Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/VnlKZzoIY0SBvYlcUSoMeA6fDLE.roa
File: VnlKZzoIY0SBvYlcUSoMeA6fDLE.roa (raw, json)
Hash identifier: i3J1OOM+XX6AY38YUVT7/TBJB5eaCJtMYOyrU1mxS1c=
Subject key identifier: 56:79:4A:67:3A:08:63:44:81:BD:89:5C:51:2A:0C:78:0E:9F:0C:B1
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0193253684570F995AFBBF533AF230D4F4D8
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/VnlKZzoIY0SBvYlcUSoMeA6fDLE.roa
Signing time: Wed 13 Nov 2024 11:09:09 +0000
ROA not before: Wed 13 Nov 2024 11:09:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.128.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.139.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 21 Nov 2024 16:41:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:25:36:84:57:0f:99:5a:fb:bf:53:3a:f2:30:d4:f4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Nov 13 11:09:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56794a673a08634481bd895c512a0c780e9f0cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:aa:d8:de:7a:18:10:ba:58:5e:b7:7d:44:
66:cb:75:07:0a:be:70:23:15:9a:5f:60:4a:e9:aa:
81:51:a3:b5:f9:9a:7b:63:4d:1e:a6:63:16:5a:4a:
f6:4b:3f:87:8e:f5:fb:5d:f3:1d:fa:4b:80:46:44:
a7:f7:f6:b7:51:e3:c0:e0:55:db:4e:e6:bb:f1:ca:
93:d9:be:bb:f5:26:51:9c:82:37:3a:2e:1a:14:b3:
d1:5a:c7:7f:4e:62:c7:93:b2:00:ae:63:64:d9:76:
2d:42:c9:17:b7:4f:0b:6d:b0:5b:e7:94:1f:b7:14:
16:19:df:15:0a:5c:28:ff:b2:ac:66:2c:7e:36:aa:
0e:6c:10:b9:02:e3:37:c4:73:ba:b4:5a:df:0a:a1:
3b:3e:9c:21:62:29:64:c9:8b:72:8f:a8:ee:75:84:
4c:5c:75:5f:67:3c:95:6d:a2:d2:ac:4d:1f:e1:30:
a2:93:61:b5:83:98:3f:c9:3d:ec:f7:61:78:23:f3:
ba:37:88:b1:e7:96:99:a9:68:7c:c3:a1:87:62:88:
34:09:04:e5:3d:fe:60:0d:ca:27:e7:b3:87:75:ca:
65:c7:dd:02:35:e6:df:07:eb:42:29:98:b2:3d:1e:
97:30:3f:82:7b:47:2e:51:b1:3b:cd:6a:86:b6:f9:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:79:4A:67:3A:08:63:44:81:BD:89:5C:51:2A:0C:78:0E:9F:0C:B1
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/VnlKZzoIY0SBvYlcUSoMeA6fDLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.139.0-77.90.140.255
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
213.209.129.0/24
213.209.138.0/24
213.209.143.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
09:2a:ab:bd:9f:2d:d3:e5:15:30:36:c9:df:1c:5b:d1:12:4e:
c5:1a:41:35:ea:87:d3:89:76:55:31:c2:80:89:f4:4f:22:72:
aa:7a:85:97:66:50:a0:78:2d:f7:e2:ba:1f:3e:72:d9:39:0d:
f0:3d:55:61:65:8b:05:e0:b8:05:5d:73:e6:63:1e:ee:10:4a:
12:76:73:34:66:78:17:e5:8a:b0:30:55:7a:a4:fb:95:0d:f0:
08:75:33:4e:91:ad:9b:a2:ae:0e:9e:59:fd:d2:62:b4:75:2c:
36:fc:8a:de:57:88:5f:50:cc:1b:88:e2:e0:a0:8c:80:14:4c:
1b:3f:80:56:06:1a:32:ed:e0:d4:99:63:62:a4:50:8d:c3:91:
64:34:d4:28:ac:5f:8b:02:59:86:41:9e:50:c7:36:5f:88:99:
4d:4e:eb:b2:a0:64:d8:7c:73:48:a5:3d:21:fd:86:3f:6c:eb:
21:fb:dc:8c:23:86:5c:2c:26:23:6d:57:8e:6a:ae:07:9f:2c:
eb:71:73:0e:d3:5b:ff:ae:55:54:79:d5:5b:b5:34:32:30:3d:
dc:93:92:d2:b2:2d:df:59:38:6b:fa:82:de:13:15:66:04:a5:
db:77:ec:51:b6:f4:bb:40:83:c1:96:5f:8a:77:7d:2d:66:90:
f0:40:db:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:49 2024 by rpki-client on console-ams.rpki-client.org