Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/NM01TmF9VTn81WuyCe409X-h81Y.roa
File: NM01TmF9VTn81WuyCe409X-h81Y.roa (raw, json)
Hash identifier: QpP0GsOvZcgROs+D6ipjtz3lxqoC1fyQAfN1yb4L4NY=
Subject key identifier: 34:CD:35:4E:61:7D:55:39:FC:D5:6B:B2:09:EE:34:F5:7F:A1:F3:56
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01889C90247B3E242A94F83F92740C849D7D
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/NM01TmF9VTn81WuyCe409X-h81Y.roa
Signing time: Thu 08 Jun 2023 19:51:12 +0000
ROA not before: Thu 08 Jun 2023 19:51:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.151.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9c:90:24:7b:3e:24:2a:94:f8:3f:92:74:0c:84:9d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 8 19:51:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34cd354e617d5539fcd56bb209ee34f57fa1f356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:36:01:8c:fd:59:d5:37:dc:c2:4c:10:70:6c:
8d:79:18:d8:e5:a2:2b:31:a1:ec:ef:58:a5:89:87:
48:ad:21:bd:37:fb:b1:e8:de:22:08:62:7c:ef:c9:
cc:5f:3c:a7:54:c7:c1:be:5a:4a:0c:e9:19:3c:4e:
30:88:7a:bf:70:91:1f:9e:15:93:2f:ba:c1:e0:8d:
a5:e5:e2:64:b4:17:fd:a3:cf:23:c6:89:10:0b:e1:
7c:12:a5:11:77:fe:c3:5e:e6:aa:ec:f1:e7:96:5e:
99:99:4f:bb:f2:14:3a:01:41:e2:e0:f2:dc:dc:f2:
09:f2:32:60:08:7a:e4:b1:62:b1:10:eb:c1:17:fd:
27:58:46:a8:01:99:68:b9:79:6c:c0:00:2c:c2:1e:
65:15:2f:c4:b8:35:eb:fc:fe:f7:36:87:4f:a4:12:
e1:bd:47:c8:ac:c7:5a:2d:5c:5a:30:cf:8d:49:e1:
22:26:d1:8c:29:33:cc:ec:e7:31:b8:52:c6:a8:9b:
20:f4:d3:f3:25:93:16:29:71:0a:11:a6:cd:db:47:
32:69:d8:99:69:a4:f8:65:0a:69:bd:4f:ce:74:0b:
0b:d2:43:6f:b1:e3:e7:be:1e:54:8f:fe:9e:16:d3:
c9:01:34:5f:be:22:a0:15:44:27:96:f9:d3:24:b5:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CD:35:4E:61:7D:55:39:FC:D5:6B:B2:09:EE:34:F5:7F:A1:F3:56
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/NM01TmF9VTn81WuyCe409X-h81Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.153.0/24
77.90.185.0/24
77.90.188.0/24
213.209.138.0/24
213.209.151.0/24
213.209.157.0/24
213.209.159.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
ac:4a:f0:f9:39:55:84:4f:58:8f:27:78:21:e5:c7:27:ae:7a:
b2:24:a6:27:1d:e5:c7:1b:3b:32:b4:a1:b8:b9:89:ff:33:e6:
08:50:ca:fd:4d:63:b2:c8:fa:a5:c2:dd:50:78:80:56:07:6e:
68:3b:f0:1d:9f:92:64:b1:15:03:6c:76:b5:3d:61:b7:c7:d1:
13:7e:39:ef:34:e7:3f:25:29:10:87:c7:ae:92:21:05:a8:5f:
67:03:45:20:fa:32:f7:d9:75:d0:9f:28:1b:d4:3d:14:2f:e6:
c4:1f:c3:34:c4:f4:1f:c4:d4:9c:24:c7:28:0a:12:8c:e7:90:
05:79:10:5c:c5:ec:3e:ca:3b:3e:45:49:b5:9d:8f:fe:36:7c:
c1:de:f8:35:f3:78:7f:27:94:39:64:e9:fd:b1:f5:d1:66:86:
16:08:e8:7f:f7:7c:d8:8f:8e:85:8e:9a:21:18:8f:e4:f4:d0:
3f:5b:c6:4f:e6:ed:e3:74:b8:5a:b6:bf:7c:9d:31:93:d6:4c:
ce:cf:50:9c:02:0e:48:38:71:19:a2:ae:9f:61:12:1a:fd:f6:
cb:17:49:c7:f3:f2:f0:d8:c5:3e:5b:a4:2f:40:89:05:83:13:
88:86:00:fe:f1:76:fc:51:96:d2:df:32:27:40:12:31:13:aa:
58:d7:52:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org