Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/96h7PqU8raoKkxrkdEKN21rTOvU.roa
File: 96h7PqU8raoKkxrkdEKN21rTOvU.roa (raw, json)
Hash identifier: Smu8Li8SvlYxiY+6Q94KxgYym/fqEAtk6ZPMppADRjM=
Subject key identifier: F7:A8:7B:3E:A5:3C:AD:AA:0A:93:1A:E4:74:42:8D:DB:5A:D3:3A:F5
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0194B2AF16793E508B67673651F40573662D
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/96h7PqU8raoKkxrkdEKN21rTOvU.roa
Signing time: Wed 29 Jan 2025 15:30:06 +0000
ROA not before: Wed 29 Jan 2025 15:30:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.128.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.139.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 13 Feb 2025 13:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:af:16:79:3e:50:8b:67:67:36:51:f4:05:73:66:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 29 15:30:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7a87b3ea53cadaa0a931ae474428ddb5ad33af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7e:54:b5:a2:07:55:c7:f8:fa:5c:bf:51:cd:
b1:9e:92:b0:93:b9:72:14:29:cc:10:a8:a3:c9:5a:
3a:a4:45:7e:ba:59:f1:bc:57:c3:54:35:d2:b2:a9:
9d:8e:95:36:d2:d7:20:4d:e5:c1:95:e9:18:2a:54:
46:f1:59:c0:08:04:b1:6a:c0:8f:c8:e5:e0:84:1f:
34:da:d9:73:ba:9d:22:8c:f0:56:d8:a9:90:1d:62:
ad:9f:78:40:c3:09:93:4a:1a:41:00:9a:c4:18:4f:
de:cf:97:42:17:fa:07:8e:f7:dd:51:0f:60:35:3e:
e9:b3:90:13:3e:65:7a:79:a6:ae:2d:4c:79:95:18:
b0:8f:e8:ef:59:8c:91:f1:d3:1e:e7:bd:2f:68:58:
a4:a4:5b:da:c8:72:f2:3a:c5:dc:6d:9a:af:fa:b6:
11:8a:ba:ef:9e:69:44:97:52:ca:4b:1c:c6:c3:d7:
35:57:81:3c:be:f9:45:9e:54:1f:ac:21:28:1c:3a:
d9:9d:05:41:2b:ba:2c:e7:1c:0f:7c:fc:58:63:e6:
90:74:bc:54:85:60:dd:74:8e:28:cc:6c:ed:24:94:
05:03:2d:d0:35:97:68:98:ee:6e:69:e8:f5:0a:c9:
90:79:8a:8b:b8:b7:1b:ed:e5:b1:e4:c5:6a:07:a2:
e7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A8:7B:3E:A5:3C:AD:AA:0A:93:1A:E4:74:42:8D:DB:5A:D3:3A:F5
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/96h7PqU8raoKkxrkdEKN21rTOvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.139.0-77.90.140.255
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.153.0/24
213.209.129.0/24
213.209.138.0/24
213.209.143.0/24
213.209.150.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
b5:9b:e0:f4:ea:70:50:9e:e5:02:ae:24:af:aa:93:f6:41:0b:
21:67:8a:f8:c6:1e:c8:52:26:66:64:61:a0:65:ee:e7:79:1f:
bc:49:2e:cf:cc:74:39:99:ea:9d:c4:dd:f5:67:d9:97:02:db:
a9:1d:c7:38:a2:16:59:61:12:34:37:99:dd:95:12:ed:06:60:
6f:40:fc:33:02:18:d0:ac:29:d3:ac:20:cb:84:ad:ac:f4:31:
50:0c:60:02:f3:b0:42:60:ff:6a:1f:e3:5e:02:ee:c3:9f:47:
07:6c:b4:11:68:92:1f:68:ad:00:e3:f0:d3:c4:8c:37:31:b7:
c9:dc:08:f0:73:cb:75:bf:8d:fe:3d:09:ca:f8:ce:b6:e2:7f:
1a:9a:e4:e7:4c:31:a3:9f:af:ea:0d:25:ce:f1:8c:73:5c:77:
90:4b:e4:2a:a5:82:e5:38:2d:ac:49:cc:c4:fd:6b:d4:a1:9f:
de:8c:66:93:aa:1a:4e:6d:88:09:b3:c0:14:4f:21:1e:e7:f5:
32:0a:15:f4:7d:4a:d2:86:df:29:f2:33:31:6d:3d:d2:8f:c9:
ce:71:fe:85:8c:55:8c:59:99:ac:08:73:9d:d2:ee:92:4d:ce:
22:ed:07:4d:d7:ab:86:ea:95:4e:c4:f6:ad:98:9f:9a:98:f6:
26:77:36:1e
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgISAZSyrxZ5PlCLZ2c2UfQFc2YtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjUwMTI5MTUzMDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2E4N2IzZWE1M2NhZGFhMGE5MzFhZTQ3NDQyOGRkYjVhZDMzYWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu35UtaIHVcf4+ly/Uc2xnpKwk7ly
FCnMEKijyVo6pEV+ulnxvFfDVDXSsqmdjpU20tcgTeXBlekYKlRG8VnACASxasCP
yOXghB802tlzup0ijPBW2KmQHWKtn3hAwwmTShpBAJrEGE/ez5dCF/oHjvfdUQ9g
NT7ps5ATPmV6eaauLUx5lRiwj+jvWYyR8dMe570vaFikpFvayHLyOsXcbZqv+rYR
irrvnmlEl1LKSxzGw9c1V4E8vvlFnlQfrCEoHDrZnQVBK7os5xwPfPxYY+aQdLxU
hWDddI4ozGztJJQFAy3QNZdomO5uaej1CsmQeYqLuLcb7eWx5MVqB6Ln/QIDAQAB
o4IChjCCAoIwHQYDVR0OBBYEFPeoez6lPK2qCpMa5HRCjdta0zr1MB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvOTZoN1BxVThyYW9La3hya2RFS04yMXJUT3ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGbBggrBgEFBQcBBwEB/wSBizCBiDBwBAIAATBqMAwDBAdN
WoADBABNWoIwDAMEAk1ahAMEAE1ahgMEAU1aiDAMAwQATVqLAwQATVqMMAwDBAFN
Wo4DBABNWpAwDAMEAU1akgMEAE1alAMEAE1amQMEANXRgQMEANXRigMEANXRjwME
ANXRljAUBAIAAjAOAwUAKgQpwgMFACoEKccwDQYJKoZIhvcNAQELBQADggEBALWb
4PTqcFCe5QKuJK+qk/ZBCyFnivjGHshSJmZkYaBl7ud5H7xJLs/MdDmZ6p3E3fVn
2ZcC26kdxziiFllhEjQ3md2VEu0GYG9A/DMCGNCsKdOsIMuEraz0MVAMYALzsEJg
/2of414C7sOfRwdstBFokh9orQDj8NPEjDcxt8ncCPBzy3W/jf49Ccr4zrbifxqa
5OdMMaOfr+oNJc7xjHNcd5BL5CqlguU4LaxJzMT9a9Shn96MZpOqGk5tiAmzwBRP
IR7n9TIKFfR9StKG3ynyMzFtPdKPyc5x/oWMVYxZmawIc53S7pJNziLtB03Xq4bq
lU7E9q2Yn5qY9iZ3Nh4=
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:47:42 2025 by rpki-client