Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/oCpM2v2DrVena2slrRl1AFtX5wk.roa
File: oCpM2v2DrVena2slrRl1AFtX5wk.roa (raw, json)
Hash identifier: s6BwdLeMkT2b2+lerxWXbU0qpdTv4ELt/bIlK76FWik=
Subject key identifier: A0:2A:4C:DA:FD:83:AD:57:A7:6B:6B:25:AD:19:75:00:5B:57:E7:09
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0188C5C77733D44EB2ECBA4C0ECDEA40F7B4
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/oCpM2v2DrVena2slrRl1AFtX5wk.roa
Signing time: Fri 16 Jun 2023 19:56:03 +0000
ROA not before: Fri 16 Jun 2023 19:56:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207795
IP address blocks: 213.209.131.0/24 maxlen: 24
77.90.177.0/24 maxlen: 24
77.90.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c5:c7:77:33:d4:4e:b2:ec:ba:4c:0e:cd:ea:40:f7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 16 19:56:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a02a4cdafd83ad57a76b6b25ad1975005b57e709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:69:4c:02:8a:41:5d:1b:ac:29:13:bb:50:46:
b0:e6:82:36:cc:a2:cc:db:d4:60:bd:00:b8:15:ef:
79:b2:b9:c3:cd:cf:41:79:26:19:5d:91:e5:7a:cc:
74:e6:48:f2:91:fb:e8:21:43:fc:16:c0:57:9e:c5:
b2:02:96:34:43:a8:3c:b4:ba:b4:be:f7:b7:fb:1f:
57:76:d2:32:d4:ee:cb:1a:bd:c3:2f:65:48:ef:b3:
8a:cd:23:7d:a9:36:fa:00:1e:b8:9a:97:70:c2:65:
0f:c7:8c:fd:79:74:d1:63:e3:c6:11:b2:e0:3a:cc:
18:1a:fb:0e:33:b5:8d:f2:23:f0:3f:ec:4a:72:76:
2a:26:b8:5b:68:0f:99:fd:80:65:b6:8e:84:61:f3:
d5:fc:4a:9f:bf:4b:e4:54:3d:b3:d8:e2:12:b5:2e:
1f:bf:7e:e3:b1:5f:85:47:ec:91:45:d2:dd:8a:5b:
b9:54:36:af:8f:a4:bc:3e:ea:5c:75:18:40:a3:79:
06:8a:34:f7:f2:cd:1d:ef:8e:b6:9b:86:28:1c:de:
e9:d1:9b:2e:9d:21:8b:8b:17:71:41:0c:ae:70:80:
10:dd:c3:57:8e:6f:86:18:a4:85:a3:5f:91:d5:de:
38:d6:d0:5d:06:2f:cc:cd:91:1e:b1:b4:15:ca:80:
d5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2A:4C:DA:FD:83:AD:57:A7:6B:6B:25:AD:19:75:00:5B:57:E7:09
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/oCpM2v2DrVena2slrRl1AFtX5wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.177.0/24
77.90.183.0/24
213.209.131.0/24
Signature Algorithm: sha256WithRSAEncryption
38:e6:5f:a6:f8:2f:46:80:43:e5:d1:98:ed:f6:dd:37:c3:3c:
19:be:ca:3f:61:a0:93:89:b1:2d:0c:fe:03:4d:1b:4f:ca:e7:
dc:4a:d5:5a:d4:8b:30:7f:83:0a:d4:f2:44:3d:94:31:9d:03:
c9:3c:d4:13:cf:e8:98:92:52:37:5e:69:71:3b:0c:88:a1:d6:
d5:77:79:da:4d:92:8c:81:b6:33:55:02:0b:0d:aa:42:6b:b9:
23:89:f2:65:78:9e:0b:5b:1d:fc:d2:66:f7:74:be:37:78:97:
2e:c3:f2:be:47:65:e6:39:59:30:d8:da:5f:6b:73:d3:7f:98:
6d:cb:29:6c:9f:5d:4d:fa:88:f0:7e:3f:22:2b:79:ea:c9:d3:
3b:8c:95:17:57:4b:64:3e:8f:fd:e8:47:b4:c3:dd:07:e4:04:
fd:15:8d:d5:a7:43:4d:19:dc:fe:5f:71:4d:fe:75:a2:27:17:
a5:53:44:29:92:37:ec:4d:9f:00:8f:69:c7:5a:c6:c8:b6:61:
4a:6d:cf:e7:6c:8c:58:b9:f0:32:cf:9a:eb:f4:ff:88:c3:f8:
6a:2e:80:52:ec:73:df:d3:be:07:1b:1f:6a:30:11:f2:2c:37:
0e:18:08:bc:02:d4:e8:ae:f4:2d:e6:cc:7f:bf:08:1f:60:a8:
8a:86:55:10
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYjFx3cz1E6y7LpMDs3qQPe0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjMwNjE2MTk1NjAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDJhNGNkYWZkODNhZDU3YTc2YjZiMjVhZDE5NzUwMDViNTdlNzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12lMAopBXRusKRO7UEaw5oI2zKLM
29RgvQC4Fe95srnDzc9BeSYZXZHlesx05kjykfvoIUP8FsBXnsWyApY0Q6g8tLq0
vve3+x9XdtIy1O7LGr3DL2VI77OKzSN9qTb6AB64mpdwwmUPx4z9eXTRY+PGEbLg
OswYGvsOM7WN8iPwP+xKcnYqJrhbaA+Z/YBlto6EYfPV/Eqfv0vkVD2z2OIStS4f
v37jsV+FR+yRRdLdilu5VDavj6S8PupcdRhAo3kGijT38s0d7462m4YoHN7p0Zsu
nSGLixdxQQyucIAQ3cNXjm+GGKSFo1+R1d441tBdBi/MzZEesbQVyoDV2QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKAqTNr9g61Xp2trJa0ZdQBbV+cJMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvb0NwTTJ2MkRyVmVuYTJzbHJSbDFBRnRYNXdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATVqxAwQA
TVq3AwQA1dGDMA0GCSqGSIb3DQEBCwUAA4IBAQA45l+m+C9GgEPl0Zjt9t03wzwZ
vso/YaCTibEtDP4DTRtPyufcStVa1Iswf4MK1PJEPZQxnQPJPNQTz+iYklI3Xmlx
OwyIodbVd3naTZKMgbYzVQILDapCa7kjifJleJ4LWx380mb3dL43eJcuw/K+R2Xm
OVkw2Npfa3PTf5htyylsn11N+ojwfj8iK3nqydM7jJUXV0tkPo/96Ee0w90H5AT9
FY3Vp0NNGdz+X3FN/nWiJxelU0QpkjfsTZ8Aj2nHWsbItmFKbc/nbIxYufAyz5rr
9P+Iw/hqLoBS7HPf074HGx9qMBHyLDcOGAi8AtTorvQt5sx/vwgfYKiKhlUQ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:09 2023 by rpki-client on console-ams.rpki-client.org