Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/rffIKcFQq5_IOzIjXXEE62uk4kc.roa
File: rffIKcFQq5_IOzIjXXEE62uk4kc.roa (raw, json)
Hash identifier: ndgts0EZLkGc3oXQ6uQjoDZpEOt+0Ed/KJGyLB536wI=
Subject key identifier: AD:F7:C8:29:C1:50:AB:9F:C8:3B:32:23:5D:71:04:EB:6B:A4:E2:47
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0189E8E0921AD05D8D44DF048D9B1DDD2360
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/rffIKcFQq5_IOzIjXXEE62uk4kc.roa
Signing time: Sat 12 Aug 2023 08:32:58 +0000
ROA not before: Sat 12 Aug 2023 08:32:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.151.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e8:e0:92:1a:d0:5d:8d:44:df:04:8d:9b:1d:dd:23:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 12 08:32:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adf7c829c150ab9fc83b32235d7104eb6ba4e247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7b:ae:78:51:70:ee:3f:3a:f5:ce:38:63:40:
87:37:17:8f:75:a7:2b:d5:91:dc:c5:85:02:46:91:
01:db:b6:72:aa:e1:87:9a:8f:3c:b5:3b:d2:b6:b9:
b3:ca:fa:18:58:69:dd:a6:f8:bf:e6:c0:8b:09:df:
c1:45:34:58:73:59:97:e4:a3:bc:39:2f:1c:4b:0a:
f2:e5:f6:df:c6:e4:f4:35:2b:7f:b5:6f:28:7b:8b:
41:4b:e5:b9:8b:56:33:5a:5a:4e:25:39:eb:2a:a8:
61:39:77:a8:10:30:17:27:bc:ea:ed:d7:1b:c2:88:
b0:1f:0d:75:af:30:d9:71:eb:27:40:a1:81:63:cd:
c7:84:ca:6a:c9:6c:63:5e:d7:74:79:88:be:69:a1:
83:4b:a6:e8:90:ee:78:ab:42:cb:f2:b5:8c:bd:99:
6d:54:d2:8c:dd:3a:5e:7b:3e:aa:31:a7:77:57:58:
59:e2:e1:5e:a6:16:cc:be:8f:29:41:bd:82:0f:0b:
ab:b2:8c:de:79:5a:fa:7c:0c:e9:3d:d7:d5:0d:6a:
83:be:e3:ea:d7:bf:79:e7:a5:64:8a:82:20:d3:6c:
e1:aa:b5:0c:ad:91:f2:e0:5d:2b:8d:36:f0:01:71:
c6:66:07:d7:74:78:2a:9e:82:d1:2b:3a:7d:4d:44:
11:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F7:C8:29:C1:50:AB:9F:C8:3B:32:23:5D:71:04:EB:6B:A4:E2:47
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/rffIKcFQq5_IOzIjXXEE62uk4kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.153.0/24
213.209.129.0/24
213.209.138.0/24
213.209.151.0/24
213.209.157.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
55:1b:ad:39:21:c7:57:72:79:d7:cb:32:53:46:b9:d3:e8:b0:
f5:85:36:7e:31:44:d0:ec:f4:af:34:c2:7d:94:1c:11:51:9b:
27:9b:d7:2e:4c:74:c7:eb:35:86:4a:69:d8:fc:9f:60:3c:14:
ec:67:a8:11:cd:f3:44:41:7d:31:53:9f:2a:9d:37:93:47:b1:
6f:be:1e:c7:26:84:0b:ae:72:a6:e9:17:23:7f:38:c4:fc:25:
12:14:dd:54:2a:dd:7a:7d:c5:b6:6e:a5:d0:17:10:b7:ae:db:
25:7e:fe:ad:3f:f8:09:99:79:2e:4b:4d:e5:4f:69:7c:ef:5f:
27:b9:eb:f8:fc:0a:3d:5a:3e:51:eb:92:e8:83:48:7c:55:c1:
00:1d:11:58:dc:be:39:76:0d:bb:bd:ba:58:52:15:d8:f7:03:
e9:34:0c:76:8e:86:54:4e:ec:15:9c:72:23:df:1f:75:01:a3:
36:60:71:a3:f5:58:35:9f:c4:a0:9f:72:4d:08:93:a6:e3:a9:
fb:4b:38:16:86:d5:6d:fe:ee:c1:cf:ef:54:7f:58:1c:7d:81:
b8:1d:b6:31:35:a7:79:1e:0e:ce:3d:61:dc:c6:20:f4:cf:8a:
80:68:34:3a:4f:f0:d3:6c:fc:dd:b8:d5:80:4e:96:54:88:8e:
ca:03:5f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:37:10 2025 by rpki-client