Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/czDS1d42cn8vqL5llCwORdPa9ec.roa
File: czDS1d42cn8vqL5llCwORdPa9ec.roa (raw, json)
Hash identifier: CNoB9gfJk4Kqpl5/9+LtMLyAK2NRWRPFf19otXGQcGA=
Subject key identifier: 73:30:D2:D5:DE:36:72:7F:2F:A8:BE:65:94:2C:0E:45:D3:DA:F5:E7
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01891C1623985A7DECE8E4F5360C4479E4D7
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/czDS1d42cn8vqL5llCwORdPa9ec.roa
Signing time: Mon 03 Jul 2023 14:09:20 +0000
ROA not before: Mon 03 Jul 2023 14:09:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c2::/32 maxlen: 32
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1c:16:23:98:5a:7d:ec:e8:e4:f5:36:0c:44:79:e4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 3 14:09:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7330d2d5de36727f2fa8be65942c0e45d3daf5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:3c:dd:f2:72:cb:c2:35:3b:8d:af:28:ad:
80:7e:ac:13:85:12:40:2a:47:e2:52:60:19:e6:79:
fd:3e:1e:e4:74:de:e8:7b:fd:9a:0c:fe:04:3b:f6:
57:c6:49:da:6b:8d:31:62:d1:56:e6:63:be:1e:d4:
a0:66:f4:96:92:d3:6b:d0:cc:24:f9:02:ec:02:9f:
48:f2:61:30:fb:65:18:91:2e:fb:16:eb:31:0e:dd:
b4:48:a4:66:58:3c:68:5f:87:68:92:2b:c7:a2:2c:
f9:34:6a:4f:ed:1c:47:69:d7:e6:c0:fa:4b:64:89:
74:01:a4:e2:c0:aa:26:95:2e:9d:ce:20:84:c2:dd:
df:29:8d:e3:27:24:89:64:c4:b2:f8:a1:ea:1e:e2:
42:6a:35:97:13:1c:a2:ca:70:32:00:0e:f8:26:ed:
f1:62:28:e5:cd:4a:1a:59:20:0e:ca:86:92:4a:14:
2e:5c:b4:c6:52:3c:c8:86:64:7a:01:51:47:c1:d8:
d8:4c:9f:d5:41:b7:98:1b:b8:60:75:90:e0:a9:99:
46:c7:e5:5f:64:a2:50:a5:b4:c4:3b:19:19:bd:77:
3c:2a:c5:2b:65:a7:62:a6:23:b1:2a:e1:47:6f:81:
ee:f7:4a:fc:2b:fb:19:50:3a:04:a9:37:d3:f8:bc:
b8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:30:D2:D5:DE:36:72:7F:2F:A8:BE:65:94:2C:0E:45:D3:DA:F5:E7
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/czDS1d42cn8vqL5llCwORdPa9ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
213.209.138.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
00:7d:bb:dd:0d:7f:29:b5:d3:d0:27:8d:0d:63:3b:70:3f:21:
c7:c1:81:dd:0e:73:82:1e:99:42:be:86:bb:7a:91:6d:e3:b1:
12:18:e9:ad:60:cb:98:d0:16:19:03:7b:17:36:e2:06:20:98:
e2:72:8b:34:44:35:68:6a:23:5d:83:3f:f4:7a:4a:e1:a1:0e:
a5:fe:ab:4b:99:21:ce:03:ff:05:b7:e2:77:5b:80:22:fc:7a:
92:e0:98:4e:cd:3a:70:7c:78:3b:54:2c:4b:36:c5:b5:33:3d:
fc:80:29:93:35:1b:ef:58:d8:5a:3e:eb:d1:c6:7c:55:9b:80:
11:f1:b6:61:55:72:39:16:c7:71:51:50:4b:fa:bd:d7:37:22:
0a:a6:07:df:3b:b4:13:59:bf:91:c7:14:27:ac:73:a0:db:25:
93:8a:e4:5c:24:79:10:b7:5e:c0:34:15:dd:0c:63:73:57:1a:
8d:f0:10:42:f6:55:4d:bd:85:d9:9d:e5:b2:05:a6:1f:50:ef:
13:ec:71:e1:2f:36:f7:a7:0c:08:55:93:19:a9:cc:ed:18:ce:
71:00:9a:79:bb:8e:ff:8c:05:8b:7f:b9:ab:b7:36:e8:f5:ad:
4d:43:8c:13:f2:c2:78:0f:4b:d9:31:28:7a:c0:ab:b0:b7:ab:
89:b8:c4:6c
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAYkcFiOYWn3s6OT1NgxEeeTXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjMwNzAzMTQwOTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzMwZDJkNWRlMzY3MjdmMmZhOGJlNjU5NDJjMGU0NWQzZGFmNWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRw83fJyy8I1O42vKK2AfqwThRJA
KkfiUmAZ5nn9Ph7kdN7oe/2aDP4EO/ZXxknaa40xYtFW5mO+HtSgZvSWktNr0Mwk
+QLsAp9I8mEw+2UYkS77FusxDt20SKRmWDxoX4dokivHoiz5NGpP7RxHadfmwPpL
ZIl0AaTiwKomlS6dziCEwt3fKY3jJySJZMSy+KHqHuJCajWXExyiynAyAA74Ju3x
YijlzUoaWSAOyoaSShQuXLTGUjzIhmR6AVFHwdjYTJ/VQbeYG7hgdZDgqZlGx+Vf
ZKJQpbTEOxkZvXc8KsUrZadipiOxKuFHb4Hu90r8K/sZUDoEqTfT+Ly4CwIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFHMw0tXeNnJ/L6i+ZZQsDkXT2vXnMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvY3pEUzFkNDJjbjh2cUw1bGxDd09SZFBhOWVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBQBAIAATBKMAwDBAdNWoAD
BABNWoIwDAMEAk1ahAMEAE1ahgMEAU1aiAMEAE1ajDAMAwQBTVqOAwQATVqQMAwD
BAFNWpIDBABNWpQDBADV0YowFAQCAAIwDgMFACoEKcIDBQAqBCnHMA0GCSqGSIb3
DQEBCwUAA4IBAQAAfbvdDX8ptdPQJ40NYztwPyHHwYHdDnOCHplCvoa7epFt47ES
GOmtYMuY0BYZA3sXNuIGIJjicos0RDVoaiNdgz/0ekrhoQ6l/qtLmSHOA/8Ft+J3
W4Ai/HqS4JhOzTpwfHg7VCxLNsW1Mz38gCmTNRvvWNhaPuvRxnxVm4AR8bZhVXI5
FsdxUVBL+r3XNyIKpgffO7QTWb+RxxQnrHOg2yWTiuRcJHkQt17ANBXdDGNzVxqN
8BBC9lVNvYXZneWyBaYfUO8T7HHhLzb3pwwIVZMZqcztGM5xAJp5u47/jAWLf7mr
tzbo9a1NQ4wT8sJ4D0vZMSh6wKuwt6uJuMRs
Generated at Sun Jul 23 19:15:58 2023 by rpki-client on console-fra.rpki-client.org