Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1wUbDN7dcBhlJ5Kz-pI9kXWP9r4.roa
File: 1wUbDN7dcBhlJ5Kz-pI9kXWP9r4.roa (raw, json)
Hash identifier: FFNEfCwSm8Bj1Kg7zRXZN3GsGg0wYClQ1Gh/cDRQdks=
Subject key identifier: D7:05:1B:0C:DE:DD:70:18:65:27:92:B3:FA:92:3D:91:75:8F:F6:BE
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0194234B35DCB0F5F0CD371474FFF6DA6D44
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1wUbDN7dcBhlJ5Kz-pI9kXWP9r4.roa
Signing time: Wed 01 Jan 2025 19:15:18 +0000
ROA not before: Wed 01 Jan 2025 19:15:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.128.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.139.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.164.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:4b:35:dc:b0:f5:f0:cd:37:14:74:ff:f6:da:6d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 1 19:15:18 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7051b0cdedd7018652792b3fa923d91758ff6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:fb:3e:b9:5e:bc:58:91:95:21:8d:c3:39:
2f:69:01:cc:f3:12:c7:ef:62:55:fa:56:7e:a4:ff:
49:d4:f9:39:36:2f:14:7c:04:f0:0c:ca:82:83:67:
22:4e:f3:3b:a1:6a:19:49:00:38:19:7f:c6:d7:18:
35:f7:ce:06:5c:f6:e0:a5:d1:c4:06:30:08:be:52:
1a:a8:5f:25:2d:b9:cc:43:a2:7f:e9:11:72:09:ed:
fe:a5:53:d1:17:03:ae:b8:33:01:de:f8:bc:b3:0b:
91:ed:73:ae:38:26:bc:04:39:87:a4:fe:45:64:42:
0c:d1:f7:c1:14:fb:26:a2:6b:53:5f:70:33:8f:84:
bc:61:f0:df:dc:a1:62:5c:de:91:43:a3:84:9f:e9:
f7:51:2b:8c:78:e6:4f:71:b9:26:4b:4c:eb:16:00:
c3:6f:a6:3d:bf:50:06:79:77:c5:c4:ad:8e:ba:7c:
86:17:af:32:e0:55:25:55:6c:e8:46:09:c1:78:28:
8f:fd:91:6b:77:05:b8:c7:bc:ec:68:d2:d5:ec:b8:
eb:79:94:e9:bf:cf:a3:1c:5c:58:df:25:84:a4:6e:
79:9c:90:c7:3a:58:59:71:ad:79:d2:f6:78:d6:93:
c4:ad:6a:84:ea:e5:7e:d6:a0:56:1e:99:df:7f:8e:
eb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:05:1B:0C:DE:DD:70:18:65:27:92:B3:FA:92:3D:91:75:8F:F6:BE
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/1wUbDN7dcBhlJ5Kz-pI9kXWP9r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.139.0-77.90.140.255
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.153.0/24
77.90.164.0/24
213.209.129.0/24
213.209.138.0/24
213.209.143.0/24
213.209.150.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
6d:4b:34:a9:9b:f9:1d:10:a7:92:ff:a4:07:2f:0b:b0:98:40:
f4:44:13:3f:85:73:0e:94:e0:50:b5:76:f9:f1:b3:de:4d:a5:
10:4e:d6:33:0b:2a:0e:19:67:7a:e4:48:eb:5d:1b:b8:e9:e1:
74:e1:56:09:89:49:16:64:9c:bc:15:e8:ad:04:ab:64:c2:63:
1c:bd:29:80:6f:4a:dc:4c:91:b7:5c:9f:68:91:cd:0b:3e:18:
eb:f1:fd:40:ea:bd:b6:d0:ff:bb:f2:f1:2a:aa:33:84:dd:d9:
6a:24:12:91:44:d7:88:ce:a7:3e:4c:c5:9b:79:d5:f9:28:61:
71:61:9d:36:4a:f5:dd:cb:30:4f:e2:71:6d:97:5c:1e:11:2a:
a2:54:f6:48:8d:7c:da:0a:18:3c:14:30:60:1b:5c:7a:86:42:
67:fb:01:69:ce:5f:36:db:db:9e:9a:36:0d:77:37:1c:3f:4a:
61:51:50:b4:b0:89:e9:30:60:81:04:a8:da:a5:52:e2:1e:9d:
be:23:6c:16:3b:e8:ec:bc:20:37:05:2d:de:07:68:f8:79:72:
33:31:87:1b:ee:bc:37:22:9b:da:d7:21:ab:4c:15:e4:84:b0:
47:a3:26:a6:80:f1:41:4f:30:16:f7:22:18:f4:e5:7e:16:cf:
98:4a:7e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:56:55 2025 by rpki-client