Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/cJg7e8D51C1qvtDw91sHefHvS90.roa
File: cJg7e8D51C1qvtDw91sHefHvS90.roa (raw, json)
Hash identifier: HfuvnWyF1XWRnBpmf0QFkvZG4smGP9J5Aqd6aS1Sx7M=
Subject key identifier: 70:98:3B:7B:C0:F9:D4:2D:6A:BE:D0:F0:F7:5B:07:79:F1:EF:4B:DD
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019229C3787E1372C2937068A91D579F0B01
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/cJg7e8D51C1qvtDw91sHefHvS90.roa
Signing time: Wed 25 Sep 2024 15:18:49 +0000
ROA not before: Wed 25 Sep 2024 15:18:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134176
IP address blocks: 77.90.154.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:29:c3:78:7e:13:72:c2:93:70:68:a9:1d:57:9f:0b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Sep 25 15:18:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70983b7bc0f9d42d6abed0f0f75b0779f1ef4bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ab:81:c5:c7:f1:00:8d:b0:cc:00:eb:1a:a2:
50:8d:72:71:42:4e:b3:bd:1e:43:13:c8:fe:df:0a:
ef:53:b0:60:17:8f:8a:33:b7:00:61:7d:ad:d1:b8:
3f:46:3c:4b:bb:1d:bd:fe:0e:8c:bc:66:f4:72:e1:
54:ec:17:69:eb:9d:0e:d5:bf:20:66:e7:ab:6a:4f:
ed:be:c6:ac:07:0e:22:09:32:2f:3d:61:19:40:7a:
ad:8d:8d:e9:8a:97:80:fb:a0:08:24:25:26:47:fc:
08:17:6c:cc:20:e1:9f:26:5a:ac:e7:4b:f0:2a:5c:
20:13:fb:25:fe:f8:28:9f:31:b5:d8:c9:6e:71:a3:
5b:72:a5:5b:8b:0c:22:88:67:95:8c:6a:1b:9a:cb:
f3:7b:01:27:59:5e:4c:b4:fe:3c:ec:b0:73:fc:09:
0e:28:bd:9a:87:ab:a4:9f:bb:69:a0:9a:75:80:58:
41:6d:8a:27:e1:5e:82:41:de:5c:4c:1a:88:75:94:
a5:e9:26:85:f3:d3:ad:e3:49:3b:40:a9:e5:3a:14:
6f:6a:a4:80:20:80:c3:da:ce:d0:ec:d0:3d:22:9e:
3c:91:ea:79:08:0e:3b:9c:44:d6:91:16:e3:3a:70:
46:98:82:b0:30:16:af:42:9c:7e:49:c2:00:26:c3:
ed:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:98:3B:7B:C0:F9:D4:2D:6A:BE:D0:F0:F7:5B:07:79:F1:EF:4B:DD
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/cJg7e8D51C1qvtDw91sHefHvS90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.154.0/24
185.230.14.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:cf:22:a4:88:ce:99:4e:4e:d6:ce:e7:f8:80:11:62:74:a1:
8a:d5:39:30:70:6f:2c:0c:c2:0e:14:34:ff:1f:37:2a:96:bf:
1e:53:eb:59:34:58:c5:41:de:19:75:7d:64:b0:23:62:95:5b:
60:c9:4c:36:0e:c0:67:f2:b2:00:14:dc:92:ce:25:b3:79:4b:
b6:6d:42:9f:4a:4f:87:25:57:89:d1:51:10:81:c6:f8:3e:b6:
8c:eb:c5:48:41:25:b5:bd:9c:bd:d0:de:e3:90:1e:bc:34:ab:
1f:0d:3b:3a:ac:d4:7a:62:c2:ef:7f:cd:bf:23:70:75:9c:df:
27:68:2e:8d:81:8d:3e:28:b9:df:ab:bd:a7:fe:e3:ad:a1:4b:
e6:da:a1:ee:98:1d:18:89:dc:16:84:00:70:02:97:86:4e:80:
17:48:ce:63:ba:55:48:ef:df:1b:2a:ab:ed:73:5b:91:72:c5:
63:85:b3:f9:cc:23:34:bb:5c:13:b1:aa:7d:05:59:5d:e5:a5:
47:85:5d:35:19:f8:c5:cf:85:fd:c5:53:89:38:34:66:c1:ec:
f8:1d:a3:25:ef:5a:58:c0:7f:1a:43:e0:3b:ce:2c:d6:48:20:
70:fb:95:f6:6d:fe:68:36:52:7d:cf:ae:d0:9c:dc:0b:df:e8:
25:f1:ee:18
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZIpw3h+E3LCk3BoqR1XnwsBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjQwOTI1MTUxODQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDk4M2I3YmMwZjlkNDJkNmFiZWQwZjBmNzViMDc3OWYxZWY0YmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6uBxcfxAI2wzADrGqJQjXJxQk6z
vR5DE8j+3wrvU7BgF4+KM7cAYX2t0bg/RjxLux29/g6MvGb0cuFU7Bdp650O1b8g
Zuerak/tvsasBw4iCTIvPWEZQHqtjY3pipeA+6AIJCUmR/wIF2zMIOGfJlqs50vw
KlwgE/sl/vgonzG12MlucaNbcqVbiwwiiGeVjGobmsvzewEnWV5MtP487LBz/AkO
KL2ah6ukn7tpoJp1gFhBbYon4V6CQd5cTBqIdZSl6SaF89Ot40k7QKnlOhRvaqSA
IIDD2s7Q7NA9Ip48kep5CA47nETWkRbjOnBGmIKwMBavQpx+ScIAJsPtbwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHCYO3vA+dQtar7Q8PdbB3nx70vdMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvY0pnN2U4RDUxQzFxdnREdzkxc0hlZkh2UzkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVqaAwQA
ueYOMA0GCSqGSIb3DQEBCwUAA4IBAQAszyKkiM6ZTk7Wzuf4gBFidKGK1TkwcG8s
DMIOFDT/Hzcqlr8eU+tZNFjFQd4ZdX1ksCNilVtgyUw2DsBn8rIAFNySziWzeUu2
bUKfSk+HJVeJ0VEQgcb4PraM68VIQSW1vZy90N7jkB68NKsfDTs6rNR6YsLvf82/
I3B1nN8naC6NgY0+KLnfq72n/uOtoUvm2qHumB0YidwWhABwApeGToAXSM5julVI
798bKqvtc1uRcsVjhbP5zCM0u1wTsap9BVld5aVHhV01GfjFz4X9xVOJODRmwez4
HaMl71pYwH8aQ+A7zizWSCBw+5X2bf5oNlJ9z67QnNwL3+gl8e4Y
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:02:41 2025 by rpki-client