Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/SkLgX9YZqvTEbDb9Uhn6pHyk2Ck.roa
File: SkLgX9YZqvTEbDb9Uhn6pHyk2Ck.roa (raw, json)
Hash identifier: 701zTK2/B/iB4djE+7zKLt1mv4LeKjUR4/zw2reOZy4=
Subject key identifier: 4A:42:E0:5F:D6:19:AA:F4:C4:6C:36:FD:52:19:FA:A4:7C:A4:D8:29
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018FF4C822E07184D2CEA45CD8F005A455EA
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/SkLgX9YZqvTEbDb9Uhn6pHyk2Ck.roa
Signing time: Fri 07 Jun 2024 22:18:27 +0000
ROA not before: Fri 07 Jun 2024 22:18:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 77.90.145.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 15:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f4:c8:22:e0:71:84:d2:ce:a4:5c:d8:f0:05:a4:55:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 7 22:18:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a42e05fd619aaf4c46c36fd5219faa47ca4d829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:06:af:94:59:a9:b0:c4:b4:83:69:ee:51:a8:
45:30:2e:a4:22:d1:4c:03:75:d3:9b:ce:4c:a0:d2:
a8:af:00:ae:8b:11:52:b5:d4:c7:09:c4:59:55:e9:
2b:9e:57:90:bd:3c:57:42:e0:95:6b:f3:3a:19:f7:
03:26:e9:db:53:18:42:84:cb:ab:3b:bc:38:f0:95:
86:09:00:cf:7e:cc:8f:d7:76:71:43:10:8e:0a:e6:
59:c1:28:7d:a7:57:b6:6c:bd:8d:5a:fc:a1:71:0c:
b1:c0:fb:a0:9e:d6:a5:ec:5b:4c:c5:68:75:12:2b:
ed:75:54:fa:2c:77:be:ea:04:e5:25:71:79:38:b8:
c4:75:12:32:0f:20:40:98:30:1f:b7:1e:14:c0:72:
70:d6:57:0d:a1:1c:e3:e3:dd:8c:75:9e:af:e7:bd:
4d:e7:83:33:f6:48:b0:fe:4a:97:94:21:29:1b:43:
03:75:96:82:51:b8:a2:99:cd:80:58:89:78:cd:2f:
d9:6c:29:c3:2b:3a:35:21:34:74:98:8d:7b:6a:f5:
8c:cf:59:42:81:1e:c8:7e:99:20:8b:64:20:46:20:
2f:b3:ed:de:bd:79:c4:b0:30:16:a2:1f:c1:f6:ee:
57:c6:17:78:13:7b:e7:9d:0d:92:6c:df:a8:a3:02:
50:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:42:E0:5F:D6:19:AA:F4:C4:6C:36:FD:52:19:FA:A4:7C:A4:D8:29
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/SkLgX9YZqvTEbDb9Uhn6pHyk2Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.145.0/24
77.90.154.0/24
77.90.188.0/24
185.230.15.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:7e:de:67:ea:d5:3c:36:1c:2e:93:e7:97:8b:a2:ed:0c:2a:
0e:4a:2a:a2:aa:41:dc:95:bd:c6:0f:e4:e0:c6:d0:36:1f:46:
7d:b9:43:49:33:67:9d:de:ba:7c:6a:5e:de:63:8d:bc:09:da:
4b:b0:19:43:81:16:1d:90:5b:34:4f:d5:1c:e5:c5:e0:30:a8:
03:87:cd:34:dd:ed:26:2f:23:2f:fb:6e:ea:26:b0:4a:80:ba:
74:ac:c9:e4:b6:b8:9c:e7:1b:31:5c:ad:4e:74:d4:8f:e9:32:
0b:a4:3d:da:49:f0:56:8b:84:8c:f8:59:40:4a:4e:4f:5c:c8:
bb:84:63:22:83:84:e2:fb:61:48:17:e8:43:35:8b:da:4c:a5:
a2:37:22:01:00:d1:b8:ae:43:b2:bb:76:b9:29:d1:fc:01:39:
da:6a:d3:eb:01:9b:dd:d3:fd:d0:92:a5:d2:22:c1:63:ea:b3:
dc:78:43:35:e8:1b:d3:63:c5:1b:d2:d9:e1:46:ea:9a:0b:6f:
da:ff:af:2c:23:9a:60:57:d8:2f:32:b3:6c:9d:77:a9:6d:e2:
6b:e7:a9:8a:35:3c:47:15:42:92:4c:37:8d:16:c8:cc:74:99:
60:04:62:f3:7b:a6:22:27:a2:a3:2a:42:6c:fb:00:99:19:06:
48:11:41:cc
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY/0yCLgcYTSzqRc2PAFpFXqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjQwNjA3MjIxODI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTQyZTA1ZmQ2MTlhYWY0YzQ2YzM2ZmQ1MjE5ZmFhNDdjYTRkODI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQavlFmpsMS0g2nuUahFMC6kItFM
A3XTm85MoNKorwCuixFStdTHCcRZVekrnleQvTxXQuCVa/M6GfcDJunbUxhChMur
O7w48JWGCQDPfsyP13ZxQxCOCuZZwSh9p1e2bL2NWvyhcQyxwPugntal7FtMxWh1
EivtdVT6LHe+6gTlJXF5OLjEdRIyDyBAmDAftx4UwHJw1lcNoRzj492MdZ6v571N
54Mz9kiw/kqXlCEpG0MDdZaCUbiimc2AWIl4zS/ZbCnDKzo1ITR0mI17avWMz1lC
gR7Ifpkgi2QgRiAvs+3evXnEsDAWoh/B9u5Xxhd4E3vnnQ2SbN+oowJQnwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEpC4F/WGar0xGw2/VIZ+qR8pNgpMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvU2tMZ1g5WVpxdlRFYkRiOVVobjZwSHlrMkNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATVqRAwQA
TVqaAwQATVq8AwQAueYPMA0GCSqGSIb3DQEBCwUAA4IBAQBeft5n6tU8Nhwuk+eX
i6LtDCoOSiqiqkHclb3GD+TgxtA2H0Z9uUNJM2ed3rp8al7eY428CdpLsBlDgRYd
kFs0T9Uc5cXgMKgDh8003e0mLyMv+27qJrBKgLp0rMnktric5xsxXK1OdNSP6TIL
pD3aSfBWi4SM+FlASk5PXMi7hGMig4Ti+2FIF+hDNYvaTKWiNyIBANG4rkOyu3a5
KdH8ATnaatPrAZvd0/3QkqXSIsFj6rPceEM16BvTY8Ub0tnhRuqaC2/a/68sI5pg
V9gvMrNsnXepbeJr56mKNTxHFUKSTDeNFsjMdJlgBGLze6YiJ6KjKkJs+wCZGQZI
EUHM
-----END CERTIFICATE-----
Generated at Tue Jun 11 17:40:39 2024 by rpki-client on console-fra.rpki-client.org