Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/z-Lbz4UDBczqCARZHpdsllzQ0lk.roa
File: z-Lbz4UDBczqCARZHpdsllzQ0lk.roa (raw, json)
Hash identifier: wA/4RhC+k4+bd2LZft5tmHRWIkt7to3OwbHiUDzQAng=
Subject key identifier: CF:E2:DB:CF:85:03:05:CC:EA:08:04:59:1E:97:6C:96:5C:D0:D2:59
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0195756443798AB7303C0FEA4A06FCE7C597
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/z-Lbz4UDBczqCARZHpdsllzQ0lk.roa
Signing time: Sat 08 Mar 2025 10:54:19 +0000
ROA not before: Sat 08 Mar 2025 10:54:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42821
IP address blocks: 77.90.128.0/24 maxlen: 24
77.90.129.0/24 maxlen: 24
77.90.130.0/24 maxlen: 24
77.90.132.0/24 maxlen: 24
77.90.133.0/24 maxlen: 24
77.90.134.0/24 maxlen: 24
77.90.136.0/24 maxlen: 24
77.90.137.0/24 maxlen: 24
77.90.139.0/24 maxlen: 24
77.90.140.0/24 maxlen: 24
77.90.142.0/24 maxlen: 24
77.90.143.0/24 maxlen: 24
77.90.144.0/24 maxlen: 24
77.90.146.0/24 maxlen: 24
77.90.147.0/24 maxlen: 24
77.90.148.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
213.209.138.0/24 maxlen: 24
2a04:29c2::/32 maxlen: 32
2a04:29c7::/32 maxlen: 32
2a04:29c7:1280:24::/64 maxlen: 64
2a04:29c7:1280:27::/64 maxlen: 64
2a04:29c7:1290:24::/64 maxlen: 64
2a04:29c7:1300:24::/64 maxlen: 64
2a04:29c7:1371:6027::/64 maxlen: 64
2a04:29c7:1420::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Mar 2025 15:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:75:64:43:79:8a:b7:30:3c:0f:ea:4a:06:fc:e7:c5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Mar 8 10:54:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfe2dbcf850305ccea0804591e976c965cd0d259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:24:53:fc:6e:32:cf:03:f4:99:4c:da:37:
82:34:5c:d2:5b:7f:d7:14:26:cc:d1:87:84:55:5d:
b3:e3:6b:89:64:c1:b7:e5:21:d6:34:c6:d4:d9:1e:
6b:f0:b0:f2:a9:12:49:3a:55:af:aa:3a:2c:dd:94:
c2:e0:f5:b5:f4:97:a9:0b:22:2d:93:cd:25:38:fc:
77:20:28:fb:c9:e9:2f:12:90:db:6f:5e:05:3e:2c:
67:c6:6d:e9:4f:d2:3e:ed:db:00:40:4e:0f:44:53:
c1:4f:c6:cd:49:6a:c8:04:27:5d:73:d0:c6:fb:ad:
ad:67:74:e4:08:cf:06:e0:76:42:d2:0c:e2:a1:f6:
00:15:a6:2a:5f:f7:c0:9f:b7:df:a5:5e:ee:f5:ac:
04:59:d7:0d:cb:1f:cb:14:42:e3:81:12:f9:6c:f6:
3b:55:08:78:b4:5a:db:61:bb:a9:65:3d:a8:74:c3:
68:a8:42:69:13:8c:7b:7a:bb:83:88:a5:4a:8b:21:
06:9f:00:84:d8:47:ec:9f:76:bb:c5:2d:dc:95:e2:
d8:25:73:c2:2a:4e:46:02:d2:b7:ee:94:9e:ed:b5:
d2:e8:42:58:52:e8:9f:fb:b3:f6:a0:26:a9:ef:33:
90:10:f6:54:b9:13:7f:fa:73:cf:49:dc:2f:a0:93:
13:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E2:DB:CF:85:03:05:CC:EA:08:04:59:1E:97:6C:96:5C:D0:D2:59
