Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/eDoVsyxAMKl8KGqq7qWiQ7_WSJ4.roa
File: eDoVsyxAMKl8KGqq7qWiQ7_WSJ4.roa (raw, json)
Hash identifier: xoIOdED1PnllIUEVOa2WLtxCGlmzQhoiymlirmGkBa8=
Subject key identifier: 78:3A:15:B3:2C:40:30:A9:7C:28:6A:AA:EE:A5:A2:43:BF:D6:48:9E
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018A22155E1E9607D82A5418A256326486D5
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/eDoVsyxAMKl8KGqq7qWiQ7_WSJ4.roa
Signing time: Wed 23 Aug 2023 11:09:00 +0000
ROA not before: Wed 23 Aug 2023 11:09:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49217
IP address blocks: 213.209.143.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:22:15:5e:1e:96:07:d8:2a:54:18:a2:56:32:64:86:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 23 11:09:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=783a15b32c4030a97c286aaaeea5a243bfd6489e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2b:ea:61:29:bf:d2:11:7c:aa:df:53:3e:88:
d7:5a:8e:dc:65:93:d1:cb:ed:2c:e0:47:a9:75:4c:
ee:de:6a:33:8a:a5:fb:2e:e1:22:87:fe:ae:28:87:
a9:a1:1a:85:86:4b:57:51:59:bb:47:11:ca:6b:72:
5d:22:78:8c:d0:66:34:11:72:ea:b7:03:80:15:c6:
14:ab:13:e2:ca:94:ec:e0:65:aa:de:31:be:9e:9a:
39:1e:13:4e:a5:ee:25:59:2f:40:d3:51:a0:f2:76:
e1:d1:35:ea:0e:01:a0:a8:f3:29:ee:a3:24:70:51:
51:74:99:cb:6f:50:e3:63:f9:89:f7:f5:3d:3e:31:
c0:43:25:9f:18:ad:dd:4c:b6:cc:2f:b2:f4:ed:64:
53:54:e9:d9:c6:77:96:25:c8:f8:2f:a7:7a:d0:99:
0f:b4:1a:78:89:16:06:2e:21:78:dc:06:89:43:5c:
de:4e:83:05:07:88:d1:b4:29:73:4a:24:e3:e9:dc:
e1:68:91:17:38:e7:3f:e3:9b:01:bb:3d:35:97:6a:
3e:60:df:88:a9:47:92:33:8c:4c:df:89:f7:3a:f2:
c2:0a:46:cd:dc:20:e8:6a:ec:da:4d:e2:7e:40:fa:
07:a0:a5:08:fb:1c:7c:a1:4b:d0:14:b6:77:a8:6f:
8c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3A:15:B3:2C:40:30:A9:7C:28:6A:AA:EE:A5:A2:43:BF:D6:48:9E
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/eDoVsyxAMKl8KGqq7qWiQ7_WSJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.145.0/24
213.209.143.0/24
Signature Algorithm: sha256WithRSAEncryption
50:96:38:50:5c:6d:10:a7:3a:99:95:cc:f0:99:44:66:84:6a:
98:a2:d4:15:e8:0b:ae:56:42:20:bc:8c:ff:26:5e:df:74:12:
56:9e:e5:5f:66:e3:93:07:21:d0:ca:9a:0b:15:8d:05:e4:60:
94:e5:a5:ee:8a:f7:a0:6a:c9:e8:aa:ee:48:0a:4c:0d:e1:38:
4f:d6:2d:7d:f0:d0:41:bf:33:e4:7d:b9:a0:68:f7:a9:aa:b0:
94:c2:9d:bd:89:9f:33:f1:32:91:63:00:08:27:97:c2:5c:46:
8f:8a:d5:0a:3c:a4:3d:ed:7b:46:f1:b7:f7:9e:9b:22:9c:a6:
e3:24:3a:1e:80:86:b8:8a:fa:0e:87:9d:d9:a1:22:0e:5b:81:
f8:f3:f5:03:03:fb:57:24:d5:c3:5b:fa:cd:fe:08:c7:70:19:
d3:27:8c:ce:2f:54:ba:00:b6:43:f5:d2:b1:57:e2:02:41:0e:
0a:84:2a:97:be:d4:01:3f:b2:6a:4c:38:42:b6:94:1d:41:4d:
a4:f9:8a:07:42:14:09:38:06:a1:44:3d:c2:8b:ef:aa:c7:5b:
96:96:5c:c2:95:07:b9:53:d2:5e:8f:55:b1:ef:3a:50:c7:4c:
d4:25:86:28:77:d3:ea:a5:85:10:88:e0:11:2b:75:f3:d6:44:
dc:94:32:b2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYoiFV4elgfYKlQYolYyZIbVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjMwODIzMTEwOTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODNhMTViMzJjNDAzMGE5N2MyODZhYWFlZWE1YTI0M2JmZDY0ODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyvqYSm/0hF8qt9TPojXWo7cZZPR
y+0s4EepdUzu3moziqX7LuEih/6uKIepoRqFhktXUVm7RxHKa3JdIniM0GY0EXLq
twOAFcYUqxPiypTs4GWq3jG+npo5HhNOpe4lWS9A01Gg8nbh0TXqDgGgqPMp7qMk
cFFRdJnLb1DjY/mJ9/U9PjHAQyWfGK3dTLbML7L07WRTVOnZxneWJcj4L6d60JkP
tBp4iRYGLiF43AaJQ1zeToMFB4jRtClzSiTj6dzhaJEXOOc/45sBuz01l2o+YN+I
qUeSM4xM34n3OvLCCkbN3CDoauzaTeJ+QPoHoKUI+xx8oUvQFLZ3qG+McwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHg6FbMsQDCpfChqqu6lokO/1kieMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvZURvVnN5eEFNS2w4S0dxcTdxV2lRN19XU0o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVqRAwQA
1dGPMA0GCSqGSIb3DQEBCwUAA4IBAQBQljhQXG0QpzqZlczwmURmhGqYotQV6Auu
VkIgvIz/Jl7fdBJWnuVfZuOTByHQypoLFY0F5GCU5aXuivegasnoqu5ICkwN4ThP
1i198NBBvzPkfbmgaPepqrCUwp29iZ8z8TKRYwAIJ5fCXEaPitUKPKQ97XtG8bf3
npsinKbjJDoegIa4ivoOh53ZoSIOW4H48/UDA/tXJNXDW/rN/gjHcBnTJ4zOL1S6
ALZD9dKxV+ICQQ4KhCqXvtQBP7JqTDhCtpQdQU2k+YoHQhQJOAahRD3Ci++qx1uW
llzClQe5U9Jej1Wx7zpQx0zUJYYod9PqpYUQiOARK3Xz1kTclDKy
-----END CERTIFICATE-----
Generated at Sat Sep 9 10:04:25 2023 by rpki-client on console-ams.rpki-client.org