Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/LBMpiLyOcreJgnwrhro0TOANLsI.roa
File: LBMpiLyOcreJgnwrhro0TOANLsI.roa (raw, json)
Hash identifier: lurxnAMC+FwwnruvRxhSF69M9eADnNg2YujelDuNuCw=
Subject key identifier: 2C:13:29:88:BC:8E:72:B7:89:82:7C:2B:86:BA:34:4C:E0:0D:2E:C2
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 08761B19
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/LBMpiLyOcreJgnwrhro0TOANLsI.roa
Signing time: Wed 06 Apr 2022 15:32:35 +0000
ROA not before: Wed 06 Apr 2022 15:32:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.150.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.157.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.155.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
77.90.180.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
213.209.133.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
213.209.147.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141957913 (0x8761b19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 6 15:32:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c132988bc8e72b789827c2b86ba344ce00d2ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1d:86:93:b1:22:59:be:56:2b:1c:9f:11:13:
64:dd:33:63:e6:8c:cd:7c:fc:d1:d8:34:3d:68:54:
bb:e6:b2:15:9b:4c:5f:ea:54:6e:ec:28:33:36:cc:
50:0c:3b:10:e1:53:5a:31:1f:02:d8:40:5a:d8:02:
74:66:46:75:a4:d5:35:4a:dd:02:7b:31:c9:08:3c:
ad:b1:16:96:16:d8:f3:e1:44:ae:8e:78:5d:fe:9e:
50:bb:cb:c4:71:a7:2d:9b:30:e8:a2:bf:b4:2a:6e:
9b:77:ed:ce:93:da:65:c7:12:2f:d1:4a:3b:92:41:
c2:91:08:4c:f2:d3:c3:ac:69:e6:d0:81:9d:aa:16:
f3:de:87:75:c2:2f:58:e8:c5:38:9a:d0:bd:20:5a:
e0:48:37:6f:25:65:90:d7:aa:6c:c8:bd:96:6e:8a:
e6:b7:9c:13:88:f9:ce:07:2e:5f:22:d4:9c:e8:e7:
b4:ac:fd:60:c9:f1:71:68:01:f2:85:c0:b7:6d:0b:
92:bd:42:7e:75:60:c5:72:04:e4:98:09:47:be:d4:
d5:51:e4:ed:cd:42:17:a6:34:82:12:9a:6d:f1:a4:
6b:75:60:5e:87:a0:70:fc:55:46:36:2e:11:db:b6:
fd:8f:f8:ac:ca:f4:2c:fd:3a:4d:6d:c7:b7:a9:f4:
1a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:13:29:88:BC:8E:72:B7:89:82:7C:2B:86:BA:34:4C:E0:0D:2E:C2
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/LBMpiLyOcreJgnwrhro0TOANLsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.138.255
77.90.140.0/24
77.90.142.0-77.90.148.255
77.90.150.0/24
77.90.153.0-77.90.155.255
77.90.157.0/24
77.90.180.0/24
185.230.13.0-185.230.14.255
213.209.130.0/24
213.209.133.0/24
213.209.136.0/24
213.209.138.0/24
213.209.147.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
1d:8e:28:f2:cc:b2:01:d2:6d:7d:ae:47:8b:0a:4a:6c:4c:47:
