Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/QJicaf1Y2mWplvUrLemKqoEeoCM.roa
File: QJicaf1Y2mWplvUrLemKqoEeoCM.roa (raw, json)
Hash identifier: +3jfXFYM6A2HTLJxukm8K//nkPJpfZVrjSz2YXrtlXQ=
Subject key identifier: 40:98:9C:69:FD:58:DA:65:A9:96:F5:2B:2D:E9:8A:AA:81:1E:A0:23
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018D574904DDC3598405BB090A9838F1A5E0
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/QJicaf1Y2mWplvUrLemKqoEeoCM.roa
Signing time: Mon 29 Jan 2024 22:13:39 +0000
ROA not before: Mon 29 Jan 2024 22:13:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.128.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 01 Feb 2024 12:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:57:49:04:dd:c3:59:84:05:bb:09:0a:98:38:f1:a5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 29 22:13:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40989c69fd58da65a996f52b2de98aaa811ea023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:bf:e4:62:f0:20:2f:c1:94:22:84:8d:a0:
45:6b:b8:67:0f:83:4d:f1:ef:4e:4e:3b:26:49:dc:
e9:d0:d4:af:60:4b:24:74:c1:e0:9d:52:1d:16:c1:
9c:51:2e:55:4b:84:b0:87:57:4d:26:aa:31:45:1f:
de:97:f8:aa:37:4e:5b:3c:72:78:12:c8:f5:c1:f4:
89:cb:0b:40:52:ef:54:b3:bc:41:f7:18:43:01:18:
68:ea:6e:22:68:e3:0a:1a:33:39:92:9f:47:08:e6:
e3:35:4d:68:d4:73:8e:67:a8:89:07:ab:2e:a7:0c:
f0:b7:b3:21:90:11:e2:e6:82:7f:c0:ae:62:5c:64:
7a:65:f8:8b:09:5b:2d:bc:18:82:75:fd:45:f7:39:
27:d4:69:d5:1c:7a:81:4a:28:06:ff:38:65:b6:8e:
10:96:cc:2e:fa:fd:be:3c:63:8b:a3:e0:53:19:fd:
83:77:73:0e:04:db:25:e6:59:cb:ea:40:2a:5a:e2:
a0:e2:52:17:9c:fe:ca:13:13:12:30:89:dc:9e:19:
59:b7:0c:00:12:12:c1:47:b1:8b:16:2c:65:c6:ef:
af:97:bb:97:49:22:05:b2:51:0f:9e:ea:01:6b:d6:
85:ba:e0:f1:e5:b9:0a:3c:42:24:95:cc:d3:24:f9:
c7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:98:9C:69:FD:58:DA:65:A9:96:F5:2B:2D:E9:8A:AA:81:1E:A0:23
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/QJicaf1Y2mWplvUrLemKqoEeoCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.153.0-77.90.154.255
213.209.138.0/24
213.209.143.0/24
213.209.145.0-213.209.146.255
213.209.150.0/24
213.209.157.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
1a:5a:a7:d2:25:ea:1c:90:d4:2d:06:29:76:01:45:cc:43:47:
e6:44:34:9d:10:2a:8f:95:fe:35:8a:89:f2:71:51:26:6c:d9:
ed:81:86:e5:55:11:b8:e8:85:63:43:2e:e4:d3:6b:0a:f3:55:
b4:ed:40:3e:a1:d4:ff:49:d9:aa:a4:ae:7c:d8:18:96:d8:14:
fc:5b:dd:29:ab:48:69:df:03:c6:8a:db:05:4a:79:23:b9:62:
c4:e0:23:2e:41:d7:61:5e:b8:40:3e:4c:c8:13:36:6a:f4:0e:
a0:e1:7e:b0:64:30:8a:fd:47:43:15:ce:16:04:55:71:e1:39:
42:bb:41:9a:87:b2:f0:08:22:9c:d8:0c:77:db:c8:c5:b1:6e:
8c:c0:9b:3d:d0:1c:33:40:de:c3:5e:1f:46:c8:b3:68:8d:61:
04:d6:4c:e8:50:f5:0f:23:e5:f1:39:d2:6a:0e:da:8d:95:ba:
bd:b1:b1:2c:1d:39:68:17:24:b7:2e:f2:22:5f:8b:c2:61:c9:
95:fc:ba:26:95:3a:a5:ac:cb:d5:60:1f:2a:d4:fa:32:1e:33:
0a:46:b7:62:a1:6a:ef:e3:0a:f3:dc:af:d8:17:a7:f5:f1:da:
83:67:ea:70:a6:12:bc:ae:42:4f:1b:8b:f0:a5:f5:8b:b8:82:
af:5c:e4:f0
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAY1XSQTdw1mEBbsJCpg48aXgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjQwMTI5MjIxMzM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDk4OWM2OWZkNThkYTY1YTk5NmY1MmIyZGU5OGFhYTgxMWVhMDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG6/5GLwIC/BlCKEjaBFa7hnD4NN
8e9OTjsmSdzp0NSvYEskdMHgnVIdFsGcUS5VS4Swh1dNJqoxRR/el/iqN05bPHJ4
Esj1wfSJywtAUu9Us7xB9xhDARho6m4iaOMKGjM5kp9HCObjNU1o1HOOZ6iJB6su
pwzwt7MhkBHi5oJ/wK5iXGR6ZfiLCVstvBiCdf1F9zkn1GnVHHqBSigG/zhlto4Q
lswu+v2+PGOLo+BTGf2Dd3MOBNsl5lnL6kAqWuKg4lIXnP7KExMSMIncnhlZtwwA
EhLBR7GLFixlxu+vl7uXSSIFslEPnuoBa9aFuuDx5bkKPEIklczTJPnHFQIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFECYnGn9WNplqZb1Ky3piqqBHqAjMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvUUppY2FmMVkybVdwbHZVckxlbUtxb0Vlb0NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljB+BAIAATB4MAwDBAdN
WoADBABNWoIwDAMEAk1ahAMEAE1ahgMEAU1aiAMEAE1ajDAMAwQBTVqOAwQATVqQ
MAwDBAFNWpIDBABNWpQwDAMEAE1amQMEAE1amgMEANXRigMEANXRjzAMAwQA1dGR
AwQA1dGSAwQA1dGWAwQA1dGdMBQEAgACMA4DBQAqBCnCAwUAKgQpxzANBgkqhkiG
9w0BAQsFAAOCAQEAGlqn0iXqHJDULQYpdgFFzENH5kQ0nRAqj5X+NYqJ8nFRJmzZ
7YGG5VURuOiFY0Mu5NNrCvNVtO1APqHU/0nZqqSufNgYltgU/FvdKatIad8Dxorb
BUp5I7lixOAjLkHXYV64QD5MyBM2avQOoOF+sGQwiv1HQxXOFgRVceE5QrtBmoey
8AginNgMd9vIxbFujMCbPdAcM0Dew14fRsizaI1hBNZM6FD1DyPl8TnSag7ajZW6
vbGxLB05aBckty7yIl+LwmHJlfy6JpU6pazL1WAfKtT6Mh4zCka3YqFq7+MK89yv
2Ben9fHag2fqcKYSvK5CTxuL8KX1i7iCr1zk8A==
-----END CERTIFICATE-----
Generated at Thu Feb 1 16:26:10 2024 by rpki-client on console-ams.rpki-client.org