Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ttlkbDpkSzqxRIwK4ipysJqzRN0.roa
File: ttlkbDpkSzqxRIwK4ipysJqzRN0.roa (raw, json)
Hash identifier: G7DrfKUNTI4agNNF+MosAwN+rS+dfG4UFz/lbDDcSxM=
Subject key identifier: B6:D9:64:6C:3A:64:4B:3A:B1:44:8C:0A:E2:2A:72:B0:9A:B3:44:DD
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0188FD928379AAFD5EB1D0B3F6C4AF76EFB9
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ttlkbDpkSzqxRIwK4ipysJqzRN0.roa
Signing time: Tue 27 Jun 2023 15:56:57 +0000
ROA not before: Tue 27 Jun 2023 15:56:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207084
IP address blocks: 213.209.145.0/24 maxlen: 24
213.209.151.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fd:92:83:79:aa:fd:5e:b1:d0:b3:f6:c4:af:76:ef:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 27 15:56:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6d9646c3a644b3ab1448c0ae22a72b09ab344dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bc:8d:6e:eb:fc:68:b1:31:41:ae:e8:ca:64:
d8:78:93:17:fe:2c:b8:68:c7:b5:04:a5:31:1e:84:
80:85:e4:f6:e5:60:81:8f:03:cb:9c:f5:b1:03:87:
d8:8a:67:da:7e:cc:a2:5f:1f:64:bf:90:17:6c:16:
ba:c4:dd:4e:d5:d6:c2:33:91:4f:f1:f1:f4:27:38:
16:b8:53:81:d2:de:bb:c2:60:ac:c1:35:08:bc:00:
66:99:6e:36:d1:02:67:4a:2f:6a:06:8b:89:95:38:
61:83:7b:32:56:9d:c9:cf:14:a0:bb:2a:be:e5:c3:
8e:20:c6:d9:ce:2c:80:6b:9e:1a:79:3e:14:57:51:
8e:86:87:a9:d8:ed:bd:e7:1d:89:0e:29:72:dd:5f:
58:68:c4:0d:c5:e6:29:60:70:13:23:d8:7c:48:39:
e2:4d:33:c9:2f:9a:b1:5c:09:1d:b3:6e:1b:e1:2b:
d6:3e:a4:0f:dd:fd:6b:66:56:0c:d1:2a:23:ea:8d:
96:d1:1a:d4:18:5e:ea:93:ec:3c:29:f7:b9:da:76:
be:e5:a0:27:0d:9e:e4:4d:8e:87:80:ab:12:df:c1:
b0:8f:a7:96:0d:48:44:cd:71:a6:95:d4:2c:dd:ae:
e6:f4:9b:60:1d:79:b5:8b:68:8d:bb:8e:a5:1d:85:
61:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D9:64:6C:3A:64:4B:3A:B1:44:8C:0A:E2:2A:72:B0:9A:B3:44:DD
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/ttlkbDpkSzqxRIwK4ipysJqzRN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.153.0/24
213.209.145.0/24
213.209.151.0/24
213.209.157.0/24
213.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:47:1d:f5:79:72:27:cf:96:97:bb:ea:cd:3d:73:e1:ef:67:
60:6a:dc:2d:e9:33:ad:3d:27:14:a2:5b:57:2a:19:33:83:62:
a6:b3:96:13:1e:1d:d5:a2:e0:e8:e7:3a:37:4a:03:f3:82:89:
12:5d:02:1a:5e:f1:3c:f2:10:56:b3:d8:09:9c:3e:a8:fb:30:
eb:cf:42:84:6d:58:c3:83:d2:36:a1:69:ae:c9:46:90:f9:b3:
1c:fa:de:a6:95:f6:d5:32:2a:0c:f2:9e:20:f3:63:34:5c:9d:
4a:be:03:cc:b0:ad:b3:94:29:a5:d3:92:a4:32:af:98:49:b3:
23:7b:46:b6:b8:2b:73:e9:36:a0:df:11:43:85:0f:8a:0b:e1:
42:a7:40:b0:87:42:d6:76:b1:aa:48:df:b6:ce:8c:9b:b5:cd:
3f:49:2f:35:ca:31:ef:0c:db:44:48:a4:5e:06:e5:36:88:f0:
13:2f:5d:e1:38:44:34:c5:16:ca:83:4f:f1:10:ff:af:57:7b:
60:7b:89:9d:c9:53:25:7d:b1:89:f1:87:a3:6f:30:00:d1:cf:
41:89:08:a2:cb:a0:ba:71:58:33:d6:51:8c:48:db:ba:23:a9:
b2:41:61:e4:4c:54:f9:3e:19:27:89:f1:05:eb:fa:b0:37:29:
59:ee:17:55
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYj9koN5qv1esdCz9sSvdu+5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjMwNjI3MTU1NjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmQ5NjQ2YzNhNjQ0YjNhYjE0NDhjMGFlMjJhNzJiMDlhYjM0NGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkryNbuv8aLExQa7oymTYeJMX/iy4
aMe1BKUxHoSAheT25WCBjwPLnPWxA4fYimfafsyiXx9kv5AXbBa6xN1O1dbCM5FP
8fH0JzgWuFOB0t67wmCswTUIvABmmW420QJnSi9qBouJlThhg3syVp3JzxSguyq+
5cOOIMbZziyAa54aeT4UV1GOhoep2O295x2JDily3V9YaMQNxeYpYHATI9h8SDni
TTPJL5qxXAkds24b4SvWPqQP3f1rZlYM0Soj6o2W0RrUGF7qk+w8Kfe52na+5aAn
DZ7kTY6HgKsS38Gwj6eWDUhEzXGmldQs3a7m9JtgHXm1i2iNu46lHYVhjwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFLbZZGw6ZEs6sUSMCuIqcrCas0TdMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvdHRsa2JEcGtTenF4Ukl3SzRpcHlzSnF6Uk4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQATVqZAwQA
1dGRAwQA1dGXAwQA1dGdAwQA1dGfMA0GCSqGSIb3DQEBCwUAA4IBAQA8Rx31eXIn
z5aXu+rNPXPh72dgatwt6TOtPScUoltXKhkzg2Kms5YTHh3VouDo5zo3SgPzgokS
XQIaXvE88hBWs9gJnD6o+zDrz0KEbVjDg9I2oWmuyUaQ+bMc+t6mlfbVMioM8p4g
82M0XJ1KvgPMsK2zlCml05KkMq+YSbMje0a2uCtz6Tag3xFDhQ+KC+FCp0Cwh0LW
drGqSN+2zoybtc0/SS81yjHvDNtESKReBuU2iPATL13hOEQ0xRbKg0/xEP+vV3tg
e4mdyVMlfbGJ8YejbzAA0c9BiQiiy6C6cVgz1lGMSNu6I6myQWHkTFT5PhknifEF
6/qwNylZ7hdV
-----END CERTIFICATE-----
Generated at Thu Jul 20 14:09:32 2023 by rpki-client on console-ams.rpki-client.org