Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1TcXgpPUXY8BDoDo0jEashenaI4.roa
File: 1TcXgpPUXY8BDoDo0jEashenaI4.roa (raw, json)
Hash identifier: CDXCFG2VD1Z8fh4xMPkvxKlmu0tA5s+GkCJoERL1WAc=
Subject key identifier: D5:37:17:82:93:D4:5D:8F:01:0E:80:E8:D2:31:1A:B2:17:A7:68:8E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01922871A3D987E61D3BC199DE87E981A771
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1TcXgpPUXY8BDoDo0jEashenaI4.roa
Signing time: Wed 25 Sep 2024 09:09:48 +0000
ROA not before: Wed 25 Sep 2024 09:09:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214243
IP address blocks: 77.90.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 14:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:28:71:a3:d9:87:e6:1d:3b:c1:99:de:87:e9:81:a7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 25 09:09:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d537178293d45d8f010e80e8d2311ab217a7688e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:87:79:f9:06:7e:5c:d3:dc:95:5b:53:89:
e6:16:43:27:39:88:2e:f9:d6:77:32:89:c6:1b:2b:
23:c4:85:80:d2:7c:72:e5:f5:bc:82:da:81:5d:17:
ed:ce:fc:be:73:b6:f7:2f:43:39:fe:e4:bd:14:b6:
3a:5a:ef:c2:ae:ef:6a:99:4f:2f:37:fa:61:12:44:
5d:58:e4:16:7a:4a:4e:43:d5:91:4f:69:3c:59:c1:
81:b1:de:74:7a:2e:e6:fc:ed:48:cc:6f:92:40:59:
fa:c5:7c:ad:03:8d:06:87:3f:6e:9d:5a:2f:73:91:
ef:b4:3a:df:67:60:e9:d3:dc:2e:a6:c4:4b:90:16:
ee:a2:89:8d:02:57:eb:12:ad:94:b5:92:4e:bb:2a:
3d:09:22:8b:06:18:50:38:f1:59:61:a3:2e:55:16:
7c:5f:92:80:3f:59:9f:47:92:06:12:74:e9:c6:b7:
c4:e7:b4:d0:5f:9c:29:4c:19:8c:db:7c:b7:ef:c1:
37:37:03:af:eb:3f:45:a2:a7:15:fe:16:db:68:d6:
04:60:0b:b9:f0:87:8d:19:99:85:e1:d7:81:19:93:
8a:b6:71:06:64:8f:f3:c6:0a:a1:70:dd:11:e8:f6:
3c:68:68:66:2a:4b:a3:6c:16:5d:af:54:09:08:1f:
a1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:37:17:82:93:D4:5D:8F:01:0E:80:E8:D2:31:1A:B2:17:A7:68:8E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1TcXgpPUXY8BDoDo0jEashenaI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.4.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:96:4b:03:ff:6b:e0:12:74:0b:8f:91:5a:76:fa:a9:fd:f0:
76:52:3b:7d:fb:e1:2b:68:89:9f:73:52:ef:33:f1:dd:11:cd:
5e:25:8b:63:f1:16:cc:79:31:32:bb:9d:48:9c:a5:d6:38:bd:
93:25:07:de:24:da:74:33:9c:bf:32:97:a5:ae:bc:06:b1:cf:
c7:89:19:6b:7f:7d:34:14:ba:c1:10:4d:6c:aa:26:9d:47:fb:
47:43:4a:34:02:25:0e:43:30:89:4f:61:ed:cf:2b:10:29:05:
58:1b:dc:89:50:5e:78:2d:b0:35:ee:9e:93:79:45:da:11:ae:
53:9d:58:85:38:c5:71:74:08:ed:a6:cd:cc:d0:f8:0f:43:66:
55:98:ec:40:b0:78:ea:8b:f9:29:f7:38:79:f8:8d:0e:24:02:
f3:cf:36:fa:bf:eb:9b:66:f7:6d:44:9f:f4:51:41:33:45:19:
89:0c:40:38:e8:82:50:bc:b2:01:01:83:38:85:5f:d9:f4:72:
db:3f:09:ec:54:31:ab:ba:e9:2e:c2:2e:ca:19:cd:20:2a:7e:
82:0a:f1:ae:5d:a7:8d:ce:29:70:4e:c3:12:ac:9c:65:4a:95:
75:51:26:b9:a7:e4:29:5d:e6:72:24:75:a5:19:9e:a7:2b:0b:
84:da:ed:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 16:32:39 2024 by rpki-client on console-fra.rpki-client.org