Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/0cDDzbQnvzfOdwoWNUkjTrIfLIw.roa
File: 0cDDzbQnvzfOdwoWNUkjTrIfLIw.roa (raw, json)
Hash identifier: OycsEneNkaRwgf9RZUMTt4m6bqcRUpXnaf0PwxAG5Ic=
Subject key identifier: D1:C0:C3:CD:B4:27:BF:37:CE:77:0A:16:35:49:23:4E:B2:1F:2C:8C
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018CCB3D416EC00756E0ADF16D6044AADA76
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/0cDDzbQnvzfOdwoWNUkjTrIfLIw.roa
Signing time: Tue 02 Jan 2024 17:33:58 +0000
ROA not before: Tue 02 Jan 2024 17:33:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1280:24::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cb:3d:41:6e:c0:07:56:e0:ad:f1:6d:60:44:aa:da:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 2 17:33:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1c0c3cdb427bf37ce770a163549234eb21f2c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:32:ae:25:03:6c:4d:08:cb:5a:0e:db:5c:3b:
fa:96:61:4a:fc:20:ac:59:80:87:7a:72:e6:1a:36:
a8:e2:10:de:7f:95:b5:68:f4:ab:93:8b:ba:7a:71:
61:16:0c:ce:e9:62:d6:83:b1:90:23:e6:a5:2b:55:
e1:ef:7b:90:a5:53:3a:6b:af:3c:6b:da:99:e3:6f:
8c:cf:7f:d7:f0:98:c5:b6:61:4c:dd:86:5a:62:95:
c8:6a:bc:a4:0d:cc:b8:fd:2b:0e:eb:18:61:44:6c:
e1:11:8c:8a:31:9d:37:ee:66:11:ee:7d:eb:66:4e:
37:f1:30:dd:f0:88:a4:1b:fa:32:26:68:ad:12:06:
15:7d:86:25:a8:bc:fe:62:c4:f6:f9:13:3a:2b:73:
89:e8:11:b9:16:cd:f3:a4:a5:93:39:72:77:36:9d:
a2:24:32:3d:42:ee:4f:cc:61:81:01:e4:30:9d:d0:
0e:48:e1:e7:3b:7f:a4:21:46:d2:73:25:3a:2a:dd:
a8:39:a5:97:ac:47:26:8e:c4:1e:2d:32:ff:5f:db:
f6:e7:f8:19:39:b4:83:49:3e:cc:bc:5c:c0:fe:2a:
5c:f7:16:99:7d:6e:7b:47:ac:26:40:85:b1:0e:a2:
e6:59:10:95:f7:8b:7e:79:5b:57:3b:40:f5:89:29:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C0:C3:CD:B4:27:BF:37:CE:77:0A:16:35:49:23:4E:B2:1F:2C:8C
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/0cDDzbQnvzfOdwoWNUkjTrIfLIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.140.0/24
77.90.142.0-77.90.148.255
77.90.153.0-77.90.154.255
77.90.188.0/24
185.230.13.0-185.230.15.255
213.209.129.0/24
213.209.138.0/24
213.209.145.0-213.209.146.255
213.209.150.0/24
213.209.157.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
22:57:0e:b1:92:3d:cc:61:cf:94:68:d8:de:25:3d:ea:32:b0:
b0:29:27:83:bb:42:ce:8e:3e:83:d8:ff:e9:75:5d:f2:3c:83:
71:be:82:b7:d8:46:f2:8a:ec:96:3b:9a:e3:50:64:32:30:ba:
a1:6e:59:c1:f8:0a:29:c1:6d:31:84:4d:ca:b1:e8:ba:db:c0:
59:90:15:a1:e3:39:d1:ec:42:1b:53:9b:11:aa:5c:c4:1c:90:
26:e1:ee:eb:b7:2b:18:88:0d:dc:9f:67:3c:bb:50:cb:20:39:
e7:ef:95:58:0f:d0:04:ae:34:a8:7d:89:77:f5:b4:47:30:d3:
5a:1d:a9:e8:12:15:75:0a:aa:3a:10:c4:56:5b:4a:e2:39:1b:
cd:cc:a8:6f:e2:0c:aa:ee:90:8e:e8:9c:f7:5c:07:85:12:74:
ed:41:2c:bc:0c:d6:38:fd:c0:9c:7f:20:6f:71:57:c9:8c:74:
48:20:f8:1b:41:be:ba:3f:c0:53:62:c5:d5:27:91:b1:b6:1c:
5b:95:b2:29:c8:1e:16:90:99:ca:01:54:0c:bd:28:78:bf:4b:
98:61:73:8c:74:44:0e:54:14:39:27:e3:da:42:26:13:4c:ca:
ac:fb:23:d0:46:05:7d:fa:df:bb:36:73:d4:64:80:41:39:78:
67:e9:7e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 03:13:02 2024 by rpki-client on console-fra.rpki-client.org