Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/5b75FFTjmzxbXpTkvFylMRzLRJM.roa
File: 5b75FFTjmzxbXpTkvFylMRzLRJM.roa (raw, json)
Hash identifier: cMcn6PeKZGvGyu4OB/6jIFGNjt9d4HAncMtWS8VaIYs=
Subject key identifier: E5:BE:F9:14:54:E3:9B:3C:5B:5E:94:E4:BC:5C:A5:31:1C:CB:44:93
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018B61446E076195FDF21F98E702097EABB3
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/5b75FFTjmzxbXpTkvFylMRzLRJM.roa
Signing time: Tue 24 Oct 2023 10:39:16 +0000
ROA not before: Tue 24 Oct 2023 10:39:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:44:6e:07:61:95:fd:f2:1f:98:e7:02:09:7e:ab:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 24 10:39:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5bef91454e39b3c5b5e94e4bc5ca5311ccb4493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ef:cb:d2:87:d1:8b:2b:ae:96:d6:16:18:ea:
68:58:9c:40:fe:07:d5:89:8e:51:a3:57:fc:88:d4:
71:52:e9:9d:26:da:af:05:87:ec:b0:50:57:dc:59:
af:a0:16:5e:95:18:41:01:da:10:10:16:1f:fe:b4:
25:e9:31:e0:3e:7a:6e:fa:5c:d7:0b:c8:15:50:c9:
8f:94:48:92:2d:a6:79:01:f0:be:05:90:47:9a:3f:
48:94:34:e1:1d:0a:5c:c7:be:05:f4:b7:0a:09:d6:
8c:10:70:95:29:06:63:82:4f:7d:27:02:43:b1:e9:
ee:c0:68:e9:3d:d9:e1:44:88:42:6f:f6:64:77:6a:
73:49:ce:ad:00:23:c1:63:8e:67:fd:f6:23:c5:0a:
ac:9a:77:75:8f:61:5f:82:f6:cf:49:21:cb:28:82:
3f:16:52:3f:cb:b5:bf:50:f3:c5:7a:6d:a8:8b:ab:
8d:e1:f2:02:01:32:00:c4:83:c4:d4:29:29:25:0a:
f7:80:c1:d7:d7:05:ec:9b:9b:21:b5:3a:f2:15:ca:
c8:ed:12:bb:81:93:6d:c8:79:f9:fb:58:1e:24:9e:
84:f1:4b:0c:b7:1b:2c:11:04:cd:fd:2e:78:e3:6b:
67:10:16:9f:00:4a:5f:27:41:58:9f:61:e8:cc:59:
19:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BE:F9:14:54:E3:9B:3C:5B:5E:94:E4:BC:5C:A5:31:1C:CB:44:93
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/5b75FFTjmzxbXpTkvFylMRzLRJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.140.0/24
77.90.142.0-77.90.148.255
185.230.14.0/24
213.209.138.0/24
213.209.145.0-213.209.146.255
213.209.150.0/24
213.209.157.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
04:1b:82:7d:ba:c5:93:4a:b3:54:fa:f0:29:93:d7:2d:92:23:
20:b5:c9:c8:04:bd:02:f6:0b:2f:75:15:f0:db:d2:cd:01:ae:
84:f5:83:ab:dd:c6:b8:2d:8f:90:a1:32:51:cd:4d:6b:0b:9d:
27:45:04:09:e4:0b:28:12:98:84:00:a1:42:8a:1b:2c:2a:06:
76:96:0d:47:65:d6:4d:70:20:63:49:cd:af:b8:f6:80:ac:af:
65:fd:89:f5:3d:3d:ee:90:d1:1d:94:1d:9a:88:25:aa:f7:74:
fd:1f:1e:59:2b:2c:ce:a4:94:30:b8:66:f9:18:8c:13:77:9d:
13:4e:4c:6b:be:ff:f7:1f:11:8f:aa:3d:53:c2:7f:a8:19:50:
a6:cb:a0:06:23:71:cb:cb:c3:ee:5f:6b:1b:fc:70:68:ab:01:
d8:29:ac:14:d1:44:0d:10:7c:46:1f:55:0e:ef:93:1b:0a:5b:
d1:a2:d7:15:fe:cf:77:6e:6a:6b:95:bf:1c:85:f3:85:87:5e:
32:f2:b8:aa:fd:b5:47:1e:75:30:13:27:8c:b3:24:5a:d8:34:
97:6d:43:3e:5f:25:53:1d:db:09:69:aa:52:1d:81:58:22:60:
b3:6f:d7:c7:db:0a:52:2f:88:3d:0e:ab:06:78:69:5a:75:bf:
06:b7:f3:88
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Oct 25 14:32:45 2023 by rpki-client on console-fra.rpki-client.org