Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/PPRnhtS9tpZypcnBfLlicE3Mkl4.roa
File: PPRnhtS9tpZypcnBfLlicE3Mkl4.roa (raw, json)
Hash identifier: oUzS8wI+RudIZ/6OcG6h32ri5zyulJNzgc4LBvPwdfA=
Subject key identifier: 3C:F4:67:86:D4:BD:B6:96:72:A5:C9:C1:7C:B9:62:70:4D:CC:92:5E
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01859C689A7B283089C925163A026BC8D50C
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/PPRnhtS9tpZypcnBfLlicE3Mkl4.roa
Signing time: Tue 10 Jan 2023 15:59:39 +0000
ROA not before: Tue 10 Jan 2023 15:59:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 185.230.14.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.136.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.151.0/24 maxlen: 24
213.209.149.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
213.209.156.0/24 maxlen: 24
77.90.156.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9c:68:9a:7b:28:30:89:c9:25:16:3a:02:6b:c8:d5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 10 15:59:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cf46786d4bdb69672a5c9c17cb962704dcc925e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:72:19:bb:97:fe:52:0f:ec:12:88:14:f7:4f:
e2:90:92:c3:29:ef:ad:3c:01:42:7a:c2:f2:ce:c5:
17:3b:3f:84:e9:d9:fb:53:3c:75:13:4d:f9:54:8a:
2b:89:5e:88:42:31:64:69:65:56:bb:99:46:c6:f7:
e8:d1:a8:f0:75:6b:a6:39:42:75:39:a2:45:3b:21:
45:a1:76:67:78:f2:b0:15:0a:b9:4d:be:bc:59:76:
fc:91:a5:af:8f:41:70:28:5f:3f:f7:73:d3:b7:07:
61:70:f8:66:55:6d:db:01:86:53:6f:1b:cf:04:13:
fc:4a:0b:3b:41:73:fb:6c:95:33:8b:b1:03:6c:cb:
e2:78:c6:73:7a:7c:7c:19:f1:77:47:d0:a7:af:ec:
23:3d:d3:72:1a:6a:e0:76:a5:fa:b5:8f:47:53:86:
86:39:2c:a4:39:11:ec:ad:d6:b8:2c:33:b8:42:ba:
78:ae:0a:bd:3b:d1:78:36:a8:cc:1e:66:84:bb:9d:
8e:d5:50:63:64:aa:9e:69:6b:ba:de:25:b7:51:09:
f2:26:a5:25:74:c0:06:ea:f7:53:1e:f1:11:b2:29:
95:4d:46:35:84:4f:81:72:5d:a0:3d:b6:1d:8c:4f:
3c:f7:e1:4e:97:d0:72:22:50:03:36:7d:58:55:5b:
f9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F4:67:86:D4:BD:B6:96:72:A5:C9:C1:7C:B9:62:70:4D:CC:92:5E
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/PPRnhtS9tpZypcnBfLlicE3Mkl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.153.0/24
77.90.156.0/24
77.90.184.0/24
77.90.188.0/24
185.230.14.0/24
213.209.129.0/24
213.209.136.0/24
213.209.143.0/24
213.209.149.0/24
213.209.151.0/24
213.209.156.0/23
213.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c2:b6:c2:73:aa:25:6b:a7:ae:67:e9:27:4f:4f:cf:53:d9:
31:8f:4c:a4:c8:de:a0:71:4e:0d:3e:b4:c4:70:db:f6:09:b7:
1c:a9:2e:06:7f:f2:5e:47:c6:3b:f0:4e:c0:4b:d7:e7:62:fd:
7c:84:ca:28:cc:35:43:25:a0:cf:95:78:ed:43:14:12:77:7a:
ee:08:6c:b5:d5:b2:da:fb:e4:20:14:5e:ff:4d:5f:8b:f7:93:
c0:ce:5c:57:f4:51:3f:3b:16:72:ca:31:0d:b3:5f:93:db:66:
49:fe:1c:41:33:5f:75:fa:d5:fe:bd:86:21:2c:5c:52:0e:3c:
c7:88:2b:e5:f1:fe:28:32:ea:a7:02:31:40:75:23:d4:92:e1:
b9:a6:d3:2f:ff:48:5e:26:3e:a2:82:02:21:85:0a:ec:2e:99:
d4:45:2c:56:04:fd:b0:dd:60:44:57:4f:7e:11:b7:e4:56:48:
59:8d:4d:38:91:9c:81:c2:d0:a6:b1:58:dc:49:6a:11:eb:3e:
7f:26:6a:03:aa:f7:b6:95:18:4d:97:82:a6:44:38:62:2c:f7:
8f:a7:3d:6f:44:cd:c0:a0:36:b4:5f:c4:a4:67:0e:d3:aa:15:
75:d5:8f:09:24:55:34:c0:95:8b:b3:e1:8a:3a:bc:f4:9f:40:
44:b5:96:15
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAYWcaJp7KDCJySUWOgJryNUMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjMwMTEwMTU1OTM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2Y0Njc4NmQ0YmRiNjk2NzJhNWM5YzE3Y2I5NjI3MDRkY2M5MjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXIZu5f+Ug/sEogU90/ikJLDKe+t
PAFCesLyzsUXOz+E6dn7Uzx1E035VIoriV6IQjFkaWVWu5lGxvfo0ajwdWumOUJ1
OaJFOyFFoXZnePKwFQq5Tb68WXb8kaWvj0FwKF8/93PTtwdhcPhmVW3bAYZTbxvP
BBP8Sgs7QXP7bJUzi7EDbMvieMZzenx8GfF3R9Cnr+wjPdNyGmrgdqX6tY9HU4aG
OSykORHsrda4LDO4Qrp4rgq9O9F4NqjMHmaEu52O1VBjZKqeaWu63iW3UQnyJqUl
dMAG6vdTHvERsimVTUY1hE+Bcl2gPbYdjE889+FOl9ByIlADNn1YVVv55QIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFDz0Z4bUvbaWcqXJwXy5YnBNzJJeMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvUFBSbmh0Uzl0cFp5cGNuQmZMbGljRTNNa2w0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQATVqZAwQA
TVqcAwQATVq4AwQATVq8AwQAueYOAwQA1dGBAwQA1dGIAwQA1dGPAwQA1dGVAwQA
1dGXAwQB1dGcAwQA1dGfMA0GCSqGSIb3DQEBCwUAA4IBAQAPwrbCc6ola6euZ+kn
T0/PU9kxj0ykyN6gcU4NPrTEcNv2CbccqS4Gf/JeR8Y78E7AS9fnYv18hMoozDVD
JaDPlXjtQxQSd3ruCGy11bLa++QgFF7/TV+L95PAzlxX9FE/OxZyyjENs1+T22ZJ
/hxBM191+tX+vYYhLFxSDjzHiCvl8f4oMuqnAjFAdSPUkuG5ptMv/0heJj6iggIh
hQrsLpnURSxWBP2w3WBEV09+EbfkVkhZjU04kZyBwtCmsVjcSWoR6z5/JmoDqve2
lRhNl4KmRDhiLPePpz1vRM3AoDa0X8SkZw7TqhV11Y8JJFU0wJWLs+GKOrz0n0BE
tZYV
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org