Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1--_UPrNdE-t193KcbQ5kcrz27FI.roa
File: 1--_UPrNdE-t193KcbQ5kcrz27FI.roa (raw, json)
Hash identifier: cmIWT8HqUv0wPU6azy/S0R3/YB1m/BmIgEHHM773U0g=
Subject key identifier: FB:EF:D4:3E:B3:5D:13:EB:75:F7:72:9C:6D:0E:64:72:BC:F6:EC:52
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01910E71CCC024A4D6F78EC1844F84E0AA0B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1--_UPrNdE-t193KcbQ5kcrz27FI.roa
Signing time: Thu 01 Aug 2024 14:57:04 +0000
ROA not before: Thu 01 Aug 2024 14:57:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197477
IP address blocks: 77.90.11.0/24 maxlen: 24
77.90.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Aug 2024 15:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0e:71:cc:c0:24:a4:d6:f7:8e:c1:84:4f:84:e0:aa:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 1 14:57:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbefd43eb35d13eb75f7729c6d0e6472bcf6ec52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b0:b3:8f:3a:6c:47:5d:68:99:71:41:8e:30:
53:53:4b:9c:1a:15:82:4d:47:3e:3f:ad:c6:69:15:
a5:f5:3c:cd:a3:df:be:34:21:1f:03:68:ce:3b:9f:
ae:dc:ec:16:20:a0:68:01:df:97:52:3e:8b:c8:4a:
98:d5:93:ea:7c:08:84:94:d7:c8:c1:69:e6:0a:c1:
73:71:7f:d1:0c:28:17:a8:38:96:99:18:2d:07:b6:
c7:07:3b:81:14:32:09:9b:60:5e:f9:5b:b7:7b:aa:
51:fe:b0:72:11:f4:a1:68:ba:a0:b0:b1:bd:bc:66:
66:cc:1c:1b:0b:bb:19:eb:67:d2:cb:7a:27:30:df:
b4:17:c0:2e:38:fd:e1:f2:17:b5:e8:88:04:a3:70:
82:1b:b9:dd:a1:af:1a:68:ea:40:2e:6e:f0:4c:09:
c3:b8:3b:11:3e:60:5d:be:55:a0:be:89:6f:97:af:
2b:b9:67:dd:76:8a:2d:13:33:d3:8b:15:23:77:34:
60:ca:24:84:33:1d:29:fc:56:24:fe:99:a2:61:a0:
a7:0b:a2:0c:2a:aa:16:dc:60:9c:ec:77:2b:f8:07:
95:de:09:88:d4:2f:36:d4:c6:1a:7f:ff:12:3d:11:
b9:87:b8:c4:d3:93:97:fa:f5:ce:89:9c:7e:ff:04:
bd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EF:D4:3E:B3:5D:13:EB:75:F7:72:9C:6D:0E:64:72:BC:F6:EC:52
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1--_UPrNdE-t193KcbQ5kcrz27FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.11.0/24
77.90.50.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:a6:74:52:eb:d1:5a:b9:ee:47:5d:b9:bb:72:00:05:66:be:
62:b2:5d:a9:ad:c6:a5:53:22:06:10:51:18:86:56:67:98:17:
bd:73:1d:f6:20:9d:78:9e:cf:c8:77:ea:94:8d:24:7b:5a:7e:
b4:62:ba:5a:7b:41:db:f5:29:c3:6c:78:7e:24:ea:c5:4a:b2:
6f:98:69:0a:04:43:dc:29:c5:fb:74:74:ca:68:4f:d3:10:aa:
d8:a9:05:30:5d:b8:86:68:aa:ea:22:45:77:de:a1:94:01:47:
d8:e9:94:5e:95:60:6a:d6:9d:71:da:7a:85:52:8a:b9:68:0a:
10:e2:89:a7:d2:56:13:ad:1b:89:b2:c4:ea:91:be:94:62:7a:
a7:68:09:1f:09:24:f1:3f:aa:d3:f5:9a:48:c6:84:39:27:de:
c4:24:21:e9:59:08:0b:82:34:fb:e2:0c:eb:7e:b6:a8:83:f6:
0b:07:8b:ff:93:1d:a3:a5:16:2c:cb:db:61:d2:07:74:58:9a:
a8:9b:40:ff:a4:38:51:09:36:f1:0a:bb:1d:8e:b5:ee:02:c0:
68:6b:8b:bf:6b:ff:2d:5b:b0:44:f5:fb:ed:81:24:08:5e:53:
93:1a:8c:ba:2d:b4:b6:38:a9:04:50:29:ff:b3:3a:ee:6d:bb:
be:54:5d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 18:53:12 2024 by rpki-client on console-ams.rpki-client.org