Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/LIXEMDVNjVEGRizv0FEnRipDuPM.roa
File: LIXEMDVNjVEGRizv0FEnRipDuPM.roa (raw, json)
Hash identifier: sp3Nw844xXLC6xA9CifzBSufp7V/QIXIxp2dr43clqA=
Subject key identifier: 2C:85:C4:30:35:4D:8D:51:06:46:2C:EF:D0:51:27:46:2A:43:B8:F3
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 087F07B8
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/LIXEMDVNjVEGRizv0FEnRipDuPM.roa
Signing time: Fri 08 Apr 2022 22:36:22 +0000
ROA not before: Fri 08 Apr 2022 22:36:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.150.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.157.0/24 maxlen: 24
77.90.155.0/24 maxlen: 24
77.90.180.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
213.209.147.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142542776 (0x87f07b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 8 22:36:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c85c430354d8d5106462cefd05127462a43b8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:24:6e:0c:4a:9e:1e:ae:61:cc:90:9d:18:65:
f0:2d:8a:6c:2c:ba:60:24:fb:a1:cb:db:5a:1a:4d:
9c:22:80:81:f0:9b:65:45:6f:8e:d4:67:34:31:69:
a6:ab:2a:11:9b:6d:f7:d1:b1:d3:a7:49:26:4d:67:
b6:4e:9d:a2:97:3c:98:bf:f2:4c:d0:e2:cd:3f:aa:
af:48:ef:a7:78:c7:43:28:9f:a6:31:5b:a8:ae:a4:
cc:6c:28:07:85:1a:c3:bb:f5:fe:9e:73:81:d8:ea:
8f:d1:19:76:b6:c2:5f:95:dc:90:40:b7:57:e8:f2:
76:cd:a0:43:79:0c:f1:d5:13:d5:29:3e:c6:23:2f:
1f:cc:26:4f:24:0b:72:50:13:b0:dc:b3:2a:a1:46:
c8:d8:49:54:19:f9:ef:ad:3e:44:a7:36:68:d6:95:
56:5e:a5:6a:73:19:84:1c:5c:9c:a4:f2:28:32:7e:
03:da:9b:e8:06:5a:fd:11:e8:e9:9e:e9:8a:48:6e:
08:23:72:72:5d:4a:fb:c8:f0:72:62:c3:d6:35:e8:
b1:6e:be:ec:a4:57:aa:cc:d9:c7:03:a1:1c:02:07:
54:9b:bd:c1:90:c7:10:57:34:66:da:84:6e:c3:11:
40:6e:a0:4a:5d:01:a2:b9:dd:e6:a5:1b:a1:c9:20:
ca:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:85:C4:30:35:4D:8D:51:06:46:2C:EF:D0:51:27:46:2A:43:B8:F3
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/LIXEMDVNjVEGRizv0FEnRipDuPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.138.255
77.90.140.0/24
77.90.142.0-77.90.148.255
77.90.150.0/24
77.90.155.0/24
77.90.157.0/24
77.90.180.0/24
185.230.13.0-185.230.14.255
213.209.130.0/24
213.209.136.0/24
213.209.138.0/24
213.209.147.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
82:35:47:d7:21:6d:6f:67:f2:4a:52:3c:60:db:a4:0f:b1:26:
74:b9:66:0b:ca:fa:80:d8:e1:00:3e:c3:17:8e:76:0e:8f:16:
ea:0a:c3:0c:b6:1e:0d:b4:73:4b:49:70:4b:85:5d:fe:18:48:
bb:b1:d5:00:1e:41:a3:0b:2a:b7:a2:1c:ad:13:22:30:8a:98:
f4:f7:b4:4c:08:b2:7e:e6:17:eb:11:28:a6:b2:3c:db:57:76:
ef:db:ce:b2:c7:86:91:6b:f2:03:06:47:37:ea:29:a5:50:3f:
41:f9:a7:3e:d9:27:2d:25:4d:54:9f:16:47:40:74:04:81:6d:
5c:a1:63:8e:79:1b:ee:a2:b3:43:69:bf:60:92:f9:ea:af:5a:
8d:55:44:b5:d3:1e:5b:b7:96:f9:01:8e:7a:9a:c6:68:69:85:
be:13:49:f0:90:9a:5e:34:ec:8b:ef:e0:54:af:10:d3:87:5e:
29:fd:5a:fa:dd:ad:91:49:d2:e4:a4:05:1c:9b:7d:00:8f:ec:
59:7d:29:42:84:1c:45:e5:79:47:fd:08:42:07:78:0d:6f:c1:
37:0f:2e:72:41:dc:5c:5c:a3:03:97:d4:bc:af:f4:01:cd:1f:
97:62:ca:82:57:9e:53:fc:93:7a:4c:c0:1e:cf:82:be:c8:47:
c9:a9:b6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org