Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/KpdcpvliXXtN0Et_Qt32OtY14wE.roa
File: KpdcpvliXXtN0Et_Qt32OtY14wE.roa (raw, json)
Hash identifier: zY4OqPzUmUAzy+yX/9JZ/alxGTf28JUegkve3Huhzdk=
Subject key identifier: 2A:97:5C:A6:F9:62:5D:7B:4D:D0:4B:7F:42:DD:F6:3A:D6:35:E3:01
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018CC8DF39C9986688E675E489E8D974FF80
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/KpdcpvliXXtN0Et_Qt32OtY14wE.roa
Signing time: Tue 02 Jan 2024 06:32:01 +0000
ROA not before: Tue 02 Jan 2024 06:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 213.209.143.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:39:c9:98:66:88:e6:75:e4:89:e8:d9:74:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 2 06:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a975ca6f9625d7b4dd04b7f42ddf63ad635e301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:31:c9:a5:ce:07:be:73:b0:c9:1d:1b:23:7b:
ea:29:4b:e0:c8:8e:6b:84:20:64:29:52:b1:d5:4f:
d6:3b:e4:55:d0:86:6c:4b:2d:50:da:e2:85:ce:bc:
8f:09:b3:c7:1a:18:c0:1e:ac:ee:3f:18:93:d4:ca:
19:79:38:27:85:f5:e7:9c:f4:76:7d:cf:59:dd:16:
72:a1:c9:37:46:8d:47:e2:ab:1a:b8:09:41:97:64:
b0:a1:76:65:aa:e5:83:1b:55:b4:3e:df:63:83:96:
36:75:db:b8:48:02:ab:8f:94:a0:18:4f:1b:c3:f7:
10:ee:02:a5:e9:af:08:51:4b:79:67:7f:10:31:a4:
6a:f5:5c:b1:db:3a:92:db:78:c8:18:32:0b:ea:be:
cd:ca:00:4d:bb:4c:b6:d7:1c:78:98:6b:fb:a8:77:
cc:88:c4:31:ea:20:3a:d6:a5:00:5e:42:da:6b:91:
c7:28:1e:ab:0b:bf:c4:b5:36:5a:5a:c8:8c:4b:d4:
53:6d:92:46:16:42:45:3f:24:20:9d:97:34:e7:1e:
04:d2:f2:81:51:5f:70:ff:b8:a9:ba:ec:fc:6c:51:
56:e5:c8:19:9f:93:79:c4:f3:29:93:ba:67:e8:35:
3c:51:00:34:24:c1:45:46:a9:eb:54:e3:3a:56:6b:
42:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:97:5C:A6:F9:62:5D:7B:4D:D0:4B:7F:42:DD:F6:3A:D6:35:E3:01
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/KpdcpvliXXtN0Et_Qt32OtY14wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.138.0/24
213.209.143.0/24
213.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:1f:e9:37:84:3e:bc:00:9b:34:53:10:3e:49:1e:db:93:14:
6f:ef:b3:c2:4e:a6:bd:9d:3c:55:88:b8:a8:c1:fe:77:12:b3:
b4:ca:c7:0d:4c:69:0f:a4:cb:bc:68:0e:48:9d:0c:db:d3:b7:
20:e2:3f:d7:02:65:ee:a4:60:01:b1:35:93:0f:52:28:13:fc:
71:f4:fb:c5:33:ba:82:06:18:93:cc:f9:3b:cf:47:8f:f7:ba:
16:5c:aa:c8:8d:61:c4:0d:d6:96:3c:ed:17:14:e0:86:b8:24:
d4:60:6f:be:c0:6c:26:e6:e0:37:60:13:29:cd:eb:55:89:02:
0c:17:12:6e:cd:51:37:c8:32:9b:b7:a8:ff:18:06:93:a8:6e:
4b:7b:64:17:03:62:ec:5e:8f:9d:7f:64:22:99:fd:ae:91:20:
cf:e2:08:07:2b:6a:ec:78:30:72:b3:17:9c:c9:3f:c0:36:12:
69:d8:d6:37:23:e7:58:a5:77:49:de:d5:f2:fb:2f:54:a5:d8:
40:b7:8a:f6:d8:0f:97:c3:d9:f7:a4:c8:f8:bb:e9:1a:63:37:
ae:7a:3e:51:21:9c:e2:eb:ed:5f:72:60:10:9f:97:c0:49:d2:
18:10:d0:ef:9b:5c:f8:5e:3e:f7:2e:c9:0b:73:fa:b5:1d:d5:
d7:02:fe:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 20:23:38 2024 by rpki-client on console-fra.rpki-client.org