11:46:40:c0:d9:d7:ef:b8:b5:9d:9e:60:62:81:f2:cd:2f:b4:
13:10:4d:8c:59:bc:0c:0d:5e:d6:99:f0:64:86:37:a0:55:07:
42:85:2f:59:b4:b0:6e:cc:ed:5a:71:4d:2c:a9:25:05:f0:b9:
2b:cd:a4:ad:e9:e0:aa:f5:a1:04:c1:37:ec:9f:02:55:17:88:
6b:91:58:c0:86:a9:cc:b6:94:c9:16:38:d1:6a:27:41:26:44:
41:18:d6:4d:0a:f7:0b:e9:68:65:08:4f:40:e0:52:ec:1f:d6:
ec:40:71:7c:fe:62:99:f3:39:2f:f7:d9:d2:56:07:73:43:b5:
ba:99:0f:a6:6f:1e:3a:ab:9a:cf:40:54:fc:96:5f:16:79:c5:
7e:cc:84:e7:6d:d5:5a:34:92:7a:9b:1d:a7:c2:9c:a4:33:3d:
2f:fc:3c:fc:2a:fd:78:67:49:61:40:a7:a9:8a:59:93:c0:15:
8b:6f:1e:49:6a:d2:72:76:34:af:24:ca:bf:9c:b2:50:33:f9:
37:ee:11:32:43:88:34:9d:0a:cc:77:56:2e:6d:3b:23:df:49:
4e:b4:16:12:09:1a:0e:0d:c9:e2:5b:4f:0c:98:b3:85:b2:7e:
80:11:10:f7
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIECHYbGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjQ3NmUxMmU4OTg3ZTViMzAyY2RjMjRiZGQ5ZGIzZmU4M2M4NDQ5MB4XDTIyMDQw
NjE1MzIzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmMxMzI5ODhiYzhl
NzJiNzg5ODI3YzJiODZiYTM0NGNlMDBkMmVjMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANgdhpOxIlm+ViscnxETZN0zY+aMzXz80dg0PWhUu+ayFZtM
X+pUbuwoMzbMUAw7EOFTWjEfAthAWtgCdGZGdaTVNUrdAnsxyQg8rbEWlhbY8+FE
ro54Xf6eULvLxHGnLZsw6KK/tCpum3ftzpPaZccSL9FKO5JBwpEITPLTw6xp5tCB
naoW896HdcIvWOjFOJrQvSBa4Eg3byVlkNeqbMi9lm6K5recE4j5zgcuXyLUnOjn
tKz9YMnxcWgB8oXAt20Lkr1CfnVgxXIE5JgJR77U1VHk7c1CF6Y0ghKabfGka3Vg
XoegcPxVRjYuEdu2/Y/4rMr0LP06TW3Ht6n0Gq8CAwEAAaOCApkwggKVMB0GA1Ud
DgQWBBQsEymIvI5yt4mCfCuGujRM4A0uwjAfBgNVHSMEGDAWgBQ7R24S6Jh+WzAs
3CS92ds/6DyESTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8x
L0xCTXBpTHlPY3JlSmdud3Jocm8wVE9BTkxzSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
ZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8xL08wZHVFdWlZZmxz
d0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
rgYIKwYBBQUHAQcBAf8EgZ4wgZswgYIEAgABMHwwDAMEB01agAMEAE1agjAMAwQC
TVqEAwQATVqKAwQATVqMMAwDBAFNWo4DBABNWpQDBABNWpYwDAMEAE1amQMEAk1a
mAMEAE1anQMEAE1atDAMAwQAueYNAwQAueYOAwQA1dGCAwQA1dGFAwQA1dGIAwQA
1dGKAwQA1dGTMBQEAgACMA4DBQAqBCnCAwUAKgQpxzANBgkqhkiG9w0BAQsFAAOC
AQEAHY4o8syyAdJtfa5HiwpKbExHEUZAwNnX77i1nZ5gYoHyzS+0ExBNjFm8DA1e
1pnwZIY3oFUHQoUvWbSwbsztWnFNLKklBfC5K82krengqvWhBME37J8CVReIa5FY
wIapzLaUyRY40WonQSZEQRjWTQr3C+loZQhPQOBS7B/W7EBxfP5imfM5L/fZ0lYH
c0O1upkPpm8eOquaz0BU/JZfFnnFfsyE523VWjSSepsdp8KcpDM9L/w8/Cr9eGdJ
YUCnqYpZk8AVi28eSWrScnY0ryTKv5yyUDP5N+4RMkOINJ0KzHdWLm07I99JTrQW
EgkaDg3J4ltPDJizhbJ+gBEQ9w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:25 2024 by rpki-client on console-ams.rpki-client.org