Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/iTkZ3AR4FjFEJ7-SFTVNvJ5D1Xc.roa
File: iTkZ3AR4FjFEJ7-SFTVNvJ5D1Xc.roa (raw, json)
Hash identifier: qre8QRfALO8BOrQB0Wr4Pe9xGNgduspzc02cbez8hrA=
Subject key identifier: 89:39:19:DC:04:78:16:31:44:27:BF:92:15:35:4D:BC:9E:43:D5:77
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018678F11E27E39B2B4322FCB26A410EBA07
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/iTkZ3AR4FjFEJ7-SFTVNvJ5D1Xc.roa
Signing time: Wed 22 Feb 2023 11:45:13 +0000
ROA not before: Wed 22 Feb 2023 11:45:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1280:24::/64 maxlen: 64
Validation: Failed, certificate revoked on Thu 30 Mar 2023 18:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:f1:1e:27:e3:9b:2b:43:22:fc:b2:6a:41:0e:ba:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Feb 22 11:45:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=893919dc047816314427bf9215354dbc9e43d577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:00:d4:b0:22:03:72:e6:a0:66:8b:27:4e:
e9:03:07:69:88:82:34:61:43:50:c9:03:50:87:e8:
72:04:76:99:6b:a5:04:f8:e1:04:c4:94:54:71:51:
9f:81:16:2f:9e:b8:19:87:a8:7d:aa:1b:a1:98:3e:
4d:a3:06:41:9e:8a:57:f8:9c:e0:13:1b:78:ab:a5:
09:ca:a3:91:ef:f0:a3:69:23:f8:8f:43:08:a0:b4:
ac:4e:eb:0c:96:20:99:e0:69:94:fa:3e:e4:59:c8:
d1:0f:7e:16:fb:27:6f:fc:f0:52:af:a5:38:03:68:
3f:68:2b:fe:03:d7:b5:23:5b:91:99:47:0c:58:4c:
ad:93:fa:57:2f:1a:63:80:0e:64:6c:ef:15:99:fe:
21:6f:3a:7b:a4:a0:3c:1f:e3:af:b2:5e:7a:84:56:
01:4d:0b:03:3f:a6:e3:45:1f:d1:bd:3a:fa:37:b0:
a8:d9:f6:4e:f9:f7:ea:aa:10:ea:7f:5a:ab:1f:b6:
5d:43:d9:b5:b4:83:34:3d:c7:6b:54:b5:53:70:0b:
6e:c2:f2:19:61:cb:45:93:62:37:97:dd:1e:96:87:
b7:d3:55:d8:65:0f:c4:b9:9b:7c:06:0f:88:82:74:
19:a3:f0:48:8a:a1:7a:04:d5:e0:74:07:b6:62:26:
28:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:39:19:DC:04:78:16:31:44:27:BF:92:15:35:4D:BC:9E:43:D5:77
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/iTkZ3AR4FjFEJ7-SFTVNvJ5D1Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
213.209.138.0/24
213.209.145.0/24
213.209.150.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
2b:15:4b:96:38:dc:a5:81:a1:66:63:ac:43:60:0f:d4:64:bc:
cf:dc:5c:c2:5d:1c:48:b6:30:b6:36:a9:71:ff:17:c5:62:54:
88:19:1e:d5:8b:f5:11:f3:fe:1d:47:6e:8c:d5:eb:9d:11:9d:
3b:70:66:c4:39:ba:4e:3a:6f:2f:e8:83:49:9d:35:ea:22:30:
e1:05:7f:37:9e:79:4f:a0:1d:da:7e:f5:d7:be:9b:6a:9f:59:
7b:3a:4b:c3:97:8f:b6:69:db:28:04:5e:2b:af:bc:85:5e:7b:
9d:78:6e:16:f5:ac:24:89:42:2b:01:a4:0c:b7:02:d1:f4:a1:
a7:96:e0:c0:d7:98:00:36:c0:c8:a4:9a:5c:05:b6:7f:e4:10:
d3:40:c2:ea:d4:e9:8d:00:54:71:ab:16:d5:7f:78:c5:68:e5:
ca:29:b8:1d:f8:86:c5:a9:a1:4d:ae:18:45:0f:6f:37:ff:aa:
77:58:69:ec:bd:cc:02:bc:4f:9f:76:e9:9b:16:66:91:f2:65:
10:40:6a:e9:6c:77:65:21:8b:4e:8c:e9:bc:4d:7f:14:b2:f6:
57:2c:f1:3b:c9:cc:2c:20:c4:6b:69:69:c8:7f:7f:5d:a3:78:
7a:04:13:31:00:01:79:94:ab:dd:72:db:ca:71:8d:c3:df:b1:
8d:39:be:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:25 2024 by rpki-client on console-ams.rpki-client.org