Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/5W5CE-a8XpxYlQnWR5o1sWvjBr4.roa
File: 5W5CE-a8XpxYlQnWR5o1sWvjBr4.roa (raw, json)
Hash identifier: 4ypPG4nWI20XtY+fPkPwmt/xpcRvrDJFoJlKwOVyqQ0=
Subject key identifier: E5:6E:42:13:E6:BC:5E:9C:58:95:09:D6:47:9A:35:B1:6B:E3:06:BE
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018CF851359661EBEDED5C53FBA68773B6C5
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/5W5CE-a8XpxYlQnWR5o1sWvjBr4.roa
Signing time: Thu 11 Jan 2024 11:38:40 +0000
ROA not before: Thu 11 Jan 2024 11:38:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
Validation: Failed, certificate revoked on Sun 14 Jan 2024 16:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:51:35:96:61:eb:ed:ed:5c:53:fb:a6:87:73:b6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 11 11:38:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e56e4213e6bc5e9c589509d6479a35b16be306be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1e:0e:5a:c8:f0:80:b1:d2:55:83:15:cf:e9:
e3:7f:a3:6f:00:ab:bf:0e:92:53:02:4f:8e:38:bf:
08:b5:c0:39:2b:2c:34:5c:51:21:a5:1c:0b:99:5a:
3e:be:27:ca:41:f0:fb:c1:dc:df:7d:da:37:31:00:
e4:f6:f7:94:62:22:cf:a6:17:22:de:21:0a:d8:2a:
a3:0c:63:fc:56:39:a6:62:a1:b4:01:ea:58:57:c8:
fe:7a:51:8b:87:e0:e5:cc:0e:89:1e:e3:bc:e7:14:
9c:48:d0:29:74:2c:3c:8b:26:26:48:36:ac:68:fe:
38:b6:b4:97:34:eb:3c:41:3f:ac:89:50:c9:7c:ed:
c7:f4:0b:41:8b:7e:31:37:1f:c1:b7:8b:f1:b9:21:
79:cb:30:31:6c:8d:43:64:b0:a4:2f:6f:5c:9e:53:
ba:1f:b2:fb:c1:b2:2b:60:ac:cb:98:a3:dc:0c:ec:
84:7d:f9:2e:4e:f8:66:2b:f2:79:6f:ed:c7:c1:ec:
a4:aa:86:a4:dc:26:26:7d:89:e4:11:ee:e5:5f:43:
69:06:42:2c:60:b9:24:d6:cd:1d:f6:87:83:c7:24:
09:4f:9a:29:6b:89:d9:11:38:0e:64:c4:08:34:93:
04:e5:46:a0:6f:82:33:e0:96:b5:65:17:f1:f2:60:
db:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6E:42:13:E6:BC:5E:9C:58:95:09:D6:47:9A:35:B1:6B:E3:06:BE
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/5W5CE-a8XpxYlQnWR5o1sWvjBr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.153.0-77.90.154.255
77.90.188.0/24
185.230.13.0/24
213.209.129.0/24
213.209.138.0/24
213.209.145.0-213.209.146.255
213.209.150.0/24
213.209.157.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
b5:18:94:32:8c:af:c0:39:ae:ef:82:f0:76:ab:d3:09:03:ff:
ce:14:0f:c8:18:e3:40:47:a2:30:65:1f:60:6f:05:70:4a:32:
64:e4:20:67:46:23:38:85:5d:40:ff:4b:e7:09:c9:4c:bf:74:
1f:1a:96:0c:70:f7:3d:0d:7f:61:41:19:d6:3b:31:d3:8d:06:
9e:74:8a:34:95:5b:81:4a:11:d5:73:65:3a:45:c8:fe:0a:86:
62:d1:13:70:ea:93:9d:df:97:b8:16:fe:64:df:50:6a:8c:53:
99:ae:6d:0f:41:8e:a0:df:8b:e2:bd:de:26:5e:25:ee:ef:35:
d9:a6:80:0b:03:86:f6:b5:a5:e6:aa:54:e0:cb:81:ee:de:a6:
6f:75:5a:41:2a:bd:83:e0:17:1c:2e:ad:3a:35:b0:30:a8:47:
8b:0f:09:9d:d5:8f:a7:1f:a5:fb:f1:c7:7c:65:95:75:06:ae:
f8:e2:18:9f:39:62:aa:78:c6:d2:b6:41:23:c9:92:27:0a:18:
dd:e5:48:9e:13:64:20:75:10:55:bf:3e:fd:8b:60:b6:fb:2c:
f4:9a:ea:9a:c6:db:88:49:e7:27:28:41:88:ae:94:5f:56:3f:
1d:46:4d:f5:3a:1c:e7:07:00:87:dc:01:e6:65:68:78:53:92:
c0:6d:bb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 14 17:31:00 2024 by rpki-client on console-fra.rpki-client.org