Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/4SnSNFQ4rTGVcNeBklNnR-Qg4jI.roa
File: 4SnSNFQ4rTGVcNeBklNnR-Qg4jI.roa (raw, json)
Hash identifier: eRNG8GXmUCU1dSGAHw7yU/I+tka9CKlvikDFC16WjzI=
Subject key identifier: E1:29:D2:34:54:38:AD:31:95:70:D7:81:92:53:67:47:E4:20:E2:32
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01897384239280124A4E4637CACE9BD6FCD8
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/4SnSNFQ4rTGVcNeBklNnR-Qg4jI.roa
Signing time: Thu 20 Jul 2023 13:36:26 +0000
ROA not before: Thu 20 Jul 2023 13:36:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207084
IP address blocks: 213.209.145.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:73:84:23:92:80:12:4a:4e:46:37:ca:ce:9b:d6:fc:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 20 13:36:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e129d2345438ad319570d78192536747e420e232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c1:b9:d9:65:cd:16:05:bc:4f:41:52:51:ae:
5b:56:dd:a8:a8:1d:01:3a:7a:d5:19:0e:a8:80:59:
cd:38:a9:9f:57:8b:c3:4d:c9:1f:f7:9f:37:5b:6a:
85:61:d1:cb:a0:88:c4:3d:8f:ac:5f:e4:b2:9b:5a:
48:7c:fa:b0:7d:ec:b9:6b:78:5d:63:31:3f:1f:4b:
4a:96:4a:08:60:53:7c:d8:3d:8b:ef:cd:d7:f4:f8:
e7:67:bf:17:26:ae:46:52:46:d7:04:e6:55:30:50:
8d:c0:fa:b2:90:ab:ad:9c:a9:27:b8:15:d0:68:fe:
c4:4c:0a:a8:db:74:1e:16:6d:67:ef:19:fa:30:22:
69:ad:55:cc:30:35:12:54:ca:1b:f1:bd:cb:b0:f0:
60:55:cd:8c:5a:b8:39:b6:5a:50:a9:de:29:13:c5:
3c:56:9a:6e:ac:3d:4f:59:fc:97:82:58:23:fe:83:
8a:6d:e1:cc:2a:d4:08:44:84:33:3b:df:11:6a:20:
3f:21:1f:92:bc:6c:62:df:6b:57:cd:f7:35:fa:3e:
8d:48:13:86:db:38:0f:2d:12:96:d7:ce:5d:32:c8:
f6:57:93:a4:d6:ca:7a:be:7f:6a:22:5a:6d:b3:fd:
19:15:bd:4e:ab:03:2c:39:24:b4:a9:45:f7:0e:4d:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:29:D2:34:54:38:AD:31:95:70:D7:81:92:53:67:47:E4:20:E2:32
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/4SnSNFQ4rTGVcNeBklNnR-Qg4jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.153.0/24
213.209.145.0/24
Signature Algorithm: sha256WithRSAEncryption
33:95:4f:c8:37:da:bc:16:80:33:99:fd:69:c5:6c:39:36:c4:
3b:70:f8:e3:3f:c6:98:b4:a7:92:47:01:fb:26:86:f0:36:c8:
08:62:4f:01:97:e6:5f:ee:2d:de:0b:ef:12:f2:3e:37:7d:e6:
7a:df:e9:c8:be:73:a5:7b:d1:45:05:28:80:07:93:8e:5c:42:
0f:99:8a:6e:6f:a3:3d:49:a2:2e:49:52:f0:93:38:8c:23:ae:
d6:bd:35:9d:b7:14:54:23:2c:06:82:b6:f1:7a:79:25:c7:d4:
26:71:e9:05:d1:26:e0:72:59:ff:76:c3:c5:34:96:74:49:5f:
bd:e1:72:5c:41:ac:c9:75:29:a0:b4:42:bf:a0:32:73:48:c6:
30:b5:07:28:b0:98:a3:fe:6b:75:c0:dd:dd:b4:2f:da:86:28:
0f:eb:1b:a5:5b:5f:96:59:a3:a7:44:7a:96:a1:ba:ad:db:e7:
03:1a:b1:50:e2:1a:f7:0e:71:7f:8a:4d:35:be:b9:cc:a8:69:
01:37:bd:cf:7b:bd:9f:1c:31:bb:3e:a7:e6:3c:8c:2e:1e:56:
9e:a8:e3:4f:ae:2c:71:49:c2:d1:22:a4:a7:61:98:1c:e9:e4:
20:e8:79:ca:0f:49:15:68:0e:42:30:99:4f:c2:5f:ac:0f:10:
8c:d1:b3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 14:24:47 2023 by rpki-client on console-fra.rpki-client.org