Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/QkfgWifhVrMU1ZLzoAOXd4yxNFo.roa
File: QkfgWifhVrMU1ZLzoAOXd4yxNFo.roa (raw, json)
Hash identifier: RxQKd6blhI1w7SBzKGb0cSGr7CcQUx3zLJqnKZrGfHI=
Subject key identifier: 42:47:E0:5A:27:E1:56:B3:14:D5:92:F3:A0:03:97:77:8C:B1:34:5A
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018AFC17E165B096622BD421B14441381972
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/QkfgWifhVrMU1ZLzoAOXd4yxNFo.roa
Signing time: Wed 04 Oct 2023 19:08:57 +0000
ROA not before: Wed 04 Oct 2023 19:08:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 77.90.188.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fc:17:e1:65:b0:96:62:2b:d4:21:b1:44:41:38:19:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 4 19:08:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4247e05a27e156b314d592f3a00397778cb1345a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6d:0e:50:34:79:8f:3b:96:8e:ce:1e:06:a3:
0e:68:54:cc:cf:6d:94:82:8a:90:34:c2:03:a5:7a:
02:88:00:03:68:aa:95:a0:51:99:03:a8:9c:1d:f8:
b1:62:f8:70:3a:c9:1d:ce:34:f8:50:6a:4a:20:f8:
b2:0f:42:f6:1e:73:ad:c4:20:c0:c0:90:aa:6d:ad:
c1:46:fe:73:96:bb:97:1e:32:98:ff:12:d8:45:38:
f6:b9:0f:8e:ce:02:3f:03:33:4d:7b:40:1e:58:55:
7c:a4:ff:74:c5:6b:19:00:3d:4d:f0:c7:f1:75:fe:
49:70:17:7e:a9:c4:5c:b7:78:b8:ec:a0:04:b2:5f:
e2:5d:b5:c1:56:2d:6a:8f:1e:b4:19:9f:17:43:ee:
bd:2f:04:08:9f:b8:16:5f:7d:97:2c:80:bd:ae:33:
c7:09:9b:fb:06:bd:56:60:ce:80:e1:6e:c5:12:38:
68:69:9d:98:c0:01:88:d7:96:1f:81:07:83:ff:f5:
75:ee:ad:54:6c:96:de:d5:68:20:97:03:3e:b4:13:
11:45:89:78:26:e4:ab:50:55:df:14:c0:22:a3:ed:
e0:1c:b7:36:6d:4e:ac:45:06:50:94:ec:77:ea:27:
de:1e:50:54:a3:6a:ce:0c:35:34:35:5f:67:10:bf:
ca:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:47:E0:5A:27:E1:56:B3:14:D5:92:F3:A0:03:97:77:8C:B1:34:5A
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/QkfgWifhVrMU1ZLzoAOXd4yxNFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.153.0/24
77.90.188.0/24
185.230.14.0/24
213.209.150.0/24
Signature Algorithm: sha256WithRSAEncryption
90:eb:21:b9:ed:3e:3e:2b:5c:14:1d:f5:54:66:8e:77:6c:e9:
5e:47:fa:92:35:9b:f5:53:e3:e4:6e:8b:98:b6:f7:a8:b5:03:
94:33:4f:72:b2:85:06:f4:26:d7:50:9f:b8:87:16:79:ee:a0:
9f:0d:1b:24:e9:8c:51:a4:db:2a:23:9d:5e:17:69:50:d1:3d:
37:c8:5a:ad:dd:d4:40:89:e7:7f:3e:d7:4e:6e:5e:41:6f:9d:
fe:01:39:ee:6d:53:cb:66:2f:46:d9:2e:12:19:c2:74:71:df:
cb:15:c9:74:9f:3a:73:af:34:74:ca:5a:16:87:ff:1b:21:c9:
8e:59:5e:11:c2:9e:ac:d5:1c:e8:61:9f:e2:aa:14:e1:f8:8e:
5e:75:ed:9b:8a:1d:35:6c:b9:c6:4a:fe:7e:09:cc:7f:bf:79:
2c:5d:71:3c:9a:34:a2:e2:44:d3:34:76:57:3e:44:93:86:f0:
6b:c3:68:e2:2d:8c:df:4b:43:fa:99:b6:34:b9:1a:82:d7:f0:
14:91:89:2e:88:f7:85:da:59:c3:47:19:d4:4e:af:37:ab:8d:
13:ab:82:fd:69:86:45:38:e1:44:3e:c5:fc:e9:f4:a6:ed:77:
20:d4:c3:1d:7b:47:09:36:07:b9:37:1f:db:c7:94:36:1c:90:
fd:3c:49:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 29 19:01:24 2023 by rpki-client on console-fra.rpki-client.org