Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Sk7AGIqWfnJjG5MWv5DQSea7F58.roa
File: Sk7AGIqWfnJjG5MWv5DQSea7F58.roa (raw, json)
Hash identifier: 0mDpm8he62DAX06PVGrWjSU8Wdp7zZdlMRATU6cnGtc=
Subject key identifier: 4A:4E:C0:18:8A:96:7E:72:63:1B:93:16:BF:90:D0:49:E6:BB:17:9F
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018798630F89A367908F0FFDAC890BCC26C5
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Sk7AGIqWfnJjG5MWv5DQSea7F58.roa
Signing time: Wed 19 Apr 2023 07:20:41 +0000
ROA not before: Wed 19 Apr 2023 07:20:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.178.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1280:24::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:98:63:0f:89:a3:67:90:8f:0f:fd:ac:89:0b:cc:26:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 19 07:20:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a4ec0188a967e72631b9316bf90d049e6bb179f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e6:98:01:31:b3:bf:4f:75:25:a3:4c:19:d0:
18:f1:c7:b2:b6:ad:52:17:55:95:30:99:13:d0:fb:
18:18:bb:7f:2a:65:8b:73:78:7b:9a:96:2a:9f:81:
af:cb:e8:4f:b6:1e:2b:6f:a7:83:46:ee:50:c9:19:
23:8d:e8:8e:c8:77:9a:a5:af:19:d1:fa:d5:53:83:
cb:e4:bc:55:fa:18:8e:e1:da:57:7d:92:b2:3c:4d:
30:91:46:ed:f8:5a:30:83:c0:e7:d6:95:ce:19:04:
85:0c:58:ca:34:b9:c9:21:0d:d2:46:9c:8b:5b:48:
57:94:95:74:af:4e:a5:93:e9:9a:c0:d3:2e:80:7a:
ca:98:c0:17:4e:66:57:1c:65:85:45:3e:dd:b6:9f:
fa:12:3d:91:07:82:21:22:04:cb:68:df:be:e6:60:
1f:24:83:9e:b1:b4:21:2e:9a:3f:0b:2e:6c:63:1d:
26:1a:a7:87:1c:a2:5b:f9:cb:bf:7e:22:38:b4:fd:
67:21:0e:21:79:4e:c7:bb:6a:1e:97:90:0b:72:bc:
5d:b2:4c:19:5b:92:9a:f4:fe:8a:71:72:b5:1e:af:
46:46:d7:eb:f1:92:55:c4:c7:75:9c:7c:27:35:ad:
21:2d:83:7b:ef:f9:55:cb:f3:5f:3c:3b:1b:7b:58:
cf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4E:C0:18:8A:96:7E:72:63:1B:93:16:BF:90:D0:49:E6:BB:17:9F
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Sk7AGIqWfnJjG5MWv5DQSea7F58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.178.0/24
213.209.138.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
6a:12:16:1b:fd:d6:26:db:f0:08:26:e0:02:42:eb:ec:5d:30:
59:47:38:22:04:f8:2e:fb:f7:e3:c0:2e:da:58:c5:3f:72:10:
a2:e9:29:8b:66:84:28:13:be:3d:2d:be:d0:02:f9:a0:49:8d:
49:de:0b:6b:fc:37:6a:fd:cc:67:7e:51:4a:9e:27:52:2b:29:
8a:7b:bf:9c:6f:68:0b:5d:2b:26:37:ae:19:03:9d:45:ea:d2:
90:fd:08:ff:f2:8c:b2:88:a5:4c:d8:34:32:05:eb:d3:53:be:
bd:0f:b1:19:bb:b2:b3:77:ef:cd:b2:46:d1:e4:06:d7:f0:03:
98:84:13:f3:9a:61:b1:3f:f2:e5:e3:34:7f:57:f9:2b:58:80:
92:5c:4a:a1:1c:68:38:09:1f:ab:ce:f0:15:db:5d:5b:46:31:
7f:05:4b:0e:d0:5c:66:6a:7c:d1:b2:8b:65:e2:20:4e:01:0b:
99:36:f9:27:f0:4e:41:dd:18:6a:d1:27:91:8f:fa:c8:f2:e8:
66:d1:19:c2:7b:5b:89:9e:e3:a1:d0:06:34:e0:36:5c:34:82:
ff:f6:60:2e:87:61:14:18:8f:f5:05:f2:c1:ec:09:b8:ce:2d:
9e:bf:00:53:84:1d:82:82:ff:ed:a2:2a:6d:2a:83:37:61:c9:
e1:f7:40:16
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAYeYYw+Jo2eQjw/9rIkLzCbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjMwNDE5MDcyMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTRlYzAxODhhOTY3ZTcyNjMxYjkzMTZiZjkwZDA0OWU2YmIxNzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+aYATGzv091JaNMGdAY8ceytq1S
F1WVMJkT0PsYGLt/KmWLc3h7mpYqn4Gvy+hPth4rb6eDRu5QyRkjjeiOyHeapa8Z
0frVU4PL5LxV+hiO4dpXfZKyPE0wkUbt+Fowg8Dn1pXOGQSFDFjKNLnJIQ3SRpyL
W0hXlJV0r06lk+mawNMugHrKmMAXTmZXHGWFRT7dtp/6Ej2RB4IhIgTLaN++5mAf
JIOesbQhLpo/Cy5sYx0mGqeHHKJb+cu/fiI4tP1nIQ4heU7Hu2oel5ALcrxdskwZ
W5Ka9P6KcXK1Hq9GRtfr8ZJVxMd1nHwnNa0hLYN77/lVy/NfPDsbe1jPVwIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFEpOwBiKln5yYxuTFr+Q0EnmuxefMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvU2s3QUdJcVdmbkpqRzVNV3Y1RFFTZWE3RjU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBQBAIAATBKMAwDBAdNWoAD
BABNWoIwDAMEAk1ahAMEAU1aiAMEAE1ajDAMAwQBTVqOAwQATVqQMAwDBAFNWpID
BABNWpQDBABNWrIDBADV0YowFAQCAAIwDgMFACoEKcIDBQAqBCnHMA0GCSqGSIb3
DQEBCwUAA4IBAQBqEhYb/dYm2/AIJuACQuvsXTBZRzgiBPgu+/fjwC7aWMU/chCi
6SmLZoQoE749Lb7QAvmgSY1J3gtr/Ddq/cxnflFKnidSKymKe7+cb2gLXSsmN64Z
A51F6tKQ/Qj/8oyyiKVM2DQyBevTU769D7EZu7Kzd+/NskbR5AbX8AOYhBPzmmGx
P/Ll4zR/V/krWICSXEqhHGg4CR+rzvAV211bRjF/BUsO0FxmanzRsotl4iBOAQuZ
Nvkn8E5B3Rhq0SeRj/rI8uhm0RnCe1uJnuOh0AY04DZcNIL/9mAuh2EUGI/1BfLB
7Am4zi2evwBThB2Cgv/toiptKoM3Ycnh90AW
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org