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/z-Lbz4UDBczqCARZHpdsllzQ0lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.128.0-77.90.130.255
77.90.132.0-77.90.134.255
77.90.136.0/23
77.90.139.0-77.90.140.255
77.90.142.0-77.90.144.255
77.90.146.0-77.90.148.255
213.209.130.0/24
213.209.138.0/24
IPv6:
2a04:29c2::/32
2a04:29c7::/32
Signature Algorithm: sha256WithRSAEncryption
44:9c:d4:a3:f9:1f:52:25:f5:a5:90:a7:eb:c0:c5:de:1f:79:
34:bd:ef:5c:ba:da:b2:44:4d:e0:9f:a7:d3:e4:45:60:4a:c3:
60:54:9b:e6:d3:ef:88:ca:95:2e:91:25:35:67:47:df:8a:be:
cc:f2:4f:cb:43:28:34:20:f3:d5:38:81:e7:ed:e2:30:65:74:
d9:8a:f2:75:ca:25:d3:29:a5:a6:10:26:77:b7:ea:32:d1:94:
85:c3:b0:58:cd:39:45:67:70:df:60:16:59:3e:d3:b3:ce:8f:
cf:a5:3d:1b:b8:3a:55:48:69:28:88:a0:5c:4f:7b:d9:7f:11:
85:73:4b:6a:c1:ac:e9:e0:ed:85:8b:a6:cd:7b:b5:ce:f8:8a:
17:1d:82:01:02:ca:4c:8a:d9:fd:1c:20:e6:e2:1e:d6:b8:a7:
1a:08:84:7d:39:58:48:73:ff:f1:3e:6e:4d:d9:71:37:6b:13:
7a:95:fe:85:a3:24:b6:9d:56:02:03:7f:58:4a:d7:7a:76:b0:
fb:f8:56:e2:35:92:5a:cc:8b:b6:2a:f9:2c:a8:69:b9:f8:7e:
12:6f:08:73:09:99:67:f8:1a:9a:f6:32:92:af:a9:dd:f9:65:
ec:81:54:2c:ed:5f:ea:45:54:47:8c:38:53:e7:c9:bc:81:9e:
ec:a8:d3:75
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgISAZV1ZEN5ircwPA/qSgb858WXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjUwMzA4MTA1NDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmUyZGJjZjg1MDMwNWNjZWEwODA0NTkxZTk3NmM5NjVjZDBkMjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV8kU/xuMs8D9JlM2jeCNFzSW3/X
FCbM0YeEVV2z42uJZMG35SHWNMbU2R5r8LDyqRJJOlWvqjos3ZTC4PW19JepCyIt
k80lOPx3ICj7yekvEpDbb14FPixnxm3pT9I+7dsAQE4PRFPBT8bNSWrIBCddc9DG
+62tZ3TkCM8G4HZC0gziofYAFaYqX/fAn7ffpV7u9awEWdcNyx/LFELjgRL5bPY7
VQh4tFrbYbupZT2odMNoqEJpE4x7eruDiKVKiyEGnwCE2Efsn3a7xS3cleLYJXPC
Kk5GAtK37pSe7bXS6EJYUuif+7P2oCap7zOQEPZUuRN/+nPPSdwvoJMT1QIDAQAB
o4ICcjCCAm4wHQYDVR0OBBYEFM/i28+FAwXM6ggEWR6XbJZc0NJZMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvei1MYno0VURCY3pxQ0FSWkhwZHNsbHpRMGxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwXgQCAAEwWDAMAwQHTVqA
AwQATVqCMAwDBAJNWoQDBABNWoYDBAFNWogwDAMEAE1aiwMEAE1ajDAMAwQBTVqO
AwQATVqQMAwDBAFNWpIDBABNWpQDBADV0YIDBADV0YowFAQCAAIwDgMFACoEKcID
BQAqBCnHMA0GCSqGSIb3DQEBCwUAA4IBAQBEnNSj+R9SJfWlkKfrwMXeH3k0ve9c
utqyRE3gn6fT5EVgSsNgVJvm0++IypUukSU1Z0ffir7M8k/LQyg0IPPVOIHn7eIw
ZXTZivJ1yiXTKaWmECZ3t+oy0ZSFw7BYzTlFZ3DfYBZZPtOzzo/PpT0buDpVSGko
iKBcT3vZfxGFc0tqwazp4O2Fi6bNe7XO+IoXHYIBAspMitn9HCDm4h7WuKcaCIR9
OVhIc//xPm5N2XE3axN6lf6FoyS2nVYCA39YStd6drD7+FbiNZJazIu2KvksqGm5
+H4SbwhzCZln+Bqa9jKSr6nd+WXsgVQs7V/qRVRHjDhT58m8gZ7sqNN1
-----END CERTIFICATE-----
Generated at Thu May 1 03:54:18 2025 by rpki-client