Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/4P6jSiqJVhK9VeL6DM4Yo12ovhA.roa
File: 4P6jSiqJVhK9VeL6DM4Yo12ovhA.roa (raw, json)
Hash identifier: cXcSGvt39eBY0JeL40l1AyHEblm6hNlFKOu3bqQlnpY=
Subject key identifier: E0:FE:A3:4A:2A:89:56:12:BD:55:E2:FA:0C:CE:18:A3:5D:A8:BE:10
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01857C7294E00F056B8A05594BC9FDF9CAE8
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/4P6jSiqJVhK9VeL6DM4Yo12ovhA.roa
Signing time: Wed 04 Jan 2023 11:02:41 +0000
ROA not before: Wed 04 Jan 2023 11:02:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.156.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
77.90.184.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.151.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1280:24::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7c:72:94:e0:0f:05:6b:8a:05:59:4b:c9:fd:f9:ca:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 4 11:02:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0fea34a2a895612bd55e2fa0cce18a35da8be10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8b:75:9b:a7:cf:33:38:ce:2c:35:06:46:4f:
e4:f3:a3:77:54:ac:71:b4:27:d9:59:30:cf:c1:3f:
de:ff:ea:40:bc:6a:a5:3f:24:89:cd:91:b7:56:93:
17:13:e5:df:26:40:d2:7b:04:93:09:2f:29:74:6c:
76:23:96:af:50:0b:70:91:32:5b:a9:5b:f9:37:f2:
e1:a5:fe:fb:1e:2b:f4:93:4d:28:fd:af:be:11:9b:
10:bf:e3:ea:10:b0:4f:a2:bf:3e:fc:6b:1e:2a:53:
b1:87:ab:2f:74:ad:8e:90:66:ed:36:ca:7f:01:0d:
8d:3f:e5:a2:35:c2:3f:8e:03:4d:57:b3:77:7d:12:
e4:68:e6:84:d6:10:66:b7:1b:5c:a7:fb:ea:d2:1e:
57:12:99:24:7f:8e:aa:c5:ef:ec:a2:ee:2e:28:a4:
3c:90:7b:65:fb:e9:25:58:a0:2b:0d:bf:fb:9e:68:
12:25:28:f3:74:fe:cf:78:e9:53:0f:e1:83:32:f7:
df:2d:aa:d9:b2:b6:98:9d:a8:8b:be:ed:af:20:c0:
6f:d8:6b:56:ac:ac:b8:ec:2d:8f:cd:03:01:03:14:
0d:f2:87:84:d6:03:4d:bf:58:c7:25:ec:bc:45:4e:
08:d7:e7:d6:a4:07:ae:62:38:a4:e2:ca:aa:5a:7c:
14:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FE:A3:4A:2A:89:56:12:BD:55:E2:FA:0C:CE:18:A3:5D:A8:BE:10
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/4P6jSiqJVhK9VeL6DM4Yo12ovhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.153.0/24
77.90.156.0/24
77.90.184.0/23
77.90.188.0/24
185.230.14.0/23
213.209.129.0/24
213.209.136.0/24
213.209.138.0/24
213.209.143.0/24
213.209.145.0-213.209.146.255
213.209.149.0-213.209.151.255
213.209.156.0/23
213.209.159.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
60:56:07:1e:36:17:08:30:31:97:37:eb:9a:c9:13:5e:34:66:
e1:76:05:dd:86:75:6c:14:cf:19:1d:6f:99:52:9e:b2:c7:52:
0d:7b:1a:63:d6:e0:da:03:c1:fb:48:36:49:52:6c:66:8a:90:
ca:f1:1f:cc:68:da:af:0c:e0:29:3f:f0:b5:bd:96:b5:a5:cd:
1e:31:b3:56:33:fd:b1:56:ab:b8:e6:f3:a4:2c:54:16:38:62:
a6:78:7d:03:6e:69:42:0f:c6:f3:24:5a:c1:27:0a:45:0e:11:
11:34:8e:6e:39:53:62:ca:59:26:48:3c:8a:1f:6e:18:b6:61:
df:41:9c:9f:e4:f6:d1:10:6e:24:61:e3:21:88:bb:2a:ca:38:
9b:9e:07:7b:78:c2:33:45:a1:ea:0f:cd:0b:4d:51:d2:03:d6:
7e:51:1f:ea:78:a3:b1:55:4b:a3:b5:65:78:3d:0f:b8:a0:07:
2f:b0:b8:69:ed:40:6b:13:fe:0a:42:7e:93:b9:9c:42:1f:0e:
ff:0c:3f:ec:6a:d4:9c:4f:f3:c3:35:16:e7:75:7c:d6:ba:8e:
16:32:e9:ae:2e:f1:61:2c:c2:30:00:d0:74:d0:7f:98:34:bc:
da:6c:4e:92:af:67:b1:9e:e3:b9:a4:3f:bb:4c:26:57:10:95:
5c:1e:7e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:22 2023 by rpki-client on console-fra.rpki-client.org