Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/DKwk4SeQHN1ss1AMQXQyzjEETsU.roa
File: DKwk4SeQHN1ss1AMQXQyzjEETsU.roa (raw, json)
Hash identifier: QOzAkGA7dkBoB/hL3xyH1RGLV9XmHHkppL0+kUVDOSI=
Subject key identifier: 0C:AC:24:E1:27:90:1C:DD:6C:B3:50:0C:41:74:32:CE:31:04:4E:C5
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0187D6C84953D6D3563B1503F4A3F04374E3
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/DKwk4SeQHN1ss1AMQXQyzjEETsU.roa
Signing time: Mon 01 May 2023 10:07:42 +0000
ROA not before: Mon 01 May 2023 10:07:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.178.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1280:24::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d6:c8:49:53:d6:d3:56:3b:15:03:f4:a3:f0:43:74:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: May 1 10:07:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cac24e127901cdd6cb3500c417432ce31044ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ff:e5:e9:63:18:93:a8:63:40:e8:90:35:2e:
9c:04:9b:47:e4:8f:70:ca:69:96:c7:eb:6b:3e:c6:
c3:9a:38:18:17:a0:a5:6e:aa:bb:67:ab:b4:7b:35:
31:74:f3:3d:1b:70:b7:41:14:a1:16:47:ca:52:4d:
2b:95:85:53:d7:82:ea:1d:85:e0:eb:77:01:10:3f:
fa:ea:90:40:ce:cf:9d:ea:e8:e8:4b:c4:69:eb:e1:
a2:ec:67:c7:c4:9d:83:c9:26:bc:64:a9:34:22:3d:
14:27:59:55:b6:f8:06:68:32:06:3c:9a:c5:96:09:
91:29:9d:e4:c8:b5:8d:43:59:01:3d:d8:ec:b2:4e:
a7:ea:12:a0:4c:64:83:58:b5:c6:0b:af:10:41:81:
38:57:30:53:c6:cb:95:ef:a8:a3:d8:10:c1:78:5a:
3d:f5:d1:82:e7:3e:b3:fe:17:17:0e:a8:7d:5d:c3:
36:02:a5:1d:c0:25:ad:ca:07:47:dc:4a:2f:6e:1a:
f3:73:0b:4a:af:54:29:f5:88:5f:72:70:76:ca:e1:
e8:db:ec:b2:36:47:36:e8:fd:ac:67:df:eb:0b:a3:
30:3d:01:59:a2:05:47:eb:08:42:d2:b6:7e:30:72:
73:2d:bb:2e:94:26:83:ab:66:b8:ae:80:d7:1f:23:
3c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AC:24:E1:27:90:1C:DD:6C:B3:50:0C:41:74:32:CE:31:04:4E:C5
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/DKwk4SeQHN1ss1AMQXQyzjEETsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.178.0/24
213.209.130.0/24
213.209.138.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
78:1e:92:c3:2c:02:40:f1:4d:83:c1:ea:4b:0b:84:02:f4:17:
87:ee:80:94:38:16:d2:23:e3:55:c3:40:59:8e:e3:62:6d:76:
20:1e:f3:74:98:7e:1d:a6:0d:56:55:73:c0:80:9c:48:c5:ff:
76:62:e7:27:6c:50:eb:3a:69:20:af:27:ec:05:29:fb:2f:37:
b6:69:ce:a5:2a:1e:be:db:11:e3:b1:6f:43:97:23:53:49:38:
2c:54:87:b3:f0:76:a0:c0:5d:ab:b5:17:c9:14:47:4b:08:55:
48:6b:33:1b:18:19:09:58:d9:11:80:1c:79:8e:2c:da:eb:a8:
5d:7a:1b:43:83:b6:23:04:c9:0f:c0:30:0c:fd:d9:14:f1:70:
a4:72:2b:f0:5c:93:b0:1e:f6:7d:ca:5c:d3:9b:71:01:59:51:
24:35:26:81:ea:78:0f:d4:91:a4:5e:b5:4d:4f:d1:da:40:4b:
32:5a:32:60:4a:de:7a:4e:2a:93:1b:82:00:e0:f3:47:41:03:
47:7e:7b:99:07:06:ff:b6:8d:b0:ab:43:4e:b2:62:96:85:a7:
5d:78:1a:a0:84:bc:88:fa:3d:4d:b3:f0:a8:82:0a:32:c8:ad:
7f:1e:c8:a2:21:51:79:1d:67:68:04:08:db:ea:c2:5b:51:ac:
6a:f7:52:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:22 2023 by rpki-client on console-fra.rpki-client.org