Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/gJaK0sKAbTr3BKxU4qMeuaGGOMM.roa
File: gJaK0sKAbTr3BKxU4qMeuaGGOMM.roa (raw, json)
Hash identifier: 2moxkp6rqMngVExM2Bp8icwykAK4g70cP0LjLuB5sQ8=
Subject key identifier: 80:96:8A:D2:C2:80:6D:3A:F7:04:AC:54:E2:A3:1E:B9:A1:86:38:C3
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0188D91A1159ACA29F4DFB097FEF8C2519E6
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/gJaK0sKAbTr3BKxU4qMeuaGGOMM.roa
Signing time: Tue 20 Jun 2023 13:59:04 +0000
ROA not before: Tue 20 Jun 2023 13:59:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.185.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.151.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1280:24::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d9:1a:11:59:ac:a2:9f:4d:fb:09:7f:ef:8c:25:19:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 20 13:59:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80968ad2c2806d3af704ac54e2a31eb9a18638c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:31:2b:e6:c7:f5:2e:23:e9:3c:74:f0:f0:81:
cb:fd:9a:f2:1d:a5:7d:32:27:05:b6:a1:18:d2:ca:
fd:ed:f6:1f:26:0f:24:f0:ec:6d:2e:36:02:3f:f7:
93:1a:4c:1e:4f:7f:51:98:b1:ae:50:dc:fb:b9:b0:
16:01:f8:35:70:9d:03:d6:70:65:99:c0:a0:2d:38:
7e:a8:a9:8e:53:27:66:fc:c3:72:61:fd:66:a4:9b:
46:2b:81:6d:b0:7e:5d:18:84:62:65:af:65:dd:7f:
bf:df:df:76:b9:7f:eb:4a:60:fa:0d:ef:e9:2c:b0:
df:2c:d1:a5:b0:ea:74:88:12:22:d0:17:e5:1b:92:
8d:bd:aa:15:8d:f1:98:fd:bc:46:b4:20:c2:84:e5:
d2:89:b5:98:56:33:c9:86:21:d9:08:74:8a:ed:1e:
bd:fb:f0:ed:dd:31:42:2e:c3:9b:a1:ca:9c:a0:77:
81:40:ce:bc:50:8b:17:41:e9:31:37:7e:6b:9c:2c:
b4:ad:70:72:58:8e:14:28:dd:aa:89:de:a8:86:77:
97:0c:cf:ae:00:8d:ec:b4:90:30:86:e8:5e:b0:a0:
fa:f5:5e:7e:50:aa:4a:c8:e3:c1:dc:49:28:33:a0:
06:b8:e8:c6:09:10:03:f1:ae:3b:76:f3:0e:95:ff:
fa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:96:8A:D2:C2:80:6D:3A:F7:04:AC:54:E2:A3:1E:B9:A1:86:38:C3
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/gJaK0sKAbTr3BKxU4qMeuaGGOMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.153.0/24
77.90.185.0/24
213.209.138.0/24
213.209.151.0/24
213.209.157.0/24
213.209.159.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
0c:d9:61:b6:fc:e8:a8:95:27:a0:5f:49:7c:28:10:63:34:0a:
da:a2:e9:bc:91:33:ef:9c:b4:86:03:f6:cc:9e:f7:b3:cc:d0:
90:a3:04:55:59:56:d7:a8:27:3f:99:50:97:be:ad:97:8f:0b:
b7:80:82:c3:6c:b0:44:63:ce:57:75:84:4e:aa:3f:df:8a:3b:
43:e6:70:d0:6a:ef:bb:6a:08:36:db:68:69:87:d5:a0:9a:83:
23:2d:e2:f4:f4:7b:7a:b2:4e:11:01:53:87:28:ea:48:56:92:
72:5d:00:94:3f:56:48:34:de:ac:29:d1:c7:b7:e5:48:19:92:
65:b4:11:47:73:f3:b9:27:22:f2:1d:76:09:88:42:d3:b5:ee:
99:43:23:93:3d:a8:5f:c1:13:75:1a:a0:17:ee:36:cd:e1:b8:
98:16:12:c7:c4:65:a3:3b:e0:49:d8:68:23:c9:71:4b:77:41:
61:fe:be:27:b8:1f:80:b5:e8:40:96:ba:51:e7:a8:4c:3b:25:
eb:11:dc:99:fb:0d:35:a5:89:9d:7f:b3:46:a2:12:33:8f:81:
c8:0a:84:dd:17:d7:d1:87:c9:e8:a9:5e:1a:c9:bb:64:21:68:
10:b1:29:50:36:e8:19:54:00:d2:24:5f:ce:75:ba:63:24:cb:
6a:f0:d0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org