Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/FFnyLML4mudfD3m7jo6wY_Hnq-U.roa
File: FFnyLML4mudfD3m7jo6wY_Hnq-U.roa (raw, json)
Hash identifier: TP8Eic5gMBqlI5v6boqCSna3wyp7GE5D9pmK9NsWNa4=
Subject key identifier: 14:59:F2:2C:C2:F8:9A:E7:5F:0F:79:BB:8E:8E:B0:63:F1:E7:AB:E5
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01893A24B3D9F92F0EC901C88DC0686A1A91
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/FFnyLML4mudfD3m7jo6wY_Hnq-U.roa
Signing time: Sun 09 Jul 2023 10:13:51 +0000
ROA not before: Sun 09 Jul 2023 10:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207710
IP address blocks: 213.209.131.0/24 maxlen: 24
77.90.177.0/24 maxlen: 24
77.90.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3a:24:b3:d9:f9:2f:0e:c9:01:c8:8d:c0:68:6a:1a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 9 10:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1459f22cc2f89ae75f0f79bb8e8eb063f1e7abe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:5c:a3:3d:11:ae:06:69:55:03:6e:a2:9c:
38:cf:9a:11:71:57:69:5b:ee:8d:0a:c8:6b:a0:b1:
48:ad:5c:a4:04:68:bb:be:73:0c:80:e8:59:ac:4e:
46:91:ae:c9:cd:34:5f:4e:bf:41:99:07:d1:86:bc:
37:35:0c:b2:97:11:01:9e:ae:ea:a3:8e:28:92:82:
82:07:61:f2:22:1c:1d:38:7e:ab:e3:d6:d4:a4:12:
9d:85:b9:66:f5:3a:e1:2d:96:08:eb:e6:75:b6:22:
27:ea:9f:88:78:3b:56:c6:dc:86:7b:a1:8c:33:2f:
9e:5c:dc:dd:a1:42:3a:5d:3b:5f:5d:85:b1:14:66:
1c:c3:c8:13:3b:94:bf:4b:8e:83:4f:a9:0c:2f:d8:
f2:66:f0:35:e5:a6:33:e8:67:2c:99:b5:e6:92:60:
d5:5f:26:5d:21:f6:fd:3e:7e:70:09:9e:50:fa:f1:
9d:35:1d:83:f8:19:76:26:9a:dd:ba:fc:d4:be:4c:
6c:8a:24:4a:df:78:a5:2d:75:a4:ea:4a:0d:d2:d7:
5a:9b:c3:17:7a:02:de:3a:cc:9f:50:10:b7:58:cd:
d1:bb:50:64:72:50:25:e3:b8:e8:48:7b:18:b1:27:
a9:14:60:06:eb:0b:f7:f8:cb:a6:5d:08:a4:39:b1:
71:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:59:F2:2C:C2:F8:9A:E7:5F:0F:79:BB:8E:8E:B0:63:F1:E7:AB:E5
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/FFnyLML4mudfD3m7jo6wY_Hnq-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.177.0/24
77.90.186.0/24
213.209.131.0/24
Signature Algorithm: sha256WithRSAEncryption
71:05:66:8e:17:3c:b5:a6:e9:84:e5:05:93:28:49:3a:0a:76:
fa:58:97:5e:0a:9b:91:f1:b3:5d:e0:94:6c:57:8d:cf:78:2f:
f3:69:23:57:df:82:8c:a3:96:dd:17:a1:cd:0c:98:f1:8c:39:
2c:fd:ef:30:ac:67:21:53:be:11:d2:35:1a:d5:a8:e5:73:b4:
8d:c7:28:0b:ed:b9:fc:68:a9:50:f8:23:31:93:b8:fe:fc:76:
2f:4f:94:87:69:5d:d3:72:70:0e:c0:ab:60:a1:97:1a:97:d0:
f8:df:ee:ea:ac:b4:ec:2f:31:fb:30:d6:a8:4f:a9:65:f1:4c:
d1:92:21:8e:30:9f:9c:1e:62:d0:85:1b:e0:ed:ab:e1:2e:38:
4b:15:7c:79:59:63:d8:fc:7d:04:cc:9b:58:fc:73:60:dd:5a:
a3:d4:c9:34:2e:74:af:32:7d:d4:03:5b:1f:b7:f4:c2:a8:ab:
7e:2d:76:7b:07:b4:7a:e2:52:fd:45:60:ae:e1:d4:52:58:82:
7a:5d:76:36:b9:d1:99:9b:73:fb:a7:a8:f2:c7:94:c0:59:fa:
a9:86:e4:60:8b:d4:7f:93:8d:e7:a0:60:54:78:69:d5:f0:0f:
37:f1:89:1f:17:24:6c:f7:dc:19:06:9d:90:1c:52:92:70:42:
4b:33:c3:3f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYk6JLPZ+S8OyQHIjcBoahqRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjMwNzA5MTAxMzUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDU5ZjIyY2MyZjg5YWU3NWYwZjc5YmI4ZThlYjA2M2YxZTdhYmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoERcoz0RrgZpVQNuopw4z5oRcVdp
W+6NCshroLFIrVykBGi7vnMMgOhZrE5Gka7JzTRfTr9BmQfRhrw3NQyylxEBnq7q
o44okoKCB2HyIhwdOH6r49bUpBKdhblm9TrhLZYI6+Z1tiIn6p+IeDtWxtyGe6GM
My+eXNzdoUI6XTtfXYWxFGYcw8gTO5S/S46DT6kML9jyZvA15aYz6GcsmbXmkmDV
XyZdIfb9Pn5wCZ5Q+vGdNR2D+Bl2JprduvzUvkxsiiRK33ilLXWk6koN0tdam8MX
egLeOsyfUBC3WM3Ru1BkclAl47joSHsYsSepFGAG6wv3+MumXQikObFxWwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBRZ8izC+JrnXw95u46OsGPx56vlMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvRkZueUxNTDRtdWRmRDNtN2pvNndZX0hucS1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATVqxAwQA
TVq6AwQA1dGDMA0GCSqGSIb3DQEBCwUAA4IBAQBxBWaOFzy1pumE5QWTKEk6Cnb6
WJdeCpuR8bNd4JRsV43PeC/zaSNX34KMo5bdF6HNDJjxjDks/e8wrGchU74R0jUa
1ajlc7SNxygL7bn8aKlQ+CMxk7j+/HYvT5SHaV3TcnAOwKtgoZcal9D43+7qrLTs
LzH7MNaoT6ll8UzRkiGOMJ+cHmLQhRvg7avhLjhLFXx5WWPY/H0EzJtY/HNg3Vqj
1Mk0LnSvMn3UA1sft/TCqKt+LXZ7B7R64lL9RWCu4dRSWIJ6XXY2udGZm3P7p6jy
x5TAWfqphuRgi9R/k43noGBUeGnV8A838YkfFyRs99wZBp2QHFKScEJLM8M/
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:02 2024 by rpki-client on console-ams.rpki-client.org