Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/LG-K22sbBPolSeK03GSQulTnwhs.roa
File: LG-K22sbBPolSeK03GSQulTnwhs.roa (raw, json)
Hash identifier: KOF2YLsn1BfC//aOIErKTncZUDYtWUr/ztwq+O2HE0A=
Subject key identifier: 2C:6F:8A:DB:6B:1B:04:FA:25:49:E2:B4:DC:64:90:BA:54:E7:C2:1B
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018A0CF2FA1F0C7C8E7FB51ADC003C42DD99
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/LG-K22sbBPolSeK03GSQulTnwhs.roa
Signing time: Sat 19 Aug 2023 08:39:24 +0000
ROA not before: Sat 19 Aug 2023 08:39:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.151.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1280:24::/64 maxlen: 64
Validation: Failed, certificate revoked on Mon 21 Aug 2023 19:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0c:f2:fa:1f:0c:7c:8e:7f:b5:1a:dc:00:3c:42:dd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 19 08:39:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c6f8adb6b1b04fa2549e2b4dc6490ba54e7c21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0a:39:a3:47:be:46:a7:a3:db:86:6c:67:5f:
39:80:9c:98:f1:9f:d7:7a:72:f8:c8:73:13:ac:0c:
49:7b:ca:95:8f:6a:6b:72:d5:79:01:8e:6b:a6:b9:
ce:e0:60:84:c3:76:d4:39:76:07:75:de:a1:57:92:
8e:fe:82:d6:f2:3d:eb:32:5b:80:eb:b8:94:53:27:
04:7d:98:90:97:5f:95:b6:f5:21:9b:a5:e1:ea:1f:
7f:ab:1d:d4:45:75:4e:35:6f:38:da:c8:f0:5d:4f:
35:44:eb:79:cf:18:70:84:ff:7b:a3:5a:01:cb:46:
f5:de:ca:11:44:29:b3:b4:44:38:74:18:6e:4b:9e:
60:01:76:d6:4e:6c:63:0b:b0:8d:35:2a:c5:a1:2e:
2d:98:2c:4b:ae:74:08:d9:b0:29:0e:ca:dd:58:c3:
6e:65:e3:1c:2f:e3:9b:cf:34:e6:44:cb:5a:ef:ff:
a9:72:00:58:d5:f8:7a:92:5d:6c:41:c2:35:ee:ee:
d0:aa:49:b2:b3:22:c3:c8:f8:ea:15:8f:68:25:49:
9b:29:94:66:d7:9a:3e:3d:5f:03:b0:9b:86:a3:d0:
da:23:2f:2a:a0:f0:ac:5a:3c:f0:97:c4:0f:71:2c:
0e:3e:a5:d4:1d:a5:15:55:6e:a3:fd:64:fc:70:fe:
21:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6F:8A:DB:6B:1B:04:FA:25:49:E2:B4:DC:64:90:BA:54:E7:C2:1B
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/LG-K22sbBPolSeK03GSQulTnwhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.140.0/24
77.90.142.0-77.90.148.255
77.90.153.0-77.90.154.255
77.90.188.0/24
185.230.13.0-185.230.15.255
213.209.138.0/24
213.209.145.0-213.209.146.255
213.209.150.0/23
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
ad:c9:74:e4:6b:62:9f:15:2d:24:74:31:de:d2:76:94:99:22:
28:8f:1c:4c:55:a0:33:ed:95:35:85:f2:c2:53:be:f7:f5:8f:
4c:88:47:e2:d0:09:e4:f2:47:8b:ce:d3:9a:b3:bd:a3:58:29:
82:38:c3:1f:55:4d:f9:15:30:48:a6:e0:b0:26:82:f1:9e:1e:
b8:34:b9:51:ab:61:7d:ea:6b:b9:ca:bc:fb:9d:f9:82:97:c1:
1a:4e:24:15:c1:91:b2:af:d2:fe:25:1f:bc:38:39:3b:41:5e:
27:27:30:29:d0:36:1b:bb:30:73:60:05:08:04:c5:61:0e:5b:
be:fb:81:9b:78:f2:ed:0a:ff:8e:b1:dd:97:46:14:86:5d:ff:
22:33:b0:c6:c5:9e:1c:e0:b2:ee:b0:6d:af:8c:d0:77:d2:33:
a6:08:4a:07:81:e3:6f:ee:c4:57:25:95:92:93:dc:cf:ea:a4:
73:5b:0a:2a:8d:6e:25:0b:83:4a:65:3d:ae:06:91:0f:8f:06:
dd:89:0d:36:50:76:e6:ba:4b:4e:1e:94:55:ca:4b:31:5c:04:
7f:6d:5c:6e:cf:db:72:84:81:28:1f:64:8f:e5:a1:66:9c:72:
bf:08:66:77:3b:bf:b2:f6:b1:fc:56:e6:7c:9d:6a:b9:8c:58:
21:d1:20:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:25 2024 by rpki-client on console-ams.rpki-client.org