvfmoUDLEZV8K
GovgCKGZGvcF2aGjR7jjz+pbA+aG4B0GOOJmr2Sp6RnBMg5ni7Rp8TMaFRpr0H3l
enpWzD99x2VStNh8MoIDIzSufjeX0Sjy1o3aTflhMSqj1fd2oP7UfAfNG8+QpvcT
ZxU7Thqcv9Yl7kEq6U+oX/pJCGPaOJxYKmgFbMS7sU53hg4B5WJVotuCBQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFNDlL9xB9PEp39KFPXeGk0TUNJjFMB8GA1UdIwQY
MBaAFNykax/NkrR/T1X60DjJWBNAqdNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmIt
YzZkMmI4ZDFmNTY2LzEvME9VdjNFSDA4U25mMG9VOWQ0YVRSTlEwbU1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmItYzZkMmI4ZDFmNTY2
LzEvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDTUtYAwQC
uc7IMA0EAgACMAcDBQMqCz+AMA0GCSqGSIb3DQEBCwUAA4IBAQCZm2nGn84hdUsD
4/saKLPHzAzKdmop/QHFOdwODvKSGa/mwcUgkOjQdMyBGBKcoAzvrrlJxMNyR5y3
eK4HqcSQnonyV/LFai/ww7+2ZXYNeD1M/QSUVJ4iDngSLjBd5PAD+JrXI2twNEBn
YkHXVIFOU5NxYGVyEXZSZ9P1LA5WKglaAyUYRdXUMnKHVnSSBMCVrzEwFUV2TLGY
H4+WUiWwAlGR6fmvL5dUhQgzB/tXEPyMr8GTDQ24Fyx/fUuBsxb6PmZ5Yzwi3391
Ut4o9evcGUptdRPqbDRPpbGZNJ+BFFdTcJU43XCVaWCfHJiUnk4Zbirlz2myTQwN
IWl7PeNw
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:48 2025 by rpki-client