Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/J4gj8s3vmVCNOLti56FI4c61b-w.roa
File: J4gj8s3vmVCNOLti56FI4c61b-w.roa (raw, json)
Hash identifier: PChrFj/5Lf9fzNZs0pUews2+qiKXfvvyHS8cgCyWH2w=
Subject key identifier: 27:88:23:F2:CD:EF:99:50:8D:38:BB:62:E7:A1:48:E1:CE:B5:6F:EC
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01881F1B6A54EE2D6B91EE6A16CB6BCC5842
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/J4gj8s3vmVCNOLti56FI4c61b-w.roa
Signing time: Mon 15 May 2023 11:11:10 +0000
ROA not before: Mon 15 May 2023 11:11:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 213.209.135.0/24 maxlen: 24
213.209.141.0/24 maxlen: 24
213.209.153.0/24 maxlen: 24
213.209.154.0/24 maxlen: 24
77.90.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1f:1b:6a:54:ee:2d:6b:91:ee:6a:16:cb:6b:cc:58:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: May 15 11:11:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=278823f2cdef99508d38bb62e7a148e1ceb56fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:00:7e:d8:89:45:6f:49:73:4c:c5:14:e6:8d:
86:f0:47:49:d4:4b:a5:ea:a2:a3:c5:40:55:c7:5d:
35:b2:38:97:31:b2:c4:6b:5a:b3:88:db:f0:6e:6d:
f1:30:66:7e:0d:43:c5:c9:1e:11:13:9d:de:ee:0f:
c2:a6:8e:d7:9c:04:18:ef:d5:84:d3:50:48:be:8a:
45:36:6a:c4:6f:d9:7b:2e:76:ac:75:e8:44:ef:d2:
f8:e0:b6:c3:14:ea:ca:83:2b:cd:23:9a:aa:12:2c:
ce:c0:96:bf:47:f9:de:a2:14:99:3a:c6:33:bf:62:
69:54:c6:79:19:bf:f7:e4:9e:15:5f:a7:0c:cd:f8:
68:ab:e5:e2:9d:99:4a:d3:e4:17:be:8f:ef:81:d1:
6f:2c:44:e7:8b:f8:91:03:fc:02:b5:11:65:0e:2a:
eb:d7:75:96:21:1c:a0:8e:2d:b0:de:e4:ac:be:92:
3d:e1:a1:ce:ac:bb:0a:b8:00:46:fd:c9:8f:a6:5a:
a4:6a:4e:5d:22:aa:dc:4b:5a:d1:f1:6d:94:5d:fe:
ff:14:e2:a4:43:2e:1c:66:d0:86:90:24:76:09:31:
c7:57:9f:2c:68:5f:fd:67:03:64:52:e1:a7:ff:c2:
6b:e9:24:c0:09:54:e3:de:d7:66:71:8a:f3:74:04:
ed:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:88:23:F2:CD:EF:99:50:8D:38:BB:62:E7:A1:48:E1:CE:B5:6F:EC
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/J4gj8s3vmVCNOLti56FI4c61b-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.167.0/24
213.209.135.0/24
213.209.141.0/24
213.209.153.0-213.209.154.255
Signature Algorithm: sha256WithRSAEncryption
b4:16:bb:45:b7:ac:1f:6d:7b:b2:6d:30:e8:7c:f8:55:94:54:
d1:5b:bc:e7:55:f4:30:a1:55:f0:44:02:28:56:2a:74:56:50:
93:6c:df:ca:93:58:2d:18:77:e0:0c:3a:ac:44:b1:f4:a8:5c:
44:e7:a2:af:3e:7f:34:47:16:bc:8c:85:03:d8:48:03:a6:48:
72:39:20:8e:76:47:83:b5:d9:b1:3f:f2:fa:03:a4:4d:6a:99:
4e:9e:4b:ed:2d:1c:7e:9d:c2:8f:08:c9:47:a1:b8:73:68:4d:
b3:c8:b2:84:0e:c3:76:f0:48:fc:a0:b7:6e:a4:23:02:56:4c:
1a:b9:c3:b3:3c:ef:3b:72:e3:49:8d:42:2b:fa:c1:18:a0:0d:
85:40:92:4a:14:aa:42:82:1c:83:02:ae:6e:fd:aa:2e:01:02:
58:4f:90:7a:8e:21:31:87:ee:93:6f:05:c8:2e:67:31:26:4d:
dd:4a:74:13:fa:77:6e:bc:a9:0a:11:0e:d1:ee:e7:3c:26:b0:
d1:92:6c:ba:40:13:e8:3d:14:b3:20:fe:75:c1:d6:98:5a:cf:
e8:be:7b:50:73:dc:14:6e:ee:2f:50:aa:ed:bb:2d:6b:d2:d0:
5c:2b:f2:ef:4f:d0:3e:f0:e4:60:94:db:a5:e5:60:83:72:3e:
47:9d:88:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 10:27:43 2023 by rpki-client on console-fra.rpki-client.org