Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Igp0XK5RCbE9yg-y8JjBtKCj7pc.roa
File: Igp0XK5RCbE9yg-y8JjBtKCj7pc.roa (raw, json)
Hash identifier: 37NqZaImtOLns0hGGB/XQy47zijNDZYW7FhAuh9F8ww=
Subject key identifier: 22:0A:74:5C:AE:51:09:B1:3D:CA:0F:B2:F0:98:C1:B4:A0:A3:EE:97
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0191A9FE056EFE97C63B40A110F3A253B265
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Igp0XK5RCbE9yg-y8JjBtKCj7pc.roa
Signing time: Sat 31 Aug 2024 19:51:22 +0000
ROA not before: Sat 31 Aug 2024 19:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.128.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Sep 2024 11:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a9:fe:05:6e:fe:97:c6:3b:40:a1:10:f3:a2:53:b2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 31 19:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=220a745cae5109b13dca0fb2f098c1b4a0a3ee97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:5a:c3:31:e5:fd:86:2e:48:d2:86:1a:21:
2b:cc:c8:08:3a:ef:28:88:a4:e6:53:e3:a1:89:51:
1a:37:94:ab:e3:c8:56:ca:84:b4:07:5c:12:9e:5c:
29:34:c0:6f:c8:ee:d7:3c:c3:12:0c:11:d2:cd:76:
b5:a3:89:ae:33:6b:c7:4e:53:55:e1:8a:3a:f3:7b:
6a:03:8e:30:b0:8d:df:19:e1:c4:52:91:e2:ca:e5:
6c:37:e9:d5:56:5f:f6:13:b4:f8:76:29:58:4a:89:
89:f0:82:90:a7:f7:dc:11:4a:20:41:6f:ca:2e:05:
82:62:4d:be:2c:df:1b:5e:c3:2f:7d:e1:3d:a3:28:
8b:f0:dc:41:d2:9b:76:de:ec:b4:42:d1:9e:69:fd:
ed:2a:f2:2d:01:21:f4:66:6a:05:91:fd:45:d9:06:
be:47:f7:70:7f:92:4e:6b:f0:36:cb:e2:db:b4:c2:
40:e7:04:cf:21:9f:7e:33:4b:24:c3:42:8c:4e:88:
ac:aa:f4:1a:89:60:3c:b3:ac:1a:55:c5:26:10:ef:
56:95:3e:46:c5:0d:be:87:75:45:58:e1:29:6f:a8:
cf:52:49:c5:1d:33:6a:d4:c5:d3:11:fb:99:10:17:
ae:59:29:5a:25:5e:78:ca:af:a6:3b:0e:af:7b:ad:
07:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0A:74:5C:AE:51:09:B1:3D:CA:0F:B2:F0:98:C1:B4:A0:A3:EE:97
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Igp0XK5RCbE9yg-y8JjBtKCj7pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.154.0/24
185.230.14.0/24
213.209.129.0/24
213.209.138.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
7c:c9:8d:b1:d6:03:7a:d8:87:47:4f:aa:19:00:1f:a8:98:82:
ef:a3:61:eb:93:a0:51:ea:1e:7d:58:a7:3a:3a:72:df:c2:6b:
27:0b:e8:74:c3:f5:62:a4:b3:61:af:73:d4:ce:7b:8c:61:e0:
5d:bb:f5:b4:7f:c8:cf:22:04:64:2a:18:ac:ad:25:c7:42:7d:
26:50:e6:91:7a:d3:42:cb:76:07:1f:4e:99:21:2b:58:92:ec:
72:db:11:d9:ab:c6:49:93:3c:19:17:d0:44:77:71:a0:59:37:
45:0d:4e:a1:46:a1:4e:f0:04:52:54:bf:4d:16:25:01:df:3c:
94:e8:33:61:bd:65:ed:6d:60:b6:e0:7d:14:90:ba:5f:f4:26:
8d:4b:39:17:a6:16:15:62:d2:a8:49:ec:c8:26:1d:13:36:99:
0f:0b:86:61:d1:d0:6c:6a:76:8e:c5:df:a7:ed:0d:d9:e9:d5:
51:c4:d2:cb:85:44:e4:60:da:f9:18:27:3d:cf:b9:fd:99:2c:
47:6c:aa:33:65:bf:d7:e4:b9:df:e3:91:a8:51:bc:d3:c4:57:
59:e2:32:19:96:a1:cc:8f:a0:e2:62:29:cf:a3:e5:0a:10:2f:
dc:fa:5f:d4:5d:69:5b:41:21:81:e1:1f:82:0b:5b:a3:1c:89:
78:d7:6e:d1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 3 14:51:06 2024 by rpki-client on console-ams.rpki-client.org