Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-9nKNybelG7e8EtXDLJSY5MpzV0.roa
File: 1-9nKNybelG7e8EtXDLJSY5MpzV0.roa (raw, json)
Hash identifier: W+M1LFJUsSMF/LIOnLJmLx0FnSmp7nSDT9paVDfVUvo=
Subject key identifier: FB:D9:CA:37:26:DE:94:6E:DE:F0:4B:57:0C:B2:52:63:93:29:CD:5D
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0189E8E17C08FD113E508F0123EBD7765E2D
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-9nKNybelG7e8EtXDLJSY5MpzV0.roa
Signing time: Sat 12 Aug 2023 08:33:58 +0000
ROA not before: Sat 12 Aug 2023 08:33:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.151.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e8:e1:7c:08:fd:11:3e:50:8f:01:23:eb:d7:76:5e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 12 08:33:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbd9ca3726de946edef04b570cb252639329cd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:f7:1f:26:f6:45:95:46:4c:94:89:55:31:
b8:f7:9d:5b:5c:de:bd:69:2e:92:21:d5:3c:a4:53:
53:c6:bf:3a:66:a0:5e:45:d0:67:2e:48:bf:9a:46:
da:0f:2b:ff:18:85:17:cb:83:6c:71:05:6c:67:4c:
81:d1:6e:b9:0a:7f:db:58:66:67:c0:74:aa:ff:40:
fa:d0:1a:f3:31:39:73:83:11:cc:4f:81:f9:92:b8:
be:29:69:9d:96:1c:d6:0f:50:2b:95:c7:06:46:6f:
83:5e:47:f1:b7:eb:51:b5:35:ec:8b:52:fe:61:ec:
89:94:6b:e5:49:51:db:b3:fc:16:94:75:96:18:67:
53:0d:b7:e6:9c:fd:2d:f9:5f:7c:82:35:45:06:84:
b8:27:3f:13:b2:07:86:97:c5:91:90:7f:8d:98:a0:
e4:a0:dd:1d:9f:78:93:97:80:45:33:53:4d:6f:39:
38:80:10:d5:12:cd:a8:4c:56:ac:c2:5e:96:ea:33:
e7:f0:57:d7:5f:2f:8d:11:36:7f:0b:6d:db:63:42:
47:10:a7:82:54:c1:ca:d0:e2:a8:a7:83:53:88:19:
81:46:c8:4c:04:31:05:ae:26:a7:00:26:35:d6:3a:
a3:82:47:ca:ce:7a:dc:b5:91:b4:69:61:05:54:05:
d0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D9:CA:37:26:DE:94:6E:DE:F0:4B:57:0C:B2:52:63:93:29:CD:5D
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-9nKNybelG7e8EtXDLJSY5MpzV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.153.0/24
185.230.14.0/24
213.209.129.0/24
213.209.138.0/24
213.209.151.0/24
213.209.157.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
9d:b8:35:93:f9:18:3f:57:ee:da:05:5f:75:fc:4d:71:a5:6b:
ea:f4:1b:60:8d:7d:fd:1f:e8:00:0c:99:6a:a7:7c:46:30:a1:
31:22:a1:7e:f1:c7:01:f6:d9:b7:7d:fb:e5:eb:c6:09:92:38:
73:81:33:7a:7b:7b:eb:7f:22:a3:6f:21:67:c2:b9:e0:f8:d4:
97:50:f6:1d:bf:72:ac:3e:66:c3:e4:a7:be:ce:e3:c5:67:f2:
0a:1c:56:1b:5c:83:37:01:11:f5:c5:1d:7e:7a:59:2b:cf:a2:
22:36:9b:47:c2:14:77:dc:2a:86:33:85:06:7f:82:b9:05:f9:
b3:6c:31:29:25:67:d7:2a:b1:58:2e:7c:d0:d3:57:5d:52:b0:
76:aa:24:ef:43:92:4e:c7:e1:b3:c4:96:da:68:dd:2c:2f:9e:
3e:24:6c:14:e9:92:52:fa:7e:82:ab:0d:35:6b:f1:01:02:1b:
04:ce:98:58:f1:44:4e:87:88:09:0f:b7:a2:92:46:34:f7:dc:
11:32:ed:05:fb:48:7e:fd:4f:1f:b0:21:3d:c2:94:71:87:a7:
22:a1:09:ed:4c:1e:39:12:ad:cd:6b:4a:58:ad:0d:4f:60:c7:
c1:de:4c:25:62:db:5a:e4:c8:dd:58:f7:99:33:32:a5:07:23:
87:23:c1:9c
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAYno4XwI/RE+UI8BI+vXdl4tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjMwODEyMDgzMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmQ5Y2EzNzI2ZGU5NDZlZGVmMDRiNTcwY2IyNTI2MzkzMjljZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKX3Hyb2RZVGTJSJVTG4951bXN69
aS6SIdU8pFNTxr86ZqBeRdBnLki/mkbaDyv/GIUXy4NscQVsZ0yB0W65Cn/bWGZn
wHSq/0D60BrzMTlzgxHMT4H5kri+KWmdlhzWD1ArlccGRm+DXkfxt+tRtTXsi1L+
YeyJlGvlSVHbs/wWlHWWGGdTDbfmnP0t+V98gjVFBoS4Jz8TsgeGl8WRkH+NmKDk
oN0dn3iTl4BFM1NNbzk4gBDVEs2oTFaswl6W6jPn8FfXXy+NETZ/C23bY0JHEKeC
VMHK0OKop4NTiBmBRshMBDEFrianACY11jqjgkfKznrctZG0aWEFVAXQpQIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFPvZyjcm3pRu3vBLVwyyUmOTKc1dMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvMS05bktOeWJlbEc3ZThFdFhETEpTWTVNcHpWMC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEw
MS8xL08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBmQYIKwYBBQUHAQcBAf8EgYkwgYYwbgQCAAEwaDAMAwQH
TVqAAwQATVqCMAwDBAJNWoQDBABNWoYDBAFNWogDBABNWowwDAMEAU1ajgMEAE1a
kDAMAwQBTVqSAwQATVqUAwQATVqZAwQAueYOAwQA1dGBAwQA1dGKAwQA1dGXAwQA
1dGdMBQEAgACMA4DBQAqBCnCAwUAKgQpxzANBgkqhkiG9w0BAQsFAAOCAQEAnbg1
k/kYP1fu2gVfdfxNcaVr6vQbYI19/R/oAAyZaqd8RjChMSKhfvHHAfbZt3375evG
CZI4c4Ezent7638io28hZ8K54PjUl1D2Hb9yrD5mw+Snvs7jxWfyChxWG1yDNwER
9cUdfnpZK8+iIjabR8IUd9wqhjOFBn+CuQX5s2wxKSVn1yqxWC580NNXXVKwdqok
70OSTsfhs8SW2mjdLC+ePiRsFOmSUvp+gqsNNWvxAQIbBM6YWPFEToeICQ+3opJG
NPfcETLtBftIfv1PH7AhPcKUcYenIqEJ7UweORKtzWtKWK0NT2DHwd5MJWLbWuTI
3Vj3mTMypQcjhyPBnA==
-----END CERTIFICATE-----
Generated at Mon Aug 14 10:43:50 2023 by rpki-client on console-fra.rpki-client.org