Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-GLN3awGD8C4P04oOmhUB-dr6Zs.roa
File: 1-GLN3awGD8C4P04oOmhUB-dr6Zs.roa (raw, json)
Hash identifier: 3l1wY9TzdNjbDoTxtrARtXG9T4KKP5ingTpdty4N7MU=
Subject key identifier: F8:62:CD:DD:AC:06:0F:C0:B8:3F:4E:28:3A:68:54:07:E7:6B:E9:9B
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01857A348A1154583507C3FACDD6C44B85A0
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-GLN3awGD8C4P04oOmhUB-dr6Zs.roa
Signing time: Wed 04 Jan 2023 00:35:41 +0000
ROA not before: Wed 04 Jan 2023 00:35:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.151.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.156.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
77.90.184.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.151.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1280:24::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7a:34:8a:11:54:58:35:07:c3:fa:cd:d6:c4:4b:85:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 4 00:35:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f862cdddac060fc0b83f4e283a685407e76be99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:18:b5:ca:01:54:c9:97:59:bd:5e:f3:dd:11:
cb:0e:ce:aa:d1:f1:13:b4:3c:69:12:28:91:99:23:
40:e1:01:e0:ed:d5:e1:d0:41:9f:4d:fb:f2:aa:a4:
57:7d:32:4b:41:78:18:10:f3:d6:dc:27:92:77:c0:
97:b4:16:46:6d:00:12:bb:6e:18:33:d2:b0:5f:54:
6d:54:37:37:3f:97:19:02:95:df:46:37:36:51:a2:
a8:e6:01:d1:65:57:e4:e2:c9:d9:f2:f8:3f:49:3f:
36:4c:ca:62:40:68:f2:ad:c6:df:2e:30:37:55:57:
6b:95:8c:b4:eb:20:f4:e9:b8:5d:28:2b:83:33:dc:
58:3d:63:45:f1:a1:51:0e:0c:d2:78:7b:9d:ec:4b:
54:89:16:fd:49:ee:2d:3e:d5:0e:d3:0d:7e:6a:4d:
77:bb:77:83:33:25:9f:31:e6:08:b8:a0:7b:d1:32:
e9:95:24:67:c5:08:6e:5e:b5:0c:a8:45:68:b8:de:
57:83:ee:a0:24:f6:9a:0e:d7:cc:39:4f:b5:74:d9:
66:9c:97:c2:c1:72:fe:56:c4:5e:10:a7:97:aa:b7:
47:ab:2a:d0:5a:e1:a5:93:bc:7b:8f:2b:9a:4a:62:
41:37:0e:03:9d:44:a8:78:ab:c7:6b:77:b8:7d:13:
7d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:62:CD:DD:AC:06:0F:C0:B8:3F:4E:28:3A:68:54:07:E7:6B:E9:9B
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1-GLN3awGD8C4P04oOmhUB-dr6Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.151.0/24
77.90.153.0/24
77.90.156.0/24
77.90.184.0/23
77.90.188.0/24
185.230.14.0/23
213.209.129.0/24
213.209.136.0/24
213.209.138.0/24
213.209.143.0/24
213.209.145.0-213.209.146.255
213.209.149.0-213.209.151.255
213.209.156.0/23
213.209.159.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
ae:2e:5b:4b:b7:b4:ab:64:98:13:62:da:6e:05:c4:1d:d6:a5:
d3:13:23:74:77:e1:f9:9c:23:26:b7:99:87:81:61:dc:e2:f3:
11:6e:46:26:a9:5f:c7:cd:ca:d9:39:4d:af:3c:4d:81:d6:d2:
cd:c6:a6:25:70:9e:f1:ff:48:4c:49:06:71:ae:95:cd:af:98:
1f:09:0b:bf:b0:a6:95:81:82:55:0e:71:f2:94:11:dd:37:ce:
b0:b3:8c:58:52:9c:eb:f5:40:c3:a1:f0:aa:78:be:92:aa:fd:
52:e8:0d:39:ef:87:c3:12:f9:c7:b6:fa:37:36:f1:62:9a:98:
cf:e2:17:aa:52:6c:54:42:d1:0c:5b:34:10:d5:1f:a8:ef:dc:
26:c8:29:66:33:27:56:a1:37:8d:ae:98:ce:82:ca:ec:f9:fc:
91:f0:81:9e:ff:45:7e:15:b0:32:6b:49:fa:45:ea:27:7c:b6:
49:21:23:41:03:ce:db:ed:37:39:40:f6:08:76:9d:c3:3b:79:
be:d5:84:f0:c8:7f:56:f0:f2:d6:cb:6d:16:42:30:47:c5:11:
36:95:0b:a7:af:c4:c3:f7:29:1a:e4:2a:5c:12:7c:57:b1:e4:
36:ca:94:62:9f:73:4b:0b:54:90:05:1f:43:e5:0c:77:d1:bb:
46:e6:35:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org