Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/GNSZt6O4EcukiIxL0QZYuXVuYPY.roa
File: GNSZt6O4EcukiIxL0QZYuXVuYPY.roa (raw, json)
Hash identifier: hXaF/QtXBVjMXGMaSHAJNHZx6bxRX/fqxOyGsEOMoLQ=
Subject key identifier: 18:D4:99:B7:A3:B8:11:CB:A4:88:8C:4B:D1:06:58:B9:75:6E:60:F6
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0189F381F77FC8F22A34BBE21DF972F831DE
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/GNSZt6O4EcukiIxL0QZYuXVuYPY.roa
Signing time: Mon 14 Aug 2023 10:05:28 +0000
ROA not before: Mon 14 Aug 2023 10:05:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.151.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f3:81:f7:7f:c8:f2:2a:34:bb:e2:1d:f9:72:f8:31:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 14 10:05:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18d499b7a3b811cba4888c4bd10658b9756e60f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a6:17:57:13:af:8a:55:8a:33:83:10:0c:73:
70:45:7c:0b:c1:f4:d9:6c:bb:5b:30:14:70:e4:4c:
dd:41:96:75:4c:52:7d:25:9a:c7:99:0c:ea:67:b8:
16:aa:45:56:27:85:81:6e:64:c2:bd:fd:42:a1:57:
32:4f:8b:b1:e2:0a:64:76:19:f1:49:c7:3a:10:fb:
95:58:7e:a8:0c:d9:a5:82:75:90:d6:be:7a:60:80:
5f:1b:d4:71:ab:8f:08:15:c2:6f:cf:50:2d:59:a1:
51:f7:6c:38:bb:dd:70:97:a0:03:7b:a8:1b:ee:9a:
ce:04:3c:a1:af:94:5d:41:f4:78:d8:30:0f:a9:d2:
00:96:9b:4f:62:22:89:a0:94:85:bc:42:d2:d7:0f:
27:e1:d4:e7:25:6f:fd:1e:d2:d5:a0:fd:11:69:ae:
12:1c:33:11:05:a6:f1:df:a1:1c:43:e4:05:1b:90:
40:39:5f:da:08:32:7f:1a:d4:45:06:2d:41:f0:c5:
81:55:85:e2:10:e9:a9:95:d2:01:1b:51:47:c4:92:
ea:ab:9f:26:dc:b6:07:05:61:5f:85:b8:2e:33:c5:
8e:7f:61:ee:c0:4a:2f:f6:16:70:fd:ab:44:63:b8:
19:46:42:9a:f4:da:95:7b:95:f4:23:90:d6:84:23:
8c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D4:99:B7:A3:B8:11:CB:A4:88:8C:4B:D1:06:58:B9:75:6E:60:F6
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/GNSZt6O4EcukiIxL0QZYuXVuYPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.140.0/24
77.90.142.0-77.90.148.255
77.90.153.0-77.90.154.255
185.230.13.0-185.230.14.255
213.209.129.0/24
213.209.138.0/24
213.209.151.0/24
213.209.157.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
8f:86:2d:e7:c9:eb:cd:b1:22:5e:17:78:01:e8:e5:0b:03:81:
59:95:78:f6:79:a1:cf:6e:08:e3:a9:da:05:57:a8:36:c1:61:
ba:27:22:a9:20:0a:7e:e4:d9:2e:bf:ec:64:da:a9:e9:5c:45:
28:40:ea:57:8b:e8:e6:77:21:4a:f9:93:25:1e:34:78:e9:1f:
37:07:8e:4a:39:51:d1:4f:ba:9d:13:b8:32:8f:1b:5e:37:ec:
29:9d:15:c9:34:c3:2e:cf:81:b9:97:5c:be:13:70:cb:be:3d:
d6:09:73:d8:12:88:13:ac:60:01:79:f9:a7:bb:2d:1d:bc:38:
c9:b4:69:46:d9:d5:b4:fe:d5:6d:ca:ae:16:70:76:0e:bf:be:
39:c9:51:fd:55:7d:06:b3:9f:12:32:04:fe:2f:9f:b4:e4:3b:
cd:22:94:a7:b8:79:54:53:28:ef:fd:cf:8c:5b:1a:ef:0b:6d:
03:38:53:ba:35:b6:d2:87:34:c9:ca:20:d9:0f:e3:3e:d9:7a:
19:eb:71:b0:ef:ae:50:e6:85:da:aa:35:8b:a7:86:72:61:05:
68:23:0a:c2:78:f9:5e:55:af:cc:8a:f1:23:ff:ee:2d:00:15:
bc:36:5b:46:33:a2:8c:5c:fc:ef:9f:6c:dc:57:74:db:ca:19:
a0:c4:95:3c
-----BEGIN CERTIFICATE-----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Generated at Mon Aug 14 19:17:19 2023 by rpki-client on console-ams.rpki-client.org