Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/VhiZhhRJUyBSE9W7QgDqsmY0mKo.roa
File: VhiZhhRJUyBSE9W7QgDqsmY0mKo.roa (raw, json)
Hash identifier: izlc91TS0lelcS8lp+tektaUnZGZCADlsL12ofcCia0=
Subject key identifier: 56:18:99:86:14:49:53:20:52:13:D5:BB:42:00:EA:B2:66:34:98:AA
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01881F1B6AE13BCFE8FD1E73B722F2B28DF8
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/VhiZhhRJUyBSE9W7QgDqsmY0mKo.roa
Signing time: Mon 15 May 2023 11:11:10 +0000
ROA not before: Mon 15 May 2023 11:11:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 77.90.159.0/24 maxlen: 24
77.90.158.0/24 maxlen: 24
77.90.165.0/24 maxlen: 24
77.90.160.0/24 maxlen: 24
77.90.163.0/24 maxlen: 24
77.90.161.0/24 maxlen: 24
77.90.162.0/24 maxlen: 24
77.90.171.0/24 maxlen: 24
77.90.172.0/24 maxlen: 24
77.90.167.0/24 maxlen: 24
77.90.170.0/24 maxlen: 24
77.90.168.0/24 maxlen: 24
77.90.169.0/24 maxlen: 24
77.90.174.0/24 maxlen: 24
77.90.177.0/24 maxlen: 24
77.90.175.0/24 maxlen: 24
77.90.182.0/24 maxlen: 24
77.90.186.0/24 maxlen: 24
213.209.131.0/24 maxlen: 24
213.209.139.0/24 maxlen: 24
213.209.137.0/24 maxlen: 24
213.209.135.0/24 maxlen: 24
213.209.152.0/24 maxlen: 24
213.209.154.0/24 maxlen: 24
213.209.155.0/24 maxlen: 24
213.209.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1f:1b:6a:e1:3b:cf:e8:fd:1e:73:b7:22:f2:b2:8d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: May 15 11:11:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56189986144953205213d5bb4200eab2663498aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:16:ba:26:ea:5c:ab:52:7d:56:08:44:08:
0e:f9:7a:2e:58:bc:97:6f:d9:ac:60:77:5e:75:69:
37:e9:19:d0:89:e3:15:5d:80:f5:53:78:1c:30:99:
f9:cf:78:ff:8c:78:16:8e:cb:9e:8c:44:0a:33:6e:
43:a9:b0:8b:a9:c5:9d:13:6a:b3:de:4f:93:f9:99:
9c:75:3a:53:71:21:1f:c5:a1:de:14:06:db:42:c9:
03:da:4c:a9:29:bb:5b:84:22:93:b9:5e:0b:aa:58:
b9:bc:e4:e4:6a:02:f3:1a:e7:36:e5:a6:36:b0:c9:
a6:c6:40:07:1c:82:76:76:ca:fa:46:2b:36:58:53:
9f:a9:68:a3:8f:61:d1:8b:e4:f4:f3:b2:c0:f7:48:
08:52:09:2d:69:9d:6a:42:d8:0e:27:ed:02:38:cd:
0d:c3:ea:c2:65:12:af:17:00:fe:1f:a0:fe:14:b9:
b0:14:7e:9a:1a:55:f2:a9:fb:c4:b2:2a:ca:e0:9d:
96:90:65:de:81:9f:cd:29:88:a5:c7:f0:7f:44:3b:
0d:b5:03:b1:f3:98:49:17:54:be:0f:2d:e9:17:fb:
ba:64:f3:d1:be:a9:fb:b1:99:5b:63:39:9d:bb:53:
43:df:a1:80:3b:5b:90:73:22:52:1c:e9:8e:cf:e7:
3a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:18:99:86:14:49:53:20:52:13:D5:BB:42:00:EA:B2:66:34:98:AA
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/VhiZhhRJUyBSE9W7QgDqsmY0mKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.158.0-77.90.163.255
77.90.165.0/24
77.90.167.0-77.90.172.255
77.90.174.0/23
77.90.177.0/24
77.90.182.0/24
77.90.186.0/24
213.209.131.0/24
213.209.135.0/24
213.209.137.0/24
213.209.139.0/24
213.209.152.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:f5:00:de:c9:3c:d5:fe:2d:69:91:45:78:1b:97:cb:ca:7e:
07:6a:a0:88:1f:ac:b1:ec:59:24:fc:db:30:0c:d0:5f:69:1b:
81:4f:16:3a:e9:fe:be:f7:a5:5a:ab:15:c2:99:4f:04:bf:60:
20:b6:35:bd:3f:27:b3:22:7a:00:d7:e5:09:18:f2:36:93:be:
1b:b8:d8:72:bc:cb:5a:3e:82:a4:04:2b:bc:ea:c8:fd:18:76:
9b:0f:ce:4b:51:7b:35:33:6f:96:af:89:07:25:ee:54:22:ac:
e6:eb:5f:58:bb:e6:02:f8:bd:6f:eb:14:ca:cc:9b:fb:71:01:
36:d0:07:29:a7:bb:f4:3e:18:cf:7a:7b:61:73:6c:c3:fe:20:
59:27:ad:f8:cd:f2:2c:56:3b:78:a1:0b:eb:60:e4:97:0f:26:
db:04:d8:4a:3d:ec:ad:0a:29:6d:2f:a8:97:36:c8:10:80:bd:
dc:0e:18:85:54:93:d1:c2:2c:bf:60:8c:5d:96:84:61:1c:52:
b9:ff:11:43:77:af:51:91:c3:65:1a:75:15:ae:26:ff:c6:bd:
60:dd:d5:7d:cf:03:a8:08:58:69:5c:f0:1b:e9:46:1a:b2:50:
ab:8b:f1:c1:f6:70:19:10:4a:3c:72:65:3e:81:27:ea:42:f6:
10:3e:6d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:10 2024 by rpki-client on console-fra.rpki-client.org