Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8G2PCbRuGQWss5WWSElF8h1u-Og.roa
File: 8G2PCbRuGQWss5WWSElF8h1u-Og.roa (raw, json)
Hash identifier: /pdssgBKqH7dYz4pBQPmRkaNHSgAjhKPEVF5rLopz0Q=
Subject key identifier: F0:6D:8F:09:B4:6E:19:05:AC:B3:95:96:48:49:45:F2:1D:6E:F8:E8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192EB499889DFBFA4A139D59823202EF3C5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8G2PCbRuGQWss5WWSElF8h1u-Og.roa
Signing time: Sat 02 Nov 2024 05:12:01 +0000
ROA not before: Sat 02 Nov 2024 05:12:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197477
IP address blocks: 77.90.10.0/24 maxlen: 24
77.90.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Nov 2024 11:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:eb:49:98:89:df:bf:a4:a1:39:d5:98:23:20:2e:f3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 2 05:12:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f06d8f09b46e1905acb39596484945f21d6ef8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:a0:99:4c:4b:b8:bc:0e:f5:88:85:39:a3:
1f:60:5f:f7:49:63:14:b8:03:99:9c:87:00:ff:46:
a1:f6:ff:2d:3f:fd:d6:56:f7:a8:97:c6:20:a4:48:
1c:b3:a9:37:9e:08:00:40:92:b1:a1:02:50:b8:c8:
1d:35:5e:d4:4b:f2:4f:1a:c5:59:e6:06:94:82:12:
35:cd:f4:bb:7f:c1:eb:a5:ae:00:e4:0a:fa:34:0b:
ee:ff:fa:78:3c:fd:14:04:e2:2b:c6:c1:a3:a1:2f:
9c:2a:39:95:8e:e7:6e:94:ab:52:76:d8:38:42:ba:
fd:21:b8:94:7a:11:fa:07:92:b0:79:71:c4:0a:b9:
94:3a:6d:08:8c:c8:90:9a:f8:07:6b:02:1f:a4:0b:
81:b4:93:a8:8e:98:da:be:f8:52:0a:d8:0c:99:43:
a3:ce:8e:6e:20:09:c0:84:ff:e2:2b:0c:bd:41:0e:
94:29:25:32:25:68:cd:60:2c:96:1d:6b:a5:4d:f3:
a1:5a:01:6d:1f:23:a6:7e:0f:4e:a2:74:a4:2e:32:
36:28:e8:ab:6c:b9:c5:93:8c:56:a1:6b:53:d5:34:
a8:68:6b:c4:69:d0:15:e1:e4:32:71:f4:14:5a:dc:
b0:60:dc:46:33:2f:4f:19:eb:f8:01:d6:53:75:fc:
76:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:6D:8F:09:B4:6E:19:05:AC:B3:95:96:48:49:45:F2:1D:6E:F8:E8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8G2PCbRuGQWss5WWSElF8h1u-Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.10.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:a5:c1:76:58:57:f4:76:bd:df:0c:31:2b:cf:07:f0:db:07:
fb:4b:2a:2f:8e:90:cd:6f:c2:dc:f0:6a:39:b1:aa:87:ca:e5:
92:7e:e8:1d:e0:fe:08:22:94:66:a5:2b:92:86:79:98:fc:4f:
60:be:4d:9b:db:5a:02:f7:96:5f:b2:97:60:da:0e:61:41:50:
78:9e:c6:d3:ff:2a:50:0f:52:42:8e:ea:4a:6f:a9:33:49:e0:
5b:96:77:54:d4:46:d7:65:fe:8b:96:2f:b8:d2:6b:8c:5d:26:
71:16:65:4b:7e:64:9e:09:64:3b:f0:51:f8:1b:21:d4:a0:cd:
b9:03:1e:d8:8a:7c:50:63:3e:35:92:8b:23:6e:bc:c3:a4:d2:
b8:6f:bc:15:eb:99:b5:36:bb:05:d7:d9:b2:10:be:f5:26:6f:
5b:9c:46:8d:f5:9b:e0:d8:e2:7f:4b:c4:c8:61:4f:2d:f9:7f:
98:85:89:83:f9:bb:e3:99:26:8d:50:b0:96:b5:1f:63:e0:88:
82:99:bf:31:7b:97:7c:27:7f:bd:66:2b:70:02:50:21:bf:30:
0a:fd:0b:e4:6a:62:c9:c5:f3:31:73:74:6f:13:b8:6e:dc:47:
72:08:8e:72:71:f3:ed:12:6d:90:bb:c6:9b:66:24:d5:0d:9b:
47:cd:48:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 14:42:34 2024 by rpki-client on console-ams.rpki-client.org