Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/jZzXaS0u1zzrZ6J2Gf-DxKMATDo.roa
File: jZzXaS0u1zzrZ6J2Gf-DxKMATDo.roa (raw, json)
Hash identifier: Y+Kt0ZDwtKCU0VCFWnQbazIdTk+UAsQCflEzpuj0pmA=
Subject key identifier: 8D:9C:D7:69:2D:2E:D7:3C:EB:67:A2:76:19:FF:83:C4:A3:00:4C:3A
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01889C91F889E9C873DD16C7A479B17EA2B8
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/jZzXaS0u1zzrZ6J2Gf-DxKMATDo.roa
Signing time: Thu 08 Jun 2023 19:53:11 +0000
ROA not before: Thu 08 Jun 2023 19:53:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 213.209.129.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9c:91:f8:89:e9:c8:73:dd:16:c7:a4:79:b1:7e:a2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 8 19:53:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d9cd7692d2ed73ceb67a27619ff83c4a3004c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9e:78:0b:87:d8:78:e8:5e:2a:61:cf:3a:02:
d2:d6:44:8d:1f:58:fa:72:1a:2a:9b:ec:16:40:11:
a5:c0:29:f8:ef:4e:ec:18:ca:8c:12:97:f7:ec:08:
74:d1:6c:ba:cd:e2:d6:c0:3f:1a:4b:a1:e8:ca:0b:
08:aa:e1:3f:6b:09:db:3c:6c:a3:92:e8:53:c6:04:
ec:83:08:30:40:ae:86:94:5c:c9:89:60:75:ed:03:
30:a9:bc:57:50:22:e6:8e:44:27:5c:17:48:b9:8c:
92:aa:5d:91:47:36:83:26:1b:90:be:ff:ec:26:1e:
39:05:dd:ed:e0:91:2d:a9:6c:d0:d0:17:c4:6e:f4:
b6:98:7b:52:65:4b:76:1d:f5:07:7a:e1:16:f5:89:
fb:65:4d:89:20:4d:c6:e8:0c:09:6f:23:21:78:87:
63:a7:39:ce:cf:51:19:63:ff:c2:7f:0c:cb:ed:0e:
51:61:f3:8b:42:f1:4b:d1:81:64:8d:54:4a:e3:ab:
02:5f:86:09:fa:0f:83:38:00:e2:44:87:a3:cb:7e:
bf:e3:54:2b:87:81:b6:3c:bd:02:c4:43:55:ca:a3:
43:68:57:49:a0:7b:ea:31:30:f4:40:40:4b:40:e5:
71:1e:eb:ef:70:78:9d:a5:1b:4a:31:b6:1d:2a:d1:
75:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9C:D7:69:2D:2E:D7:3C:EB:67:A2:76:19:FF:83:C4:A3:00:4C:3A
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/jZzXaS0u1zzrZ6J2Gf-DxKMATDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.138.0/24
185.230.14.0/24
213.209.129.0/24
213.209.143.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:9c:9b:08:a6:fe:81:a4:c9:98:41:93:f6:ec:24:86:af:7e:
f7:05:3f:55:36:e0:54:1b:08:07:96:a7:99:15:6d:81:6b:6c:
b8:bc:f8:1b:5d:e7:3a:36:61:0f:cf:af:d6:69:d0:e5:63:2a:
79:4c:5f:25:65:72:05:e7:b2:10:79:bf:72:93:74:71:7f:bf:
70:43:e6:14:96:ab:33:b5:6d:78:a2:6e:3f:ea:10:0f:c5:b8:
ba:1b:29:42:40:ca:3a:40:60:d8:83:b0:39:3f:31:74:45:ed:
81:76:b5:62:aa:55:9b:a8:46:d8:56:99:6f:cf:47:e8:74:2b:
02:45:6c:79:8f:6f:d9:03:1f:88:b1:01:9e:43:47:d5:72:8a:
92:23:55:d2:7b:59:2a:8b:d3:1f:ad:77:22:81:ea:27:8e:81:
12:0a:48:fd:94:19:51:b2:9c:37:99:0f:91:7b:6c:14:ae:cf:
37:0a:3d:c1:75:95:23:b5:b6:98:7e:5b:a6:a4:f2:ec:d6:69:
7c:f7:c6:80:e6:10:67:8a:10:26:8b:c0:a4:94:60:af:62:7b:
92:57:34:9a:ba:fb:4c:2f:6e:c4:21:d6:84:0d:dc:2a:31:02:
69:b3:45:09:e1:e5:f6:34:26:50:2d:7b:e3:0c:cf:27:8d:71:
12:9e:0b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 11:45:14 2023 by rpki-client on console-ams.rpki-client.org