Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/03ChA6idfPANaYW3JxmsPkA2o4g.roa
File: 03ChA6idfPANaYW3JxmsPkA2o4g.roa (raw, json)
Hash identifier: kgTayr/uLZRQl7cuy7dp8L/e5ovfU0F6chXJQiyvOSE=
Subject key identifier: D3:70:A1:03:A8:9D:7C:F0:0D:69:85:B7:27:19:AC:3E:40:36:A3:88
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018EA0CBF5A949A672736B52E64912752664
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/03ChA6idfPANaYW3JxmsPkA2o4g.roa
Signing time: Tue 02 Apr 2024 21:51:45 +0000
ROA not before: Tue 02 Apr 2024 21:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.128.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 18 Apr 2024 13:12:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a0:cb:f5:a9:49:a6:72:73:6b:52:e6:49:12:75:26:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 2 21:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d370a103a89d7cf00d6985b72719ac3e4036a388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:50:75:8c:cc:18:6e:3e:8e:ab:b1:99:6e:90:
0a:2a:22:92:93:14:0f:64:76:96:37:b4:b0:f0:fa:
83:92:ac:8a:f8:fa:57:f9:c4:6e:e2:b2:ac:8a:d8:
8d:dd:9e:99:cb:15:c2:dd:33:c0:3f:ea:56:6d:05:
50:23:cb:17:2b:77:4d:8d:28:7d:03:f8:9a:51:44:
43:3d:15:46:10:6e:9e:7b:4d:b1:a6:4f:4d:1d:12:
68:fb:29:25:7d:3c:24:a6:1a:84:72:2f:90:2b:26:
41:0f:b5:8c:13:ff:4e:cc:28:ac:7c:98:22:72:d5:
c6:52:d5:a6:37:63:a4:fd:0c:03:a7:91:08:a5:2e:
60:19:73:f3:d9:cd:62:2f:98:b7:ad:24:44:11:bb:
ee:80:5e:f1:cd:fa:11:21:14:2d:c7:4a:eb:5d:b8:
67:7d:ad:9a:a8:f2:46:a8:b0:a6:55:ed:58:c9:84:
7d:32:39:b8:52:93:ac:42:e2:32:b2:fd:f9:cc:d4:
7d:5f:a0:95:a2:9f:b1:ac:fb:49:6f:c7:c7:e4:b5:
f2:48:62:4a:2d:0b:cc:6d:0c:70:6f:a4:9e:35:45:
39:23:62:ee:87:61:5b:07:f3:36:e5:74:3b:04:ae:
4f:23:8d:e9:84:6e:9b:65:56:34:c6:28:f1:39:a3:
52:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:70:A1:03:A8:9D:7C:F0:0D:69:85:B7:27:19:AC:3E:40:36:A3:88
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/03ChA6idfPANaYW3JxmsPkA2o4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
185.230.13.0-185.230.14.255
213.209.129.0/24
213.209.138.0/24
213.209.143.0/24
213.209.157.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
4f:c7:6d:d1:13:f2:d4:85:33:e2:47:42:9b:ff:c4:3a:d6:0a:
24:5d:99:ce:e9:88:87:1c:01:81:d6:75:fb:13:e8:a6:9c:9d:
dc:48:99:5a:54:29:a6:a1:10:6a:44:da:55:04:d9:98:5d:04:
12:e6:ab:a1:85:86:f4:ab:4f:b9:95:98:12:ea:19:fc:84:e0:
b8:49:28:f7:04:4b:6e:02:2c:56:35:7e:7a:3f:4d:8c:44:81:
e1:02:1f:3a:a3:da:9b:91:7f:97:1c:e6:ec:79:d4:bb:b2:3d:
9a:7b:f4:84:c1:45:34:e5:5a:66:93:ed:dc:ac:07:8d:42:c5:
5d:40:4e:16:f1:5c:92:47:5f:36:ac:d0:53:d6:07:c1:65:cf:
8d:24:a1:78:af:47:0b:92:83:2b:e8:01:20:25:e2:36:02:5f:
d0:70:bd:7b:f3:a9:12:38:af:e3:18:b7:e3:c2:df:ac:0b:e4:
66:5d:d8:62:42:d8:d5:0a:78:13:7c:f8:24:63:87:75:71:ec:
2d:b8:15:bc:58:a2:97:30:91:c0:a3:ca:83:8b:13:7d:6f:5f:
34:67:f6:1f:90:9c:63:6d:ad:80:99:41:09:08:70:43:2d:42:
ab:4f:79:71:fb:07:67:61:7c:2e:d2:02:ac:81:ff:84:d9:6d:
c3:43:53:e1
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgISAY6gy/WpSaZyc2tS5kkSdSZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjQwNDAyMjE1MTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzcwYTEwM2E4OWQ3Y2YwMGQ2OTg1YjcyNzE5YWMzZTQwMzZhMzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1B1jMwYbj6Oq7GZbpAKKiKSkxQP
ZHaWN7Sw8PqDkqyK+PpX+cRu4rKsitiN3Z6ZyxXC3TPAP+pWbQVQI8sXK3dNjSh9
A/iaUURDPRVGEG6ee02xpk9NHRJo+yklfTwkphqEci+QKyZBD7WME/9OzCisfJgi
ctXGUtWmN2Ok/QwDp5EIpS5gGXPz2c1iL5i3rSREEbvugF7xzfoRIRQtx0rrXbhn
fa2aqPJGqLCmVe1YyYR9Mjm4UpOsQuIysv35zNR9X6CVop+xrPtJb8fH5LXySGJK
LQvMbQxwb6SeNUU5I2Luh2FbB/M25XQ7BK5PI43phG6bZVY0xijxOaNSTwIDAQAB
o4IChjCCAoIwHQYDVR0OBBYEFNNwoQOonXzwDWmFtycZrD5ANqOIMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvMDNDaEE2aWRmUEFOYVlXM0p4bXNQa0EybzRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGbBggrBgEFBQcBBwEB/wSBizCBiDBwBAIAATBqMAwDBAdN
WoADBABNWoIwDAMEAk1ahAMEAE1ahgMEAU1aiAMEAE1ajDAMAwQBTVqOAwQATVqQ
MAwDBAFNWpIDBABNWpQwDAMEALnmDQMEALnmDgMEANXRgQMEANXRigMEANXRjwME
ANXRnTAUBAIAAjAOAwUAKgQpwgMFACoEKccwDQYJKoZIhvcNAQELBQADggEBAE/H
bdET8tSFM+JHQpv/xDrWCiRdmc7piIccAYHWdfsT6KacndxImVpUKaahEGpE2lUE
2ZhdBBLmq6GFhvSrT7mVmBLqGfyE4LhJKPcES24CLFY1fno/TYxEgeECHzqj2puR
f5cc5ux51LuyPZp79ITBRTTlWmaT7dysB41CxV1AThbxXJJHXzas0FPWB8Flz40k
oXivRwuSgyvoASAl4jYCX9BwvXvzqRI4r+MYt+PC36wL5GZd2GJC2NUKeBN8+CRj
h3Vx7C24FbxYopcwkcCjyoOLE31vXzRn9h+QnGNtrYCZQQkIcEMtQqtPeXH7B2dh
fC7SAqyB/4TZbcNDU+E=
-----END CERTIFICATE-----
Generated at Thu Apr 18 16:08:31 2024 by rpki-client on console-ams.rpki-client.org