Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/LPC5TxghqBcqOAORdGT55slDdZs.roa
File: LPC5TxghqBcqOAORdGT55slDdZs.roa (raw, json)
Hash identifier: 60UJ1JVOTvaxQZQoAwb742rgPoZ0IDlQZRGHALHnHBM=
Subject key identifier: 2C:F0:B9:4F:18:21:A8:17:2A:38:03:91:74:64:F9:E6:C9:43:75:9B
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 082D253E
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/LPC5TxghqBcqOAORdGT55slDdZs.roa
Signing time: Fri 18 Mar 2022 13:47:47 +0000
ROA not before: Fri 18 Mar 2022 13:47:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39144
IP address blocks: 213.209.129.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137176382 (0x82d253e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Mar 18 13:47:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2cf0b94f1821a8172a3803917464f9e6c943759b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:2d:6b:a4:6f:f3:76:c0:37:25:4c:3f:20:
47:a6:f6:8f:b7:d1:93:e8:40:eb:f4:22:aa:d7:e5:
f2:ce:af:ae:10:79:0b:d0:3b:c1:82:8b:f5:e4:63:
9f:51:cf:c1:5b:23:06:d7:57:71:f4:bb:e0:08:5e:
6d:46:d5:f1:70:5e:45:a3:79:18:69:7f:14:3f:0c:
b4:75:f6:28:fc:e6:c5:31:09:97:79:5a:bb:86:78:
4a:87:d2:8b:0c:c0:b3:ae:54:e0:ac:69:4f:f0:20:
d1:f1:ed:92:30:6e:bf:5b:1b:67:c3:0b:4e:55:06:
3f:5f:70:41:80:e5:c3:1b:e1:b0:ef:dc:56:b3:1c:
dc:4b:71:5c:85:99:45:85:4a:7a:94:cb:ce:81:5e:
62:72:23:09:43:a0:6e:2b:c8:07:d9:9a:a0:98:41:
3c:e9:7c:e6:3c:91:d8:2b:48:4a:52:f8:f7:91:02:
cb:20:e3:60:ec:b0:3c:6d:85:12:88:92:0a:c9:a7:
6d:8c:c0:07:53:0f:97:1e:40:d1:be:19:43:41:e6:
10:c7:cd:69:3f:cf:a3:b0:89:cf:a1:05:21:8c:fe:
d7:8e:b3:ce:82:e5:eb:36:39:57:3c:69:05:9a:1e:
c0:5a:73:d7:ef:dc:8f:e6:95:0c:db:d8:ca:98:66:
fb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F0:B9:4F:18:21:A8:17:2A:38:03:91:74:64:F9:E6:C9:43:75:9B
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/LPC5TxghqBcqOAORdGT55slDdZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.185.0/24
213.209.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e6:bb:71:97:41:cf:97:4e:fe:33:8c:99:86:d7:fd:82:6e:
40:f4:e7:23:dc:d7:bd:1c:83:cf:99:f1:a2:8f:a8:bb:1f:89:
9c:41:dc:5e:95:ea:8d:63:f1:d7:f7:23:33:da:f4:ce:78:b5:
e4:75:bd:2e:56:2c:1a:8e:cd:25:b1:10:a6:c4:c6:b3:5a:30:
85:17:6b:f0:31:af:79:fa:2c:fd:9a:8a:bb:7f:63:74:b3:1a:
e0:eb:d0:f6:7c:3c:44:b4:a8:31:d2:33:d0:e9:7f:a7:73:ed:
24:32:70:c2:a1:35:45:5a:88:d9:98:93:74:c1:62:c3:b2:11:
a5:87:70:a2:70:d9:3f:2d:d1:71:5b:b6:99:a9:47:e2:31:d3:
49:65:47:73:1e:88:e0:95:0d:b9:73:6f:9d:71:05:45:8b:de:
bf:60:8a:bf:6c:3b:7d:d3:0b:5f:12:80:3f:58:b5:6f:7d:c6:
bb:83:8f:3d:02:8f:17:11:37:c4:18:72:40:46:c0:75:6a:aa:
cf:08:f5:40:61:a1:7b:ae:ba:ba:c4:de:db:23:37:17:6b:02:
fa:12:31:72:2b:6b:b6:30:f7:73:2e:b9:eb:47:82:ed:fd:cc:
67:30:79:56:80:da:aa:87:31:1d:a8:1f:86:60:a7:52:a6:3c:
38:8d:f1:45
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECC0lPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjQ3NmUxMmU4OTg3ZTViMzAyY2RjMjRiZGQ5ZGIzZmU4M2M4NDQ5MB4XDTIyMDMx
ODEzNDc0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmNmMGI5NGYxODIx
YTgxNzJhMzgwMzkxNzQ2NGY5ZTZjOTQzNzU5YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMF1LWukb/N2wDclTD8gR6b2j7fRk+hA6/Qiqtfl8s6vrhB5
C9A7wYKL9eRjn1HPwVsjBtdXcfS74AhebUbV8XBeRaN5GGl/FD8MtHX2KPzmxTEJ
l3lau4Z4SofSiwzAs65U4KxpT/Ag0fHtkjBuv1sbZ8MLTlUGP19wQYDlwxvhsO/c
VrMc3EtxXIWZRYVKepTLzoFeYnIjCUOgbivIB9maoJhBPOl85jyR2CtISlL495EC
yyDjYOywPG2FEoiSCsmnbYzAB1MPlx5A0b4ZQ0HmEMfNaT/Po7CJz6EFIYz+146z
zoLl6zY5VzxpBZoewFpz1+/cj+aVDNvYyphm++ECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQs8LlPGCGoFyo4A5F0ZPnmyUN1mzAfBgNVHSMEGDAWgBQ7R24S6Jh+WzAs
3CS92ds/6DyESTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8x
L0xQQzVUeGdocUJjcU9BT1JkR1Q1NXNsRGRacy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
ZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8xL08wZHVFdWlZZmxz
d0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAE1auQMEANXRgTANBgkqhkiG9w0B
AQsFAAOCAQEAHOa7cZdBz5dO/jOMmYbX/YJuQPTnI9zXvRyDz5nxoo+oux+JnEHc
XpXqjWPx1/cjM9r0zni15HW9LlYsGo7NJbEQpsTGs1owhRdr8DGvefos/ZqKu39j
dLMa4OvQ9nw8RLSoMdIz0Ol/p3PtJDJwwqE1RVqI2ZiTdMFiw7IRpYdwonDZPy3R
cVu2malH4jHTSWVHcx6I4JUNuXNvnXEFRYvev2CKv2w7fdMLXxKAP1i1b33Gu4OP
PQKPFxE3xBhyQEbAdWqqzwj1QGGhe666usTe2yM3F2sC+hIxcitrtjD3cy6560eC
7f3MZzB5VoDaqocxHagfhmCnUqY8OI3xRQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:25 2024 by rpki-client on console-ams.rpki-client.org