Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/F-qWjoFGH7I1Lhar0laLO0miWaA.roa
File: F-qWjoFGH7I1Lhar0laLO0miWaA.roa (raw, json)
Hash identifier: FEhJJ0zhHSCkKFzNEk3qD+Z3R2UWnHcoZJsFKUQutts=
Subject key identifier: 17:EA:96:8E:81:46:1F:B2:35:2E:16:AB:D2:56:8B:3B:49:A2:59:A0
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0194FF72D2F020F668B037A464BE1A0E1248
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/F-qWjoFGH7I1Lhar0laLO0miWaA.roa
Signing time: Thu 13 Feb 2025 13:15:02 +0000
ROA not before: Thu 13 Feb 2025 13:15:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.128.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.139.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 08 Mar 2025 10:54:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ff:72:d2:f0:20:f6:68:b0:37:a4:64:be:1a:0e:12:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Feb 13 13:15:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17ea968e81461fb2352e16abd2568b3b49a259a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f5:ec:1f:92:57:86:6f:cf:90:65:36:c5:c0:
7c:67:7a:13:80:ab:ef:25:fe:a7:71:64:05:4a:29:
6b:a9:46:34:b5:ba:92:92:57:b9:c4:81:14:4c:89:
d9:95:ca:dc:c9:f4:98:1b:b0:dc:53:ca:07:c1:1d:
78:73:a1:16:be:c4:5f:b2:eb:d2:d6:63:79:65:30:
a6:e5:44:4a:a0:8a:b1:37:7e:0a:01:c2:52:7e:19:
ec:ce:41:d6:f7:b9:f2:4f:75:95:33:c6:9c:d3:8c:
7c:5a:4c:8b:43:7e:54:30:6f:cb:62:5f:5b:6e:33:
73:df:2e:17:af:51:73:37:62:97:cb:1f:af:1f:c4:
19:da:7e:f2:33:3e:42:b5:2d:bb:90:e0:5f:6a:73:
5c:97:4b:ad:23:f6:f5:28:70:0a:d0:85:dc:0a:46:
16:3e:2d:62:73:36:41:fa:e3:76:39:b3:88:74:27:
17:81:d0:3d:93:51:22:2d:d1:d5:ca:62:a2:ea:4c:
b4:97:e6:ed:4b:15:b2:cc:21:16:f2:ec:ec:5d:8e:
c0:54:09:6e:ce:60:64:dc:64:28:7b:e4:5b:3d:22:
14:f9:2c:41:2a:48:bc:7a:d8:56:50:92:30:d0:8d:
05:65:7e:d7:b5:16:e0:0d:63:28:37:6d:e1:0c:83:
14:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EA:96:8E:81:46:1F:B2:35:2E:16:AB:D2:56:8B:3B:49:A2:59:A0
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/F-qWjoFGH7I1Lhar0laLO0miWaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.139.0-77.90.140.255
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
213.209.138.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
15:d3:c0:65:92:c2:b3:3d:ee:f6:a9:a1:bf:e7:5f:aa:f4:07:
f0:44:8a:c1:bb:fc:2c:4b:46:41:cb:54:e2:77:93:a0:03:e6:
32:5c:07:85:c4:0b:29:85:10:05:64:02:07:7a:1a:1c:d3:4b:
8a:50:e7:b5:72:53:cf:d1:c9:50:f3:95:53:93:7f:77:ac:59:
f1:9f:e5:1f:b5:ad:70:9d:07:44:3b:f4:f8:ae:76:a2:61:1f:
0f:f7:0e:25:df:7d:96:38:13:a9:7c:ee:76:92:44:de:8a:91:
6e:1c:28:25:2c:10:d6:4f:cd:b7:08:24:9a:d9:c8:d4:b0:fc:
77:71:e4:02:04:fd:1d:76:57:2a:8e:18:5f:d1:96:25:6a:da:
f9:71:61:fe:1a:c3:44:48:e5:a1:a2:2c:f9:f0:b7:fe:21:1a:
a3:0c:ed:69:b1:bc:bf:3d:2e:29:a1:2f:7a:a5:06:a4:ae:db:
92:d0:ba:8e:9d:58:cd:16:9a:a8:35:bc:9d:0d:ff:95:d6:7b:
b7:14:d1:7b:b8:10:6b:2b:97:70:0f:fc:d2:5b:b5:44:a8:8a:
ec:14:ed:b5:e1:5f:a5:6a:fd:08:f6:6e:04:57:6e:d4:7d:34:
7f:d4:2c:00:b1:04:3f:8c:af:bd:34:d1:98:ae:a1:9b:7f:2b:
8c:59:b5:77
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgISAZT/ctLwIPZosDekZL4aDhJIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjUwMjEzMTMxNTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2VhOTY4ZTgxNDYxZmIyMzUyZTE2YWJkMjU2OGIzYjQ5YTI1OWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PXsH5JXhm/PkGU2xcB8Z3oTgKvv
Jf6ncWQFSilrqUY0tbqSkle5xIEUTInZlcrcyfSYG7DcU8oHwR14c6EWvsRfsuvS
1mN5ZTCm5URKoIqxN34KAcJSfhnszkHW97nyT3WVM8ac04x8WkyLQ35UMG/LYl9b
bjNz3y4Xr1FzN2KXyx+vH8QZ2n7yMz5CtS27kOBfanNcl0utI/b1KHAK0IXcCkYW
Pi1iczZB+uN2ObOIdCcXgdA9k1EiLdHVymKi6ky0l+btSxWyzCEW8uzsXY7AVAlu
zmBk3GQoe+RbPSIU+SxBKki8ethWUJIw0I0FZX7XtRbgDWMoN23hDIMUHwIDAQAB
o4ICbDCCAmgwHQYDVR0OBBYEFBfqlo6BRh+yNS4Wq9JWiztJolmgMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvRi1xV2pvRkdIN0kxTGhhcjBsYUxPMG1pV2FBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwWAQCAAEwUjAMAwQHTVqA
AwQATVqCMAwDBAJNWoQDBABNWoYDBAFNWogwDAMEAE1aiwMEAE1ajDAMAwQBTVqO
AwQATVqQMAwDBAFNWpIDBABNWpQDBADV0YowFAQCAAIwDgMFACoEKcIDBQAqBCnH
MA0GCSqGSIb3DQEBCwUAA4IBAQAV08BlksKzPe72qaG/51+q9AfwRIrBu/wsS0ZB
y1Tid5OgA+YyXAeFxAsphRAFZAIHehoc00uKUOe1clPP0clQ85VTk393rFnxn+Uf
ta1wnQdEO/T4rnaiYR8P9w4l332WOBOpfO52kkTeipFuHCglLBDWT823CCSa2cjU
sPx3ceQCBP0ddlcqjhhf0ZYlatr5cWH+GsNESOWhoiz58Lf+IRqjDO1psby/PS4p
oS96pQakrtuS0LqOnVjNFpqoNbydDf+V1nu3FNF7uBBrK5dwD/zSW7VEqIrsFO21
4V+lav0I9m4EV27UfTR/1CwAsQQ/jK+9NNGYrqGbfyuMWbV3
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:20:23 2025 by rpki-client