Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/34JjoWGGPG9LSWb3lS-hUIGC2Sg.roa
File: 34JjoWGGPG9LSWb3lS-hUIGC2Sg.roa (raw, json)
Hash identifier: Ntm3cSQqTQs4jGdU4MRkDB3jXOMK9hnEvMFyUzugyAA=
Subject key identifier: DF:82:63:A1:61:86:3C:6F:4B:49:66:F7:95:2F:A1:50:81:82:D9:28
Certificate issuer: /CN=7a8746a76cda8369009d28941ef156239c6a63a1
Certificate serial: 018AF60E0138E7D605FEFB282ECCC11D83B6
Authority key identifier: 7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/34JjoWGGPG9LSWb3lS-hUIGC2Sg.roa
Signing time: Tue 03 Oct 2023 15:00:27 +0000
ROA not before: Tue 03 Oct 2023 15:00:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5378
IP address blocks: 84.70.32.0/19 maxlen: 19
84.66.192.0/18 maxlen: 18
90.252.0.0/15 maxlen: 15
90.252.0.0/14 maxlen: 14
84.70.64.0/18 maxlen: 18
84.70.0.0/19 maxlen: 19
84.67.64.0/18 maxlen: 18
90.255.240.0/21 maxlen: 21
90.255.252.0/23 maxlen: 23
84.67.0.0/18 maxlen: 18
90.255.192.0/19 maxlen: 19
84.70.128.0/18 maxlen: 18
84.69.64.0/18 maxlen: 18
81.76.0.0/14 maxlen: 14
84.66.0.0/18 maxlen: 18
84.65.192.0/18 maxlen: 18
90.255.0.0/17 maxlen: 17
84.69.192.0/18 maxlen: 18
84.66.128.0/18 maxlen: 18
84.69.128.0/18 maxlen: 18
90.248.0.0/14 maxlen: 14
84.66.64.0/18 maxlen: 18
84.68.128.0/18 maxlen: 18
84.68.64.0/19 maxlen: 19
90.240.0.0/14 maxlen: 14
84.68.96.0/19 maxlen: 19
84.65.0.0/18 maxlen: 18
84.71.192.0/18 maxlen: 18
84.68.224.0/19 maxlen: 19
84.65.128.0/18 maxlen: 18
90.244.0.0/14 maxlen: 14
84.69.0.0/18 maxlen: 18
84.65.64.0/18 maxlen: 18
84.68.192.0/19 maxlen: 19
90.254.0.0/16 maxlen: 16
84.64.0.0/13 maxlen: 13
84.67.160.0/19 maxlen: 19
84.64.64.0/18 maxlen: 18
84.71.0.0/18 maxlen: 18
84.67.192.0/19 maxlen: 19
90.255.255.0/24 maxlen: 24
84.64.0.0/18 maxlen: 18
84.70.192.0/18 maxlen: 18
84.67.128.0/19 maxlen: 19
84.68.0.0/18 maxlen: 18
84.64.192.0/18 maxlen: 18
84.71.128.0/18 maxlen: 18
84.64.128.0/18 maxlen: 18
84.67.224.0/19 maxlen: 19
84.71.64.0/18 maxlen: 18
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:0e:01:38:e7:d6:05:fe:fb:28:2e:cc:c1:1d:83:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8746a76cda8369009d28941ef156239c6a63a1
Validity
Not Before: Oct 3 15:00:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df8263a161863c6f4b4966f7952fa1508182d928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e0:77:90:d2:b4:82:03:ce:02:ef:11:30:56:
1a:e3:ab:b9:4a:73:95:55:09:37:76:ce:c5:af:17:
7f:ca:a9:ad:ef:26:30:2d:e2:14:f5:5b:74:05:c3:
c1:b0:b9:db:be:3d:5f:00:47:1b:13:e3:ab:80:a5:
fb:df:e4:26:be:f0:89:be:c8:82:fe:09:96:6c:67:
28:fd:7d:b6:59:bf:dd:0d:fc:8a:cd:4e:c0:9b:29:
a5:6e:ed:19:d6:3c:c0:1d:75:01:5f:10:a6:ed:7b:
7c:de:32:fe:df:ab:cc:ec:e8:db:5c:ed:6f:72:01:
40:5d:86:ae:77:a6:bb:ed:6f:48:36:e7:cb:23:6b:
4e:3f:92:2c:2b:96:b6:7b:78:14:2f:d8:d7:36:22:
1c:1a:bb:80:8e:4e:92:34:77:40:6c:4a:69:cc:b8:
33:f5:c4:a2:81:bf:eb:fc:f2:cf:36:6b:79:f9:af:
20:c4:97:9a:eb:75:35:d2:a8:cd:a0:c3:62:56:af:
f0:74:a1:3e:b2:e5:de:cd:f2:06:f2:c1:25:26:73:
4f:23:b8:cb:87:70:13:57:69:19:8f:86:68:49:4a:
7d:1b:cb:33:ce:b6:aa:06:31:bb:ac:3c:2a:b0:68:
b0:67:59:28:75:83:13:32:29:80:4a:02:b1:68:ab:
10:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:82:63:A1:61:86:3C:6F:4B:49:66:F7:95:2F:A1:50:81:82:D9:28
X509v3 Authority Key Identifier:
keyid:7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/34JjoWGGPG9LSWb3lS-hUIGC2Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.76.0.0/14
84.64.0.0/13
90.240.0.0/12
Signature Algorithm: sha256WithRSAEncryption
12:d9:1f:48:49:57:3b:38:d0:bf:f8:af:9b:f1:43:ff:03:0f:
68:9d:5f:90:78:95:14:d3:6a:ba:c6:41:ad:ad:05:a3:34:46:
3a:e1:5f:41:f0:ce:f1:6f:2e:9b:b1:4d:91:5c:ad:3f:2c:56:
8f:ee:86:20:05:06:78:1b:8c:32:79:19:b1:c7:20:43:19:39:
7f:4a:4e:38:0a:6c:55:0f:27:26:e7:c0:2f:f1:f4:39:71:dd:
30:4a:3f:7e:df:47:1c:f1:34:6c:81:b2:49:c7:84:6d:aa:3b:
00:1f:a8:4e:52:65:82:0e:57:d9:f5:4c:e1:c1:d3:83:e8:95:
23:a4:e1:46:03:4e:05:c3:a0:b5:9e:51:30:2c:42:d2:56:3b:
fc:8f:1f:dc:08:90:58:0c:16:d2:c9:02:7a:fe:56:38:c5:2b:
05:b8:44:7b:c1:2c:d1:67:5d:7e:f1:b9:70:c1:92:33:96:ab:
ad:c2:eb:93:3c:87:2a:d7:10:fe:33:83:d0:39:24:16:6f:cb:
69:27:98:8d:08:d3:e5:a3:f9:97:90:ba:6a:a7:7e:7b:eb:ec:
db:8f:0d:88:cd:ed:0c:41:c3:94:f2:77:6d:e0:0f:eb:bc:24:
2a:93:df:b2:6b:18:16:85:89:2f:2a:4e:aa:fd:b9:6a:64:da:
a8:a8:c3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:37 2023 by rpki-client on console.sobornost.net