Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ZEABX7CNg0rRg7fquoJa582aFjc.roa
File: ZEABX7CNg0rRg7fquoJa582aFjc.roa (raw, json)
Hash identifier: aW/H5e/6ZMtiNUbzexOO8asl+uKdt0Kr2zVeWttHibo=
Subject key identifier: 64:40:01:5F:B0:8D:83:4A:D1:83:B7:EA:BA:82:5A:E7:CD:9A:16:37
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01856F825A3F2FBBC27E2632A69BBCCC8F1E
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ZEABX7CNg0rRg7fquoJa582aFjc.roa
Signing time: Sun 01 Jan 2023 22:44:51 +0000
ROA not before: Sun 01 Jan 2023 22:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 77.90.187.0/24 maxlen: 24
213.209.132.0/24 maxlen: 24
213.209.148.0/24 maxlen: 24
77.90.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:5a:3f:2f:bb:c2:7e:26:32:a6:9b:bc:cc:8f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 1 22:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6440015fb08d834ad183b7eaba825ae7cd9a1637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:24:49:9f:82:b6:aa:19:f5:0b:27:cf:8b:f2:
e8:7c:3d:00:21:11:2a:ae:e6:41:a9:d1:16:98:d2:
ca:64:22:14:73:22:d6:21:11:3a:b5:6f:26:b2:36:
7d:54:b1:98:58:e9:c9:3e:c9:b8:b7:ae:e3:78:63:
64:2f:fd:bd:a7:5c:cc:26:3e:c9:69:bd:ab:a3:b6:
93:84:33:0b:f3:c3:ba:2e:dd:a7:92:60:14:cd:e4:
49:78:67:b2:8e:9f:c7:7b:75:c0:ac:bf:9f:c0:c5:
35:4c:2a:85:d9:15:d7:70:de:35:61:ef:a4:2c:9a:
cd:17:cb:52:dd:7a:ba:e2:14:12:22:0f:4d:e3:ef:
90:b5:29:57:a5:b0:26:77:14:a6:04:3b:12:e8:e2:
40:aa:48:1e:6c:a4:0c:d2:1f:fd:78:aa:7a:38:c5:
2c:14:ac:21:17:b4:d8:7f:66:1e:a5:42:11:9a:53:
4e:ed:14:2b:64:fa:7a:12:4a:80:36:90:b0:33:bf:
0a:10:b3:68:ce:ea:9c:78:c0:96:3d:f6:26:88:f0:
c2:34:86:31:5d:c3:c4:79:a9:7a:ca:a2:3e:3c:29:
81:5f:50:87:a3:ff:5b:5e:65:4b:88:1e:12:ff:f0:
af:90:c4:4b:69:8d:a2:c8:90:95:08:f3:77:ac:34:
57:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:40:01:5F:B0:8D:83:4A:D1:83:B7:EA:BA:82:5A:E7:CD:9A:16:37
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ZEABX7CNg0rRg7fquoJa582aFjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.176.0/24
77.90.187.0/24
213.209.132.0/24
213.209.148.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:cb:c1:6e:28:65:c0:13:6c:d1:c1:30:2e:22:d9:1c:33:63:
a5:5d:74:d7:59:42:95:e3:69:ed:30:5e:2f:5f:1f:38:a1:9d:
e7:8f:d5:d3:fb:a5:77:2b:bd:51:25:bb:25:63:2e:c2:74:56:
ca:05:43:97:30:18:3e:d5:83:31:42:ed:72:a6:e8:9a:88:86:
b2:dd:6b:50:26:05:d4:b4:b5:89:06:d4:5e:d0:92:ee:16:b8:
38:01:2a:44:32:c4:6d:e1:ea:e4:c9:90:ea:3e:39:ae:97:61:
5c:d8:56:10:e9:6f:2c:a3:53:11:81:f4:67:86:28:37:21:4e:
90:46:c5:b2:ed:d5:17:88:bc:2c:42:09:b8:5d:f6:63:e8:15:
0c:0b:61:d8:39:03:5d:7d:ea:76:db:8a:96:92:0f:33:fd:4d:
68:8e:f3:9a:2e:0d:1d:0d:bc:85:51:de:67:1e:f0:79:e3:9a:
64:5d:b9:07:cb:b4:af:44:3e:8a:dd:e3:39:7e:74:ee:c7:a4:
14:df:c0:4f:b3:93:10:e5:95:12:88:a5:f9:e7:ec:fd:ab:85:
10:5e:93:c2:1e:8c:04:de:28:39:51:b3:42:58:8e:a6:04:50:
58:31:c6:e5:f4:37:f0:97:53:fa:99:87:ce:99:a5:1c:50:ec:
72:31:8c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 16:48:38 2023 by rpki-client on console-fra.rpki-client.org