Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/FXtfvwuACPREVx2WVjpXOJvFCBw.roa
File: FXtfvwuACPREVx2WVjpXOJvFCBw.roa (raw, json)
Hash identifier: Kj5iEd8RGItuj/7vKp5voAHYikuXfUrvsQLTVZwPVpE=
Subject key identifier: 15:7B:5F:BF:0B:80:08:F4:44:57:1D:96:56:3A:57:38:9B:C5:08:1C
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01936EF01CB1B14DD0EEE79089CAB3CE2C04
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/FXtfvwuACPREVx2WVjpXOJvFCBw.roa
Signing time: Wed 27 Nov 2024 18:44:09 +0000
ROA not before: Wed 27 Nov 2024 18:44:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.128.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.139.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 27 Dec 2024 22:14:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6e:f0:1c:b1:b1:4d:d0:ee:e7:90:89:ca:b3:ce:2c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Nov 27 18:44:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=157b5fbf0b8008f444571d96563a57389bc5081c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:2a:89:19:7f:be:42:3e:b6:ad:1f:ee:1c:
12:8e:d0:7a:dd:ae:9b:cf:1f:01:4e:4c:fe:37:25:
28:95:fc:7b:53:98:6e:ee:ed:2e:8b:f3:32:99:92:
41:ef:68:28:16:45:49:50:cb:97:79:b4:7d:28:37:
20:e3:04:55:91:fb:fd:9b:a3:55:d3:a5:1f:be:38:
50:38:91:14:df:68:e4:56:15:06:34:c5:3d:d7:f5:
f5:e6:f7:d7:c1:e3:2d:3e:24:7a:fb:73:de:46:21:
63:c1:a2:5f:f9:33:e7:86:2f:d5:b3:b5:73:47:56:
e2:ed:0f:27:fb:de:5a:58:09:39:a7:bb:f8:b9:bd:
89:d5:bb:9c:66:f5:cc:d7:b6:1a:a5:ea:52:a0:4b:
6d:0a:df:8c:9f:15:5c:fc:de:c0:6f:7e:d4:83:df:
67:12:ef:89:7d:f5:db:42:d5:78:1b:5c:7a:1e:ab:
f4:1a:ac:72:29:32:ab:83:9f:63:e6:b1:cd:ef:d6:
42:2e:8a:5e:7f:cc:dd:40:82:26:0a:ef:e4:9e:bf:
09:0d:1d:0e:44:60:ac:75:57:5e:fc:56:96:1d:d1:
72:92:b6:2c:17:11:79:ba:9a:89:53:1b:12:77:09:
9c:de:36:30:88:ae:0e:ac:ee:4c:60:19:a6:0f:b0:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7B:5F:BF:0B:80:08:F4:44:57:1D:96:56:3A:57:38:9B:C5:08:1C
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/FXtfvwuACPREVx2WVjpXOJvFCBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.139.0-77.90.140.255
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
213.209.129.0/24
213.209.138.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
53:f6:75:f1:4f:c9:1d:36:fb:af:01:71:d0:d6:cb:ee:99:dc:
6e:e6:5c:3b:d2:3c:72:71:9d:14:c4:38:88:8f:93:29:09:5e:
86:7e:7c:22:60:38:a0:b9:dd:87:2e:52:55:6a:ce:80:7c:df:
d6:76:4c:3b:b2:bd:94:37:49:00:7c:10:18:9c:dc:8c:e2:93:
85:5e:a4:a7:79:37:32:63:13:96:25:73:62:16:c8:c2:1e:84:
a1:3b:44:16:71:c6:91:aa:b5:88:20:ef:b0:e7:e7:93:b6:fb:
f3:ce:07:ed:2a:19:b1:58:7b:0b:be:14:ad:28:d5:ae:b4:aa:
fc:f1:de:ae:ce:4f:cd:60:34:5a:29:95:29:3e:ac:3f:7b:83:
fa:3f:72:e2:6f:ef:a3:cb:7a:bb:8b:2b:64:78:b6:79:35:a5:
9f:f8:0f:ae:80:ce:89:ef:38:24:52:e0:1c:71:30:6f:ae:c8:
8c:4a:ce:66:4d:c3:8f:a5:8f:d4:ac:7c:df:fd:14:03:8c:9c:
d4:06:66:74:5b:f0:3b:ae:11:ae:30:6f:7d:8b:ce:29:48:6d:
76:5d:01:e5:2c:1e:87:05:0e:62:f8:a9:94:c8:32:a4:b0:ad:
ea:b1:f3:88:a7:32:be:1c:c1:60:3c:c6:2e:7d:9b:e9:30:3d:
0a:02:35:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:27:09 2025 by rpki-client