Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/qaKTnhQVLvgNiYR9cwT1YT15Tsg.roa
File: qaKTnhQVLvgNiYR9cwT1YT15Tsg.roa (raw, json)
Hash identifier: LhY+ms95J0cfU66C49mI6p+L5LO3ihFMK/SaG6BHg8A=
Subject key identifier: A9:A2:93:9E:14:15:2E:F8:0D:89:84:7D:73:04:F5:61:3D:79:4E:C8
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018BBE3C310ECB605A6F55EED9976A0E3781
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/qaKTnhQVLvgNiYR9cwT1YT15Tsg.roa
Signing time: Sat 11 Nov 2023 11:54:57 +0000
ROA not before: Sat 11 Nov 2023 11:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.129.0/24 maxlen: 24
77.90.128.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:be:3c:31:0e:cb:60:5a:6f:55:ee:d9:97:6a:0e:37:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Nov 11 11:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9a2939e14152ef80d89847d7304f5613d794ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0b:a7:8d:cd:22:38:b6:f9:88:e3:d8:bf:cf:
d8:13:55:ff:96:be:5b:8a:19:4e:14:36:23:80:18:
cb:92:89:22:d0:33:9a:5c:4b:4f:f3:16:18:b7:46:
4a:30:69:af:4e:f4:b4:6b:bc:44:46:02:20:e8:b9:
76:c4:f8:56:37:29:a4:39:5d:f6:0e:f7:a3:0e:03:
9a:ea:8f:de:22:17:2e:22:23:e1:c8:dc:0a:be:54:
8d:83:4b:01:83:c4:aa:15:04:88:2e:0e:ca:02:30:
ae:08:93:54:fe:59:5c:20:4e:b6:60:6d:29:31:7f:
69:85:07:84:27:07:03:3b:7d:bb:81:39:be:96:76:
60:c7:8f:2e:63:f4:9c:99:2c:b4:02:31:ce:d1:43:
1f:81:cb:93:e7:ac:1d:71:2c:96:95:ec:97:4e:93:
0c:50:13:eb:7d:90:48:1e:4f:4d:f2:67:06:61:d0:
d3:28:06:d5:db:7d:01:ac:58:07:85:11:1b:10:78:
92:64:b6:ac:8d:84:c5:94:f8:f9:9c:ce:b0:63:b9:
df:48:75:d7:60:1a:f6:96:0c:08:d4:c9:cd:7b:31:
d9:ba:c1:f3:7f:11:78:ed:7f:42:b5:98:6b:77:66:
8c:b1:5d:e3:27:81:1c:49:a1:58:81:b0:70:6d:07:
02:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A2:93:9E:14:15:2E:F8:0D:89:84:7D:73:04:F5:61:3D:79:4E:C8
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/qaKTnhQVLvgNiYR9cwT1YT15Tsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.140.0/24
77.90.142.0-77.90.148.255
77.90.153.0/24
77.90.188.0/24
185.230.13.0-185.230.14.255
213.209.138.0/24
213.209.145.0/24
213.209.150.0/24
213.209.157.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
84:75:24:e4:36:be:42:1f:d2:06:b6:3d:2a:72:cc:53:b4:6a:
23:ca:f1:a9:e2:0a:f9:52:8d:af:19:46:92:5d:37:1f:88:0c:
0a:7a:e8:8f:84:a4:72:d8:24:bc:53:1b:9a:14:ef:3e:80:81:
73:28:bf:a3:06:fa:af:38:09:ef:33:ad:cb:00:46:54:5d:09:
88:11:41:61:bb:b6:8b:42:a0:03:77:91:b4:d3:df:2d:62:1c:
7a:c5:26:c6:3e:aa:05:d4:68:17:b9:56:9f:1d:75:c5:5a:7f:
6a:c0:6d:15:60:61:25:b2:0c:52:c4:7d:85:82:ee:c0:49:7a:
b3:08:09:75:bb:6b:d0:74:3d:22:98:59:b9:c7:b5:57:1d:66:
cc:a6:6a:37:40:d3:d3:c1:41:39:a4:1a:9a:a0:b9:45:65:43:
61:9c:22:bf:1a:1d:7b:25:9e:8e:b8:1d:02:52:2c:6f:d6:33:
f0:94:d0:9b:a9:da:c3:41:9e:cf:cf:0c:68:d6:a8:b5:dd:9e:
e2:a9:c9:78:22:ee:91:21:64:d3:98:bc:27:1c:72:69:b4:7d:
93:e5:09:ce:57:53:05:76:2b:31:08:36:19:44:80:90:11:96:
e6:85:9c:da:8d:f0:4b:0c:df:62:0a:12:b0:49:8b:0a:96:db:
f2:1b:94:f4
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAYu+PDEOy2Bab1Xu2ZdqDjeBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjMxMTExMTE1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWEyOTM5ZTE0MTUyZWY4MGQ4OTg0N2Q3MzA0ZjU2MTNkNzk0ZWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAunjc0iOLb5iOPYv8/YE1X/lr5b
ihlOFDYjgBjLkoki0DOaXEtP8xYYt0ZKMGmvTvS0a7xERgIg6Ll2xPhWNymkOV32
DvejDgOa6o/eIhcuIiPhyNwKvlSNg0sBg8SqFQSILg7KAjCuCJNU/llcIE62YG0p
MX9phQeEJwcDO327gTm+lnZgx48uY/ScmSy0AjHO0UMfgcuT56wdcSyWleyXTpMM
UBPrfZBIHk9N8mcGYdDTKAbV230BrFgHhREbEHiSZLasjYTFlPj5nM6wY7nfSHXX
YBr2lgwI1MnNezHZusHzfxF47X9CtZhrd2aMsV3jJ4EcSaFYgbBwbQcCmwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFKmik54UFS74DYmEfXME9WE9eU7IMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvcWFLVG5oUVZMdmdOaVlSOWN3VDFZVDE1VHNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGZBggrBgEFBQcBBwEB/wSBiTCBhjBuBAIAATBoMAwDBAdN
WoADBABNWoIwDAMEAk1ahAMEAE1ahgMEAU1aiAMEAE1ajDAMAwQBTVqOAwQATVqU
AwQATVqZAwQATVq8MAwDBAC55g0DBAC55g4DBADV0YoDBADV0ZEDBADV0ZYDBADV
0Z0wFAQCAAIwDgMFACoEKcIDBQAqBCnHMA0GCSqGSIb3DQEBCwUAA4IBAQCEdSTk
Nr5CH9IGtj0qcsxTtGojyvGp4gr5Uo2vGUaSXTcfiAwKeuiPhKRy2CS8UxuaFO8+
gIFzKL+jBvqvOAnvM63LAEZUXQmIEUFhu7aLQqADd5G0098tYhx6xSbGPqoF1GgX
uVafHXXFWn9qwG0VYGElsgxSxH2Fgu7ASXqzCAl1u2vQdD0imFm5x7VXHWbMpmo3
QNPTwUE5pBqaoLlFZUNhnCK/Gh17JZ6OuB0CUixv1jPwlNCbqdrDQZ7Pzwxo1qi1
3Z7iqcl4Iu6RIWTTmLwnHHJptH2T5QnOV1MFdisxCDYZRICQEZbmhZzajfBLDN9i
ChKwSYsKltvyG5T0
-----END CERTIFICATE-----
Generated at Mon Nov 13 19:59:20 2023 by rpki-client on console-fra.rpki-client.org