Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/EHWvzfF5vt2sHhStaXAduYuH6hg.roa
File: EHWvzfF5vt2sHhStaXAduYuH6hg.roa (raw, json)
Hash identifier: ph5veCSU6ttiY6sQBwqC2NwC10SBigEpToz/ieolr04=
Subject key identifier: 10:75:AF:CD:F1:79:BE:DD:AC:1E:14:AD:69:70:1D:B9:8B:87:EA:18
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01893A24B4D03266C441A8112F9E16958D43
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/EHWvzfF5vt2sHhStaXAduYuH6hg.roa
Signing time: Sun 09 Jul 2023 10:13:51 +0000
ROA not before: Sun 09 Jul 2023 10:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213296
IP address blocks: 213.209.131.0/24 maxlen: 24
77.90.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3a:24:b4:d0:32:66:c4:41:a8:11:2f:9e:16:95:8d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 9 10:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1075afcdf179beddac1e14ad69701db98b87ea18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:4d:c3:da:90:ad:bf:de:46:48:82:e7:b9:
7a:f7:b3:bb:b0:db:b7:70:10:5e:24:f7:17:40:2c:
a4:91:95:0a:e2:33:db:13:ac:e8:92:ce:79:eb:5d:
29:fe:c8:13:d3:54:f7:f7:27:0f:1b:fb:8a:e5:25:
09:f7:da:83:9d:77:d7:2b:bd:39:ae:41:ba:f4:02:
4f:fb:45:36:70:30:b1:62:87:ba:a6:c0:81:6f:df:
ce:b0:3c:2f:1c:15:59:cd:6f:20:28:96:ab:5b:ad:
c7:c1:5d:31:6d:7a:5a:35:43:e7:94:e8:3e:68:13:
59:9a:18:cd:48:fe:ab:c7:6c:14:8c:74:84:3d:a1:
f1:7e:75:66:a5:d1:a5:b0:70:ac:ac:f6:5f:a1:bd:
43:ba:8d:73:05:63:09:61:c1:a9:ba:99:97:ff:7c:
2e:4a:26:45:6e:41:00:41:ee:41:ee:62:3a:05:2b:
dd:6c:08:bb:81:f9:58:51:27:37:09:0d:2f:60:a1:
9c:30:eb:d5:c8:94:f7:58:a5:83:a5:30:19:bf:2b:
a1:17:fe:c6:61:76:9e:46:f7:8f:18:a2:dc:40:3c:
25:f5:9b:06:d6:f7:c4:c1:5a:81:ab:a6:a2:56:b5:
d7:b8:ac:3e:3a:11:28:bb:94:fb:db:9e:0c:f0:81:
b7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:75:AF:CD:F1:79:BE:DD:AC:1E:14:AD:69:70:1D:B9:8B:87:EA:18
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/EHWvzfF5vt2sHhStaXAduYuH6hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.177.0/24
213.209.131.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:0d:8f:15:8b:b3:64:4a:5d:c9:2e:09:34:27:e7:1a:87:12:
1d:29:b5:b6:11:d4:30:b2:a5:17:3b:fd:49:b0:0b:d3:97:bb:
24:0f:46:c8:14:90:8b:0c:bd:fc:86:78:dc:67:11:98:06:f7:
f8:85:b0:ca:37:6f:87:ef:d3:70:73:24:e9:41:24:f3:28:b6:
38:e7:a5:73:01:65:8b:e2:18:95:c5:55:7f:61:5d:de:aa:c0:
91:f9:a1:c4:4e:c2:bd:4b:a5:dc:82:70:10:1e:33:de:19:2c:
48:be:08:e7:ef:4a:5c:fa:8f:eb:44:ce:f6:53:62:cd:64:12:
23:77:44:bc:19:75:e0:7a:23:70:33:c7:31:95:6b:1d:0c:69:
63:d5:52:86:48:83:1b:dd:f0:b8:37:4d:38:a8:05:2d:eb:10:
0e:42:6b:5e:a2:46:1b:fd:92:7e:79:89:2e:dc:80:e0:18:29:
d1:5b:bc:11:8f:a7:40:9c:8c:0f:94:0d:e3:cd:ee:83:d2:85:
27:e7:79:80:d5:ee:ee:3d:87:98:5b:26:35:b0:76:05:5f:b3:
ac:45:b2:0f:53:64:b8:ba:3f:7c:b4:82:a9:92:b5:f4:44:d5:
d2:a4:f8:50:96:75:7e:34:44:41:6d:b8:bd:6b:12:ce:bb:a1:
4a:80:75:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:10 2024 by rpki-client on console-fra.rpki-client.org