Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/0JeSXTXCyH-E409Cm56-cXhYtiE.roa
File: 0JeSXTXCyH-E409Cm56-cXhYtiE.roa (raw, json)
Hash identifier: 1q+LT/QAAntXNf4Hq0cysAuXm5SdJTtJzQ0INGX5Kto=
Subject key identifier: D0:97:92:5D:35:C2:C8:7F:84:E3:4F:42:9B:9E:BE:71:78:58:B6:21
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018B47614D6265613D42909FFA6082CD0F8D
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/0JeSXTXCyH-E409Cm56-cXhYtiE.roa
Signing time: Thu 19 Oct 2023 10:00:40 +0000
ROA not before: Thu 19 Oct 2023 10:00:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 213.209.135.0/24 maxlen: 24
213.209.141.0/24 maxlen: 24
213.209.153.0/24 maxlen: 24
213.209.154.0/24 maxlen: 24
77.90.167.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:61:4d:62:65:61:3d:42:90:9f:fa:60:82:cd:0f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 19 10:00:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d097925d35c2c87f84e34f429b9ebe717858b621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8b:d6:7f:12:ed:02:53:9d:5f:56:0b:2e:f4:
9b:bf:0b:75:e4:6a:ef:1a:b6:1c:15:fe:55:b2:dc:
89:c6:60:a4:46:12:21:9c:d5:51:e2:78:f8:f8:ab:
6d:37:86:13:7a:19:ca:a8:fc:3d:db:4b:e1:31:aa:
c2:02:0a:b8:8c:81:4e:b0:f8:80:94:ed:50:9f:ca:
61:05:39:80:b4:28:ec:d0:0e:c2:f0:bf:75:57:4e:
ce:40:8b:23:af:cc:3b:39:c0:c7:e4:46:cd:be:5a:
cd:e6:0e:4a:7e:a0:88:55:d9:ff:10:86:13:00:58:
2b:82:66:6f:00:f6:ad:14:7d:9a:dc:5f:93:35:4c:
86:99:c4:c6:01:b1:82:9d:7f:44:d5:55:85:5a:6e:
2c:a0:c4:57:a0:6e:02:5c:ae:bd:fc:9b:2a:75:4a:
f2:81:78:06:a0:0f:81:d3:52:79:93:56:3b:0a:d7:
b8:97:e3:4b:10:d4:f5:86:71:62:7d:43:76:45:bc:
61:88:93:67:ec:88:5a:25:4e:23:80:8f:c1:2e:ba:
bc:b6:33:24:72:8a:51:0e:ea:e7:8f:0e:1a:ab:bb:
bb:f6:e4:24:08:d8:b4:88:24:0b:38:14:62:29:25:
1e:63:2d:38:98:12:cf:29:e9:00:b6:92:a3:d1:8d:
cd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:97:92:5D:35:C2:C8:7F:84:E3:4F:42:9B:9E:BE:71:78:58:B6:21
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/0JeSXTXCyH-E409Cm56-cXhYtiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.167.0/24
185.230.15.0/24
213.209.135.0/24
213.209.141.0/24
213.209.153.0-213.209.154.255
Signature Algorithm: sha256WithRSAEncryption
0a:4d:46:49:d5:2d:4d:92:e2:fd:71:93:e5:10:75:0c:f0:e4:
88:1e:8f:a6:49:92:de:a6:b6:36:6e:10:cc:f5:9c:2e:0b:98:
8f:c4:93:8a:56:44:ea:b7:a6:b1:9b:b9:96:a4:33:33:ae:67:
91:ee:2d:b7:8c:26:64:92:1e:14:82:b5:57:a8:9b:1d:ab:be:
dc:7a:ee:b6:ae:9e:da:8a:d7:ae:df:48:72:fc:25:50:6a:22:
af:80:7b:b8:f6:c2:a2:d5:ea:2d:64:4b:79:b7:a7:93:cc:a0:
de:0e:86:1f:d9:82:ca:ef:50:86:1c:58:04:5d:da:18:b8:da:
09:c1:be:d5:f6:48:af:8f:a4:50:3a:89:e3:fc:6e:c2:05:fb:
74:b1:2e:f8:d9:a3:30:61:14:d6:34:ce:99:fd:5c:0e:39:29:
71:9c:2d:ee:db:49:6a:54:f5:2c:0e:0b:7e:f1:f4:0f:38:38:
94:1e:4f:6c:ac:74:56:02:32:08:63:dc:31:e4:78:cb:24:b9:
f7:4a:d2:8e:3b:14:a3:9f:3e:9b:f5:6b:9d:3d:78:33:1f:d1:
8b:d8:70:e7:63:f7:2b:90:5f:51:e1:07:3c:81:eb:83:56:d6:
05:43:e1:ec:08:fc:83:b6:34:f8:ef:08:49:b2:a0:f5:ac:d0:
38:10:63:8e
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYtHYU1iZWE9QpCf+mCCzQ+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjMxMDE5MTAwMDQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDk3OTI1ZDM1YzJjODdmODRlMzRmNDI5YjllYmU3MTc4NThiNjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IvWfxLtAlOdX1YLLvSbvwt15Grv
GrYcFf5VstyJxmCkRhIhnNVR4nj4+KttN4YTehnKqPw920vhMarCAgq4jIFOsPiA
lO1Qn8phBTmAtCjs0A7C8L91V07OQIsjr8w7OcDH5EbNvlrN5g5KfqCIVdn/EIYT
AFgrgmZvAPatFH2a3F+TNUyGmcTGAbGCnX9E1VWFWm4soMRXoG4CXK69/JsqdUry
gXgGoA+B01J5k1Y7Cte4l+NLENT1hnFifUN2RbxhiJNn7IhaJU4jgI/BLrq8tjMk
copRDurnjw4aq7u79uQkCNi0iCQLOBRiKSUeYy04mBLPKekAtpKj0Y3NywIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFNCXkl01wsh/hONPQpuevnF4WLYhMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvMEplU1hUWEN5SC1FNDA5Q201Ni1jWGhZdGlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQATVqnAwQA
ueYPAwQA1dGHAwQA1dGNMAwDBADV0ZkDBADV0ZowDQYJKoZIhvcNAQELBQADggEB
AApNRknVLU2S4v1xk+UQdQzw5Igej6ZJkt6mtjZuEMz1nC4LmI/Ek4pWROq3prGb
uZakMzOuZ5HuLbeMJmSSHhSCtVeomx2rvtx67rauntqK167fSHL8JVBqIq+Ae7j2
wqLV6i1kS3m3p5PMoN4Ohh/ZgsrvUIYcWARd2hi42gnBvtX2SK+PpFA6ieP8bsIF
+3SxLvjZozBhFNY0zpn9XA45KXGcLe7bSWpU9SwOC37x9A84OJQeT2ysdFYCMghj
3DHkeMskufdK0o47FKOfPpv1a509eDMf0YvYcOdj9yuQX1HhBzyB64NW1gVD4ewI
/IO2NPjvCEmyoPWs0DgQY44=
-----END CERTIFICATE-----
Generated at Tue Dec 26 13:38:24 2023 by rpki-client on console-fra.rpki-client.org