Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/me0skUcrPbFxx7ekntgcGNfHaQE.roa
File: me0skUcrPbFxx7ekntgcGNfHaQE.roa (raw, json)
Hash identifier: 6KI4JC5x59Xq0uoS7LzfWccwl97MTzPE/rRE0GCmhpc=
Subject key identifier: 99:ED:2C:91:47:2B:3D:B1:71:C7:B7:A4:9E:D8:1C:18:D7:C7:69:01
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018D1DA334D3E29A4FEBC3822B0B2795694D
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/me0skUcrPbFxx7ekntgcGNfHaQE.roa
Signing time: Thu 18 Jan 2024 17:34:11 +0000
ROA not before: Thu 18 Jan 2024 17:34:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.128.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 29 Jan 2024 22:13:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1d:a3:34:d3:e2:9a:4f:eb:c3:82:2b:0b:27:95:69:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 18 17:34:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99ed2c91472b3db171c7b7a49ed81c18d7c76901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c2:b7:7a:a6:39:f1:68:ef:28:36:58:e2:50:
5f:f4:1b:73:8a:cf:25:c2:fd:48:2a:ec:f7:43:4a:
20:a9:82:10:7e:ca:8b:fe:01:00:ee:70:db:eb:da:
2f:36:06:60:e0:6f:70:13:ee:5b:17:a9:69:31:85:
59:b3:15:cd:4e:9e:30:a0:50:4d:39:c6:09:ea:d5:
c7:4d:e2:4e:77:39:24:72:90:cf:1f:49:2f:49:0a:
c1:88:2a:61:99:36:31:bd:9b:dd:36:c8:b7:ea:39:
d0:79:ef:f3:c8:7f:bf:71:06:41:33:9b:09:2e:60:
e0:14:d2:0d:0d:82:90:72:68:60:98:8c:c4:84:1c:
54:e8:8c:48:08:ea:24:30:f0:0b:f9:52:3e:5b:f4:
6d:e4:4f:9e:ec:5d:50:5d:82:96:13:b3:37:5c:82:
5c:99:64:11:a2:0b:19:78:82:6a:a9:da:61:63:07:
91:2e:4f:90:1d:b8:87:4c:cd:f1:c3:40:71:0e:72:
4a:af:d3:24:0a:b2:f4:5d:34:8a:18:fb:22:0a:22:
56:21:55:55:2e:2c:2a:89:80:18:99:87:cf:e6:bb:
7e:84:51:ef:ce:92:16:b2:9e:31:88:39:42:7c:4c:
41:ab:f0:5f:17:31:e4:1a:8f:2b:06:8f:59:46:51:
14:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:ED:2C:91:47:2B:3D:B1:71:C7:B7:A4:9E:D8:1C:18:D7:C7:69:01
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/me0skUcrPbFxx7ekntgcGNfHaQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.153.0-77.90.154.255
77.90.188.0/24
213.209.138.0/24
213.209.143.0/24
213.209.145.0-213.209.146.255
213.209.150.0/24
213.209.157.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
a4:11:21:dc:ae:9b:a7:99:3d:6b:a4:b3:39:32:3f:89:91:23:
8a:7d:36:9e:c2:49:19:d0:5f:6b:b1:22:5e:a6:0e:f1:6e:db:
db:9e:6b:58:d3:f9:7a:a1:20:bb:af:69:1d:56:62:f5:91:4d:
65:2b:83:84:e5:c5:3d:89:1a:bd:bd:27:24:68:5f:ae:48:df:
a9:0f:a6:4e:a8:a5:a9:5c:63:6c:7a:f5:ad:42:88:52:75:9d:
62:f8:87:c7:21:52:1c:02:40:6d:2a:68:ed:42:d2:41:ef:fa:
aa:c0:eb:fb:14:88:54:9c:69:19:70:b5:a0:2f:d2:01:a0:c0:
3e:3b:c4:b8:c4:31:41:4d:ec:b2:06:8e:c8:29:1f:4b:1e:ea:
16:36:eb:45:4c:2c:cc:06:74:f3:a4:4a:97:75:9a:d1:9a:39:
53:14:18:58:af:0c:84:11:1b:b8:21:94:e2:3b:39:74:fa:98:
cb:be:fb:71:12:09:c6:8b:65:63:07:a1:19:06:49:d4:f4:ae:
86:84:ae:ab:45:f8:af:e5:e2:27:30:67:f8:4d:18:3d:ec:4b:
8c:5f:d8:5f:91:54:23:84:d1:63:cc:ce:23:4e:36:0e:b4:d1:
b8:d4:16:18:6b:c7:60:1e:07:f7:44:cb:36:da:27:86:f7:da:
84:70:13:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 01:15:39 2024 by rpki-client on console-ams.rpki-client.org