Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/64eNtoOfAbnjVXX9rjAKgw99WYU.roa
File: 64eNtoOfAbnjVXX9rjAKgw99WYU.roa (raw, json)
Hash identifier: 59PlTeNfnFaLTzv01Za+HCiP3r2BQ/seqfCK+2fuJqU=
Subject key identifier: EB:87:8D:B6:83:9F:01:B9:E3:55:75:FD:AE:30:0A:83:0F:7D:59:85
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019087FC03DD328931141744E49364239795
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/64eNtoOfAbnjVXX9rjAKgw99WYU.roa
Signing time: Sat 06 Jul 2024 12:19:18 +0000
ROA not before: Sat 06 Jul 2024 12:19:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216084
IP address blocks: 5.83.155.0/24 maxlen: 24
77.90.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 21:58:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:87:fc:03:dd:32:89:31:14:17:44:e4:93:64:23:97:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 6 12:19:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb878db6839f01b9e35575fdae300a830f7d5985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:20:e1:6d:99:61:ed:7c:74:a7:a5:d0:15:a5:
e1:bc:cd:2f:d5:46:64:f9:54:b6:c4:16:e4:2c:dc:
04:7e:99:85:11:12:a4:52:44:fd:6a:12:f1:5b:0f:
ca:8e:ac:b0:a6:3d:26:cf:dd:cc:39:30:5a:06:2e:
ce:a7:ee:e7:4e:12:6b:7d:33:9d:bb:50:6c:66:6b:
ee:8a:3f:23:e5:dd:f4:38:41:db:57:22:c0:9e:bc:
af:65:9a:3c:0b:47:45:54:2d:bc:47:5f:80:c8:4f:
2a:da:29:e7:99:9e:fe:a7:77:de:8e:35:3d:c0:b5:
92:ca:7c:09:24:bf:3c:85:9e:23:2d:2c:fd:7d:26:
84:16:35:d8:d9:03:e8:32:82:e1:15:5a:01:48:97:
ca:2c:7b:bc:fd:47:44:0c:07:0d:bc:48:b7:e5:07:
d4:a6:3d:01:1a:b2:94:76:17:c8:ed:b2:33:06:84:
04:ca:8a:af:d8:24:a8:b3:42:80:83:56:d8:35:2d:
c9:06:96:8a:55:21:ea:f4:e1:4f:2f:80:bb:96:53:
ce:b0:ae:d3:3b:8b:af:c2:60:0e:08:77:e9:f6:22:
db:09:10:92:0d:b8:ee:94:8d:52:f9:9f:3f:9f:2c:
68:35:7b:ed:a1:b7:a3:72:4e:f9:c7:98:ad:bd:c7:
e5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:87:8D:B6:83:9F:01:B9:E3:55:75:FD:AE:30:0A:83:0F:7D:59:85
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/64eNtoOfAbnjVXX9rjAKgw99WYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.155.0/24
77.90.62.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:ce:f3:f5:3e:28:22:2c:06:56:11:b1:91:40:96:0f:5a:94:
21:9e:79:76:67:09:5e:58:00:b2:f2:a4:b6:13:3d:6b:f0:40:
dd:c2:1e:bb:ca:2e:9b:e2:c1:2f:9b:20:48:81:a9:d6:fe:ea:
79:f0:ff:58:cd:e4:c9:1e:86:a8:3a:31:54:8c:ae:fc:58:6e:
f3:3f:6f:65:39:49:1b:4d:c5:54:9d:a6:ed:2d:0d:8a:2e:15:
ee:94:29:87:9a:c3:89:9c:78:7c:1e:0d:3e:34:b3:49:aa:6e:
cb:da:a4:79:ff:43:4a:2f:c2:0c:98:72:d2:33:7d:47:c5:ce:
9b:ae:40:0a:7c:c9:58:47:a4:62:cf:9b:f0:30:9c:2d:a2:a2:
d8:4a:7e:ed:c0:77:d4:96:2a:8a:a4:d3:05:1c:e3:59:8c:5f:
9a:f4:65:41:91:b5:4e:e8:0c:b1:11:c4:3e:b0:9b:b2:0b:3d:
9d:42:9e:06:27:6d:5f:99:30:49:ea:05:b9:ec:23:da:ef:a3:
49:9e:79:c5:ae:89:62:9d:f4:f5:cf:f1:1f:77:8e:62:9d:5f:
7d:fa:7f:81:f7:49:e6:02:68:bb:13:ff:a9:12:13:b7:05:f4:
05:2e:ee:87:2c:0c:9c:14:35:4a:73:eb:a6:92:90:a8:5e:b4:
ee:d6:39:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 23:41:05 2024 by rpki-client on console-fra.rpki-client.org