Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/0gZrMS1KdIW2vAGP9RRW27N7z_s.roa
File: 0gZrMS1KdIW2vAGP9RRW27N7z_s.roa (raw, json)
Hash identifier: Yn2XfinIpYa6tqEHQJrjjUm40jpiw5sN/9x+u77H644=
Subject key identifier: D2:06:6B:31:2D:4A:74:85:B6:BC:01:8F:F5:14:56:DB:B3:7B:CF:FB
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01856F82550911DC085F74FC89E6981AB427
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/0gZrMS1KdIW2vAGP9RRW27N7z_s.roa
Signing time: Sun 01 Jan 2023 22:44:50 +0000
ROA not before: Sun 01 Jan 2023 22:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 77.90.188.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
77.90.151.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:55:09:11:dc:08:5f:74:fc:89:e6:98:1a:b4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 1 22:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2066b312d4a7485b6bc018ff51456dbb37bcffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:ab:cd:06:2e:9e:a6:55:4a:7b:9e:65:65:
f0:6d:56:f0:e5:3e:56:81:38:8b:93:5e:aa:02:90:
ee:aa:f4:3e:de:2a:9e:df:1d:5a:67:42:0c:fe:57:
80:65:f6:a1:6e:04:8a:61:86:6a:aa:8e:77:53:25:
a8:de:c4:d6:98:09:15:60:0f:df:e8:93:e8:a5:90:
10:4f:ca:d6:32:e6:79:27:bf:f8:21:b9:6c:d7:58:
68:d7:62:ca:c6:7a:13:96:58:6a:68:49:7b:25:b1:
eb:b4:8e:30:96:97:e9:2e:f3:f2:46:b6:3d:19:ac:
66:ce:43:5a:b8:0e:e5:39:ce:c2:f6:f1:4e:50:3c:
87:05:db:ca:06:a5:96:2c:bf:bd:86:f3:0b:4c:45:
1c:e7:96:3b:97:1c:7d:55:5a:f0:77:5e:da:95:66:
46:6c:52:70:ef:99:28:05:08:82:4a:a6:f6:ba:d3:
7a:d2:88:e9:90:6e:27:6f:c6:c5:7e:a5:df:07:3c:
01:b1:72:db:d0:72:11:c5:d2:be:7b:12:54:e0:78:
f6:7f:4d:e5:7e:ab:d3:09:c3:51:e9:c6:16:5d:12:
24:2a:71:5f:d2:fd:70:b6:37:53:50:08:43:93:43:
1c:64:0a:eb:ba:51:3e:09:ec:37:60:f1:62:d0:0b:
c8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:06:6B:31:2D:4A:74:85:B6:BC:01:8F:F5:14:56:DB:B3:7B:CF:FB
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/0gZrMS1KdIW2vAGP9RRW27N7z_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.151.0/24
77.90.185.0/24
77.90.188.0/24
213.209.143.0/24
213.209.146.0/24
213.209.149.0/24
213.209.156.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:5c:79:48:6d:b2:66:f2:ca:d7:9e:06:de:53:4c:ce:4a:1b:
5e:f4:49:ea:b6:aa:6e:89:3f:d4:18:e8:ce:bb:39:36:19:d2:
7a:67:c8:81:83:df:9f:bb:87:4b:a9:e9:5a:b9:50:e1:e1:4b:
23:2a:01:b0:d1:11:7b:69:4a:42:ca:81:0a:22:cd:44:94:57:
d1:b5:5e:98:50:9d:19:c8:89:a2:81:d8:d6:e2:13:55:b1:ec:
21:fc:22:4c:c7:e8:e5:b6:79:a3:63:f3:98:d8:a3:b7:15:11:
5f:23:73:c3:fa:7b:4c:5c:3d:4a:23:57:21:0e:06:53:62:24:
a3:54:5a:dd:b5:b3:58:af:da:3d:37:e3:4c:6e:10:ed:fc:53:
c4:1c:be:c6:bb:89:3b:63:9d:46:b5:13:1c:6f:57:6c:77:14:
3a:3b:b8:69:b1:3d:0c:e4:01:4f:76:4a:00:83:a1:48:4b:2d:
b9:30:01:a7:7d:63:22:fa:f0:34:04:a4:93:e9:cd:95:b7:c6:
c0:ce:f2:7b:c3:85:7d:47:ab:07:8e:99:1b:c3:ea:17:6e:a1:
98:2b:b5:aa:a7:79:9b:ff:c1:ec:2b:7c:7e:e2:2f:ae:16:81:
6b:e7:e2:f8:09:d7:ed:bd:3b:e3:91:85:23:c9:53:a8:96:cf:
2a:62:9a:65
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYVvglUJEdwIX3T8ieaYGrQnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjMwMTAxMjI0NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjA2NmIzMTJkNGE3NDg1YjZiYzAxOGZmNTE0NTZkYmIzN2JjZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtturzQYunqZVSnueZWXwbVbw5T5W
gTiLk16qApDuqvQ+3iqe3x1aZ0IM/leAZfahbgSKYYZqqo53UyWo3sTWmAkVYA/f
6JPopZAQT8rWMuZ5J7/4Ibls11ho12LKxnoTllhqaEl7JbHrtI4wlpfpLvPyRrY9
GaxmzkNauA7lOc7C9vFOUDyHBdvKBqWWLL+9hvMLTEUc55Y7lxx9VVrwd17alWZG
bFJw75koBQiCSqb2utN60ojpkG4nb8bFfqXfBzwBsXLb0HIRxdK+exJU4Hj2f03l
fqvTCcNR6cYWXRIkKnFf0v1wtjdTUAhDk0McZArrulE+Cew3YPFi0AvIuQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFNIGazEtSnSFtrwBj/UUVtuze8/7MB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvMGdack1TMUtkSVcydkFHUDlSUlcyN043el9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQATVqXAwQA
TVq5AwQATVq8AwQA1dGPAwQA1dGSAwQA1dGVAwQA1dGcMA0GCSqGSIb3DQEBCwUA
A4IBAQAPXHlIbbJm8srXngbeU0zOShte9EnqtqpuiT/UGOjOuzk2GdJ6Z8iBg9+f
u4dLqelauVDh4UsjKgGw0RF7aUpCyoEKIs1ElFfRtV6YUJ0ZyImigdjW4hNVsewh
/CJMx+jltnmjY/OY2KO3FRFfI3PD+ntMXD1KI1chDgZTYiSjVFrdtbNYr9o9N+NM
bhDt/FPEHL7Gu4k7Y51GtRMcb1dsdxQ6O7hpsT0M5AFPdkoAg6FISy25MAGnfWMi
+vA0BKST6c2Vt8bAzvJ7w4V9R6sHjpkbw+oXbqGYK7Wqp3mb/8HsK3x+4i+uFoFr
5+L4CdftvTvjkYUjyVOols8qYppl
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org