Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/vW_-NTABiOn-mc6hCm-yDFQzXdE.roa
File: vW_-NTABiOn-mc6hCm-yDFQzXdE.roa (raw, json)
Hash identifier: BMIfUuW1HHhNF86oSBzJcBqLTNUBnUJiLDlS+QeHzKw=
Subject key identifier: BD:6F:FE:35:30:01:88:E9:FE:99:CE:A1:0A:6F:B2:0C:54:33:5D:D1
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018DA8C50AB99077F5B2C8744D01D412116E
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/vW_-NTABiOn-mc6hCm-yDFQzXdE.roa
Signing time: Wed 14 Feb 2024 17:58:22 +0000
ROA not before: Wed 14 Feb 2024 17:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.135.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
213.209.145.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 13:12:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a8:c5:0a:b9:90:77:f5:b2:c8:74:4d:01:d4:12:11:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Feb 14 17:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd6ffe35300188e9fe99cea10a6fb20c54335dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e7:53:f2:f3:b8:ea:9b:bc:e4:ad:51:bd:41:
68:c3:0c:20:4b:58:ed:b6:da:32:6b:31:a2:3c:0a:
37:f7:b6:6e:3e:5f:6e:97:b1:1b:52:0f:c7:73:2d:
79:eb:56:8b:f7:2f:40:65:83:ce:95:24:62:aa:f9:
98:35:98:a3:24:14:96:da:9d:bb:a5:ea:89:85:f7:
ba:0b:3b:9b:b6:05:9f:fd:c3:a7:49:af:fd:0b:67:
8f:f4:36:3c:a0:d1:f5:07:f4:a7:7e:19:56:eb:79:
db:77:0c:3b:71:8b:0b:e9:ec:c6:4e:1d:0f:40:e0:
b8:c9:52:8e:52:cd:4d:1c:05:50:9b:b3:82:81:8d:
b8:42:3a:6b:39:84:8e:1b:9e:83:6c:1b:f6:b8:1a:
f1:f0:68:7b:25:6a:98:e6:73:6e:ba:68:71:1f:82:
1c:c7:83:8a:11:cc:6a:30:04:6d:16:61:10:a8:27:
5a:b9:5f:09:03:19:50:99:09:3a:7b:22:6a:de:23:
e1:cf:f6:9b:96:44:7a:3a:ef:e9:7a:0d:9b:e1:b0:
af:a1:d6:48:ed:cd:2e:4d:06:16:e9:23:e0:ed:db:
83:45:d1:47:ef:8e:9d:07:63:f7:77:73:c6:87:83:
a5:ef:f8:a9:1f:14:a1:f2:7e:64:68:93:76:d5:50:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6F:FE:35:30:01:88:E9:FE:99:CE:A1:0A:6F:B2:0C:54:33:5D:D1
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/vW_-NTABiOn-mc6hCm-yDFQzXdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.135.0/24
77.90.138.0/24
213.209.145.0/24
213.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:6f:93:35:4a:f8:1a:bf:b2:70:dd:0f:a3:33:83:ac:b4:17:
21:5b:22:e5:8a:10:89:3f:5d:73:c4:12:70:4a:ce:ee:d1:23:
15:82:0b:6d:fb:7d:ab:87:2e:a9:7f:bd:55:df:fe:33:4e:74:
da:a3:20:94:cf:c2:d1:de:33:0f:25:9e:0c:fb:f4:ca:7b:a0:
a0:45:d8:7a:e3:f9:e4:89:fb:4b:6d:11:18:23:2a:05:d2:76:
15:bc:da:d2:60:3b:90:47:12:cf:62:82:ab:6e:c4:eb:75:3a:
3f:ca:f2:48:3b:6a:19:e7:e4:65:fb:88:e7:a8:65:48:3f:e9:
26:a8:2c:71:84:66:26:cd:fa:53:a6:57:15:bf:55:c4:85:c9:
1e:02:95:c5:76:3b:e5:16:c7:0f:41:68:c4:34:e1:6d:83:25:
17:e8:ec:46:e3:a2:85:78:7d:a6:46:fe:be:f5:d0:57:e8:6c:
04:ea:4e:84:2a:84:2c:d0:98:85:ee:c6:0a:cd:60:56:24:20:
d3:51:25:28:37:61:11:ea:4d:48:68:45:14:0c:ae:6f:65:de:
06:03:ec:d5:89:86:bb:66:12:96:6e:37:a0:c0:99:4d:8c:2b:
8b:0f:54:fa:c5:44:70:49:6f:55:66:a6:79:4d:ec:ef:d7:6e:
8b:5f:c0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 15:34:52 2024 by rpki-client on console-fra.rpki-client.org