Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/uz4UsEDDbMuY8jL4qalhZEUTh78.roa
File: uz4UsEDDbMuY8jL4qalhZEUTh78.roa (raw, json)
Hash identifier: AncJaOzGDdfY6v7iHTZFYxBvXATMeCy4g7cJ7rlohFI=
Subject key identifier: BB:3E:14:B0:40:C3:6C:CB:98:F2:32:F8:A9:A9:61:64:45:13:87:BF
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01926B717C6C3B8248A8BAFFB7005690D02F
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/uz4UsEDDbMuY8jL4qalhZEUTh78.roa
Signing time: Tue 08 Oct 2024 09:24:12 +0000
ROA not before: Tue 08 Oct 2024 09:24:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.128.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.139.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
77.90.153.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Oct 2024 15:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:71:7c:6c:3b:82:48:a8:ba:ff:b7:00:56:90:d0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 8 09:24:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb3e14b040c36ccb98f232f8a9a96164451387bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:73:37:7f:c6:b3:49:30:2f:10:11:22:ca:
96:55:32:89:b9:d1:23:37:13:ed:f0:3b:84:63:14:
c5:69:f0:70:4e:86:9d:b6:8a:95:7e:49:66:51:43:
38:d2:01:33:61:d1:83:47:7d:10:46:d3:5f:1c:3a:
01:b3:c6:8d:5a:1f:24:fe:34:8a:24:0f:d3:4a:c6:
58:5d:89:30:4a:2c:1e:2a:96:ee:ba:ad:02:9d:d2:
b0:bf:9a:08:10:a0:ad:22:74:d9:28:ed:ed:14:2b:
5e:c9:ba:ba:f7:90:49:98:2b:b3:26:34:28:6e:14:
99:1b:09:c7:ea:f8:bb:64:fe:79:b7:09:57:56:1b:
14:ce:bf:34:79:57:85:bd:d8:77:c7:41:b5:1b:21:
45:29:b1:15:9a:5c:c6:91:ac:6c:92:58:8f:01:06:
85:4e:a7:5e:59:31:14:f6:9d:cf:8b:fb:88:ca:0e:
34:46:28:df:b3:0d:ea:de:f0:c5:f9:ab:e6:e9:92:
fb:72:4c:4f:3b:5b:c4:f8:a4:2f:b4:f9:40:cc:31:
06:f8:21:4b:ca:94:e8:f6:64:64:49:3e:35:2c:18:
63:1f:6b:b7:9c:12:87:9e:ed:6d:48:b6:79:08:13:
2d:33:eb:37:5d:9b:a7:e8:6e:bc:13:f2:ca:5a:f5:
69:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3E:14:B0:40:C3:6C:CB:98:F2:32:F8:A9:A9:61:64:45:13:87:BF
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/uz4UsEDDbMuY8jL4qalhZEUTh78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.137.255
77.90.139.0-77.90.140.255
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
77.90.153.0/24
213.209.138.0/24
213.209.150.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
49:9d:e2:b1:30:07:2e:73:47:57:58:e2:4b:ab:fa:8d:b7:10:
ab:c2:b7:44:0c:c2:8a:1b:34:0d:de:74:cd:f9:e4:40:08:da:
db:f9:1f:c0:06:f0:48:77:7e:09:94:6c:33:35:c4:d2:d6:c1:
e3:44:60:eb:7d:c9:94:a0:7c:fb:94:da:40:81:97:09:42:40:
50:d2:e1:73:0e:00:30:46:ff:70:32:e0:1e:cf:36:ae:11:f4:
48:01:6d:be:c3:4b:1d:32:e8:2e:67:2e:cc:6d:14:84:4b:3d:
cc:a1:8f:ac:d0:ae:95:b3:de:6d:77:9e:27:28:e4:44:4c:0c:
4f:87:77:31:f1:3e:16:a5:cd:68:64:80:28:13:59:32:53:87:
97:6f:c5:f9:07:e3:5f:f3:41:46:6c:7d:5f:4e:54:be:d4:b7:
f6:65:cc:1f:91:69:e6:90:0b:c2:99:f8:46:c7:07:86:bd:60:
19:53:e3:1c:3b:28:f0:2a:c6:d7:04:15:ea:c3:0b:d4:e3:1e:
9b:b4:de:0d:f6:2c:06:6a:44:8b:ae:a0:c5:29:6d:54:d3:b1:
ef:a6:d0:0e:72:f7:7e:50:bc:04:11:40:10:51:81:71:88:2c:
52:49:a5:d9:b7:7c:94:00:36:a8:9c:4f:7b:98:c0:59:49:5e:
22:a4:94:45
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgISAZJrcXxsO4JIqLr/twBWkNAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjQxMDA4MDkyNDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjNlMTRiMDQwYzM2Y2NiOThmMjMyZjhhOWE5NjE2NDQ1MTM4N2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbVzN3/Gs0kwLxARIsqWVTKJudEj
NxPt8DuEYxTFafBwToadtoqVfklmUUM40gEzYdGDR30QRtNfHDoBs8aNWh8k/jSK
JA/TSsZYXYkwSiweKpbuuq0CndKwv5oIEKCtInTZKO3tFCteybq695BJmCuzJjQo
bhSZGwnH6vi7ZP55twlXVhsUzr80eVeFvdh3x0G1GyFFKbEVmlzGkaxskliPAQaF
TqdeWTEU9p3Pi/uIyg40Rijfsw3q3vDF+avm6ZL7ckxPO1vE+KQvtPlAzDEG+CFL
ypTo9mRkST41LBhjH2u3nBKHnu1tSLZ5CBMtM+s3XZun6G68E/LKWvVp2wIDAQAB
o4ICcjCCAm4wHQYDVR0OBBYEFLs+FLBAw2zLmPIy+KmpYWRFE4e/MB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvdXo0VXNFRERiTXVZOGpMNHFhbGhaRVVUaDc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwXgQCAAEwWDAMAwQHTVqA
AwQATVqCMAwDBAJNWoQDBAFNWogwDAMEAE1aiwMEAE1ajDAMAwQBTVqOAwQATVqQ
MAwDBAFNWpIDBABNWpQDBABNWpkDBADV0YoDBADV0ZYwFAQCAAIwDgMFACoEKcID
BQAqBCnHMA0GCSqGSIb3DQEBCwUAA4IBAQBJneKxMAcuc0dXWOJLq/qNtxCrwrdE
DMKKGzQN3nTN+eRACNrb+R/ABvBId34JlGwzNcTS1sHjRGDrfcmUoHz7lNpAgZcJ
QkBQ0uFzDgAwRv9wMuAezzauEfRIAW2+w0sdMuguZy7MbRSESz3MoY+s0K6Vs95t
d54nKORETAxPh3cx8T4Wpc1oZIAoE1kyU4eXb8X5B+Nf80FGbH1fTlS+1Lf2Zcwf
kWnmkAvCmfhGxweGvWAZU+McOyjwKsbXBBXqwwvU4x6btN4N9iwGakSLrqDFKW1U
07HvptAOcvd+ULwEEUAQUYFxiCxSSaXZt3yUADaonE97mMBZSV4ipJRF
-----END CERTIFICATE-----
Generated at Fri Oct 11 20:00:59 2024 by rpki-client on console-ams.rpki-client.org