Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/2EkLkPKjN6jdBkzv3XikkeI63dA.roa
File: 2EkLkPKjN6jdBkzv3XikkeI63dA.roa (raw, json)
Hash identifier: WsFkLFdqNkJ+4jpsjKbNzrRumcn2NPGxY8izoljXF38=
Subject key identifier: D8:49:0B:90:F2:A3:37:A8:DD:06:4C:EF:DD:78:A4:91:E2:3A:DD:D0
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0189E8E17C5D2AAB0548D0CFE6C45706A1DD
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/2EkLkPKjN6jdBkzv3XikkeI63dA.roa
Signing time: Sat 12 Aug 2023 08:33:58 +0000
ROA not before: Sat 12 Aug 2023 08:33:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 213.209.159.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e8:e1:7c:5d:2a:ab:05:48:d0:cf:e6:c4:57:06:a1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 12 08:33:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8490b90f2a337a8dd064cefdd78a491e23addd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7f:6a:57:fc:5e:2d:74:b9:38:e4:75:96:07:
4c:e8:55:93:23:ac:27:a2:e8:17:7e:e4:58:cf:fd:
cc:77:75:70:2d:cd:ce:d0:54:a7:16:f9:75:75:1a:
2e:82:e8:dd:2c:8b:57:d8:33:60:1d:26:7c:dc:e5:
17:d9:07:37:e5:6c:d2:72:e1:2a:3d:3c:af:f2:6d:
35:fa:b3:4b:0c:a8:9a:7e:d1:ae:81:88:e4:de:1e:
95:ff:84:e2:b6:0b:c6:44:75:59:7c:5a:9b:96:f1:
23:cb:be:50:de:4e:3b:c2:71:d9:6f:7a:cc:fd:2b:
90:f7:94:77:22:c3:0c:38:99:23:7c:5d:7d:9e:d6:
8f:62:3d:25:63:da:5f:9c:45:ed:74:78:61:f0:55:
c1:19:8a:47:04:03:24:ed:e7:d9:4a:6d:eb:38:0b:
45:08:63:95:53:68:c1:8e:22:8b:d9:d5:17:d7:02:
21:5d:c3:0d:a4:c2:07:7b:51:c5:29:e1:a8:c8:0f:
7b:55:7a:f0:9d:64:68:31:66:f0:8f:96:1b:4e:55:
67:cc:32:45:e2:ac:a3:3c:ec:21:41:30:34:57:fc:
15:7c:b6:1e:77:1c:87:56:8d:dc:96:d8:81:3a:f2:
32:51:85:36:b9:99:e5:eb:b8:f6:9c:3f:5a:96:26:
79:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:49:0B:90:F2:A3:37:A8:DD:06:4C:EF:DD:78:A4:91:E2:3A:DD:D0
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/2EkLkPKjN6jdBkzv3XikkeI63dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.138.0/24
213.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
88:39:44:a5:a9:41:92:68:51:52:76:ab:6c:ad:00:ec:a5:5e:
d0:7a:00:0b:e7:36:e5:5f:8b:46:e8:68:9e:f9:4f:8b:2d:bc:
ae:39:6a:96:fd:85:64:db:ca:63:d6:0a:02:16:85:f1:25:09:
17:0a:2e:a3:96:7c:ab:4e:e1:39:3f:8b:01:b0:08:f0:c6:76:
72:cd:d5:07:da:27:c8:20:8c:ef:fe:a5:c6:1e:88:a6:5a:4e:
82:54:6b:1f:69:f1:81:c7:0f:51:38:06:32:ed:ac:8e:09:d3:
d5:dd:bb:79:bb:6f:fd:c7:8b:7e:d5:d3:65:f8:77:7e:66:0b:
0a:da:98:f9:da:a0:b3:a7:dc:80:ff:6f:98:d0:1c:65:fc:38:
cc:6c:19:83:e1:b0:0e:f4:78:db:cc:7d:fd:fd:71:6c:52:a1:
3f:3f:f7:1f:a7:b8:21:8b:42:81:b6:fe:ea:c3:ea:38:ae:75:
cf:00:13:85:e6:c7:d4:66:4e:b9:5f:c1:60:b7:80:fd:2b:73:
b4:00:75:fb:a1:14:52:d0:66:5f:3b:c1:58:36:58:31:df:e6:
4f:20:56:35:52:7f:08:d0:db:eb:ce:a2:ff:66:57:17:74:91:
9e:1c:1c:29:8b:b2:df:bb:16:7e:cf:da:b8:c6:95:b0:71:6a:
c7:c0:71:a4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYno4XxdKqsFSNDP5sRXBqHdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjMwODEyMDgzMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODQ5MGI5MGYyYTMzN2E4ZGQwNjRjZWZkZDc4YTQ5MWUyM2FkZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX9qV/xeLXS5OOR1lgdM6FWTI6wn
ougXfuRYz/3Md3VwLc3O0FSnFvl1dRougujdLItX2DNgHSZ83OUX2Qc35WzScuEq
PTyv8m01+rNLDKiaftGugYjk3h6V/4TitgvGRHVZfFqblvEjy75Q3k47wnHZb3rM
/SuQ95R3IsMMOJkjfF19ntaPYj0lY9pfnEXtdHhh8FXBGYpHBAMk7efZSm3rOAtF
CGOVU2jBjiKL2dUX1wIhXcMNpMIHe1HFKeGoyA97VXrwnWRoMWbwj5YbTlVnzDJF
4qyjPOwhQTA0V/wVfLYedxyHVo3cltiBOvIyUYU2uZnl67j2nD9aliZ55wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNhJC5Dyozeo3QZM7914pJHiOt3QMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvMkVrTGtQS2pONmpkQmt6djNYaWtrZUk2M2RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVqKAwQA
1dGfMA0GCSqGSIb3DQEBCwUAA4IBAQCIOUSlqUGSaFFSdqtsrQDspV7QegAL5zbl
X4tG6Gie+U+LLbyuOWqW/YVk28pj1goCFoXxJQkXCi6jlnyrTuE5P4sBsAjwxnZy
zdUH2ifIIIzv/qXGHoimWk6CVGsfafGBxw9ROAYy7ayOCdPV3bt5u2/9x4t+1dNl
+Hd+ZgsK2pj52qCzp9yA/2+Y0Bxl/DjMbBmD4bAO9HjbzH39/XFsUqE/P/cfp7gh
i0KBtv7qw+o4rnXPABOF5sfUZk65X8Fgt4D9K3O0AHX7oRRS0GZfO8FYNlgx3+ZP
IFY1Un8I0NvrzqL/ZlcXdJGeHBwpi7LfuxZ+z9q4xpWwcWrHwHGk
-----END CERTIFICATE-----
Generated at Mon Aug 21 20:10:39 2023 by rpki-client on console-fra.rpki-client.org