Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/DVdN6ofBWU7QCimo2xFo2gRovA0.roa
File: DVdN6ofBWU7QCimo2xFo2gRovA0.roa (raw, json)
Hash identifier: 8XlBRcBPg9qLb8idnWqJ+W1AbxDUrmrHxNCrmGPml80=
Subject key identifier: 0D:57:4D:EA:87:C1:59:4E:D0:0A:29:A8:DB:11:68:DA:04:68:BC:0D
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018D64B3040D168B0F715681853FFB3CDBDC
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/DVdN6ofBWU7QCimo2xFo2gRovA0.roa
Signing time: Thu 01 Feb 2024 12:44:29 +0000
ROA not before: Thu 01 Feb 2024 12:44:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.128.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 02 Feb 2024 13:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:b3:04:0d:16:8b:0f:71:56:81:85:3f:fb:3c:db:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Feb 1 12:44:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d574dea87c1594ed00a29a8db1168da0468bc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:c3:5b:1e:d3:7f:0c:79:71:d0:81:77:cf:
84:9f:c0:d7:ff:32:d6:9a:29:52:82:d0:a8:b9:ea:
64:37:30:ad:74:67:71:fd:0f:f0:34:5f:8c:76:3e:
5b:70:48:4c:bb:37:59:6b:f2:e0:50:88:e0:b0:69:
7f:fb:5a:3d:cb:c1:df:9d:af:31:c9:3e:f9:b7:0e:
de:1b:d0:d9:93:8f:a3:2a:53:a1:35:91:42:fb:ce:
20:cc:cb:7c:3d:c2:1d:d6:ad:e8:7b:1f:43:d2:53:
4e:e1:20:9a:c4:0c:5d:b1:86:34:99:c2:96:c6:e5:
88:e1:5c:0f:e2:82:fc:b7:81:30:24:07:cf:91:7f:
ce:be:d1:5d:91:22:0f:22:85:59:51:c6:57:bd:c4:
ab:bb:09:0a:8c:27:f2:88:5e:ce:da:7e:7c:1d:aa:
c9:cd:52:95:f8:d1:17:38:8c:52:4f:fb:db:85:92:
62:e8:77:53:7d:d5:a9:f4:6a:af:73:3a:93:db:ff:
05:4a:b2:77:60:b6:9f:4c:3e:b0:86:5f:d4:86:29:
22:75:b7:a1:58:e8:6f:23:92:db:d0:26:36:0d:2a:
55:3c:86:62:8c:18:0d:a5:90:a0:f4:20:fc:a3:eb:
67:1d:2c:3d:7d:36:8f:a1:a3:0d:48:b1:de:2c:a7:
3b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:57:4D:EA:87:C1:59:4E:D0:0A:29:A8:DB:11:68:DA:04:68:BC:0D
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/DVdN6ofBWU7QCimo2xFo2gRovA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
213.209.138.0/24
213.209.143.0/24
213.209.145.0/24
213.209.157.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
7f:57:6e:0c:1b:8e:5b:97:e3:71:c7:a3:1a:e5:75:95:75:cc:
28:c1:16:ec:d9:b4:40:ca:f9:60:2d:8d:24:05:8f:5a:33:67:
2b:b0:36:9b:05:02:49:70:1e:19:00:27:50:e1:66:d3:56:79:
23:81:b1:fb:94:f6:8e:a0:09:71:c3:5d:7d:d3:65:ff:df:3b:
1f:37:7d:ad:be:a7:a3:28:c1:6c:b6:89:5a:13:14:66:14:7b:
48:bf:ce:fb:f0:8b:b1:c2:78:9e:bd:92:5e:83:2f:50:9b:9e:
82:66:09:99:0e:8c:fb:d1:10:30:60:b7:c6:45:e6:5a:92:c1:
0c:27:56:8a:38:6d:da:dc:15:a3:fa:03:15:24:43:91:74:04:
ce:6f:7e:71:ef:27:bc:b7:15:6e:90:37:76:b5:00:58:ae:4c:
76:ff:08:5b:ed:51:cd:f7:4c:fe:9f:ca:a9:bc:1e:6d:2d:e8:
36:9c:b8:24:43:7c:1b:2f:ed:de:53:a1:92:7d:69:b6:5d:88:
9f:53:cd:60:86:88:d8:af:77:31:2d:6a:b9:c9:6a:ab:93:8e:
20:4d:c9:41:0b:cd:e9:ed:f9:59:ce:f7:ee:a5:db:c1:3a:b7:
79:e1:a0:97:5a:22:de:18:aa:2e:b9:0c:19:f8:bc:5c:d9:50:
71:41:09:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Feb 2 17:51:02 2024 by rpki-client on console-ams.rpki-client.org