Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/tej9Whq2PFU_uY37RMxggzVz1sA.roa
File: tej9Whq2PFU_uY37RMxggzVz1sA.roa (raw, json)
Hash identifier: grcmUE6hNPV/BilZJDzZegt10LWtG7T5oazHKB54Zgg=
Subject key identifier: B5:E8:FD:5A:1A:B6:3C:55:3F:B9:8D:FB:44:CC:60:83:35:73:D6:C0
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0191C251702093C9CE2FE01B81FA9AA42C6D
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/tej9Whq2PFU_uY37RMxggzVz1sA.roa
Signing time: Thu 05 Sep 2024 13:13:22 +0000
ROA not before: Thu 05 Sep 2024 13:13:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.128.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
185.230.14.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Sep 2024 15:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c2:51:70:20:93:c9:ce:2f:e0:1b:81:fa:9a:a4:2c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Sep 5 13:13:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5e8fd5a1ab63c553fb98dfb44cc60833573d6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b9:56:c3:ce:47:c4:b6:2b:e2:18:8c:db:43:
c4:63:9e:b7:34:37:c1:48:00:d9:2d:c6:63:57:15:
dd:27:13:ef:12:b0:65:4e:20:b8:25:6c:c0:1e:92:
21:cb:d6:5a:62:d7:a6:b2:0d:68:79:cf:30:4a:0f:
43:e9:03:c0:ac:e9:2d:fb:81:fd:36:83:e2:d5:80:
bf:b3:fc:64:b5:63:45:9b:9b:10:aa:0b:ae:5a:62:
ef:e3:88:dc:5e:a9:29:5e:89:a3:80:e8:ff:b0:fa:
65:29:88:87:9a:1e:55:fa:09:39:3e:b7:28:fc:13:
35:25:53:82:b1:e4:a3:ef:a6:48:1f:b5:2c:a5:98:
b1:2f:07:f0:7a:5e:59:fd:08:0d:31:73:97:a2:6a:
f3:09:ac:fb:1b:4f:60:95:f8:c2:e0:a2:cb:c2:ab:
d9:63:cc:60:d9:ea:ae:22:d9:34:6b:6c:a2:b5:ea:
52:52:62:d8:0b:cf:12:82:3e:c8:f9:e2:d6:42:a2:
ab:91:b2:ac:f5:85:8c:f9:a0:b1:43:c4:d4:e3:f0:
99:8f:4b:ab:6a:ee:6d:7b:bf:09:9b:0b:8d:3d:14:
73:a9:5f:cb:96:5c:72:bc:9f:bc:dd:bc:e4:1d:20:
f8:0c:15:89:71:63:78:26:7f:8f:84:ca:30:45:a0:
2b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E8:FD:5A:1A:B6:3C:55:3F:B9:8D:FB:44:CC:60:83:35:73:D6:C0
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/tej9Whq2PFU_uY37RMxggzVz1sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.140.0/24
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.154.0/24
185.230.14.0/24
213.209.138.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
0d:89:12:fe:c2:d5:43:c5:67:76:d5:ff:ed:77:b2:3f:8b:c2:
00:63:4d:55:c3:ce:e3:d0:5e:6a:18:bd:43:29:72:cf:ea:a7:
64:50:6d:05:bb:83:30:f5:96:14:2e:eb:45:5f:1f:68:08:eb:
8f:65:41:90:5e:c9:3d:5a:af:61:49:48:75:87:9d:f0:d3:b8:
f4:17:7c:ee:6b:ac:2e:a9:f0:df:8d:8d:74:6c:60:46:89:6b:
0d:8d:10:ad:c4:38:45:36:c7:35:ec:e5:6c:fb:82:e7:1e:75:
65:56:01:dc:05:69:5f:7e:05:11:a5:a8:67:a4:a3:11:e1:79:
e1:fa:66:c2:fb:36:a9:ae:69:97:63:2c:e6:d0:58:6a:90:6a:
98:20:d7:6a:a1:62:35:00:0b:47:b6:f7:f3:09:57:0e:25:2b:
ba:5e:06:93:4a:84:65:0b:78:b0:15:73:61:ed:07:68:9c:04:
ff:96:ec:cd:77:b2:a9:9f:24:bb:3b:38:36:5a:41:fd:40:64:
85:cb:cc:a3:5f:2b:06:a1:0d:a3:ca:52:ff:39:95:df:64:95:
08:59:c5:dc:98:5d:c8:b9:b5:2f:74:e4:6c:e2:a4:ed:f1:67:
49:51:65:8d:aa:4a:6f:fb:3d:a1:04:35:c3:c9:b2:53:9c:62:
7b:89:bf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 17:33:59 2024 by rpki-client on console-fra.rpki-client